This policy explains what personal information Foremate collects, why, who we share it with, and the choices you have. We handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
Foremate is operated by a sole trader in New South Wales, Australia, trading as "Foremate". We are the entity responsible for the personal information described here. The best way to reach us about privacy is hello@foremate.com.au.
We collect information you give us and information generated as you use the service:
| Category | Examples |
|---|---|
| Account details | Your name, email, business name and (optionally) ABN, address and business details; a securely hashed password. |
| Content you enter | Jobs, quotes, contracts, variations, progress claims, invoices, costs, day logs, photos, safety documents (SWMS), and the client and worker details attached to them. |
| Client & worker information | Contact and contract details of the clients and workers you add to a job — provided by you. |
| Payment information | Subscription and billing status. Card payments are handled by Stripe — we do not see or store your full card number. |
| Documents you send in | Bills, receipts and attachments you email or upload to your inbox for AI reading and filing. |
| Usage & technical data | IP address, device/browser type, log and diagnostic data, and the pages/actions you use, for security and to run the service. |
| Sign-up attribution | Referral and campaign parameters (e.g. UTM tags, referrer) captured when you first arrive, to understand where sign-ups come from. |
You don't have to give us more than we need. If you don't provide account details, we can't create or run your account.
We use personal information to:
We do not sell your personal information, and we don't use your business content to train third-party AI models (see section 4).
Foremate's AI features (drafting contracts, SWMS and quotes; reading bills; daily briefings; the in-app assistant) work by sending the relevant content — and only the content needed for that task — to our AI provider, Anthropic, to generate a response. This happens server-side; our AI key is never exposed to your browser.
We instruct the AI to use only the data provided for your task. Content sent through the Foremate app to Anthropic's API is not used by Anthropic to train its models. AI output is generated for you and returned into your account.
We share personal information only with the service providers we need to run Foremate, and only for that purpose. We don't sell or rent it, and we don't share it for anyone else's marketing.
| Provider | Purpose |
|---|---|
| Render | Cloud hosting and database storage for the application. |
| Stripe | Subscription billing and card payment processing. |
| Anthropic | AI processing for the features described in section 4. |
| Resend | Sending transactional email and receiving the bills you email in. |
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety or property of Foremate, our users or others.
Some of our providers store or process data on servers outside Australia, including in the United States (for example, Anthropic and Stripe operate in the US, and our hosting may use overseas regions). By using Foremate you acknowledge your information may be stored or processed overseas. We take reasonable steps to use reputable providers with appropriate safeguards.
When you add clients or workers to a job, you provide their personal information to Foremate. In that case:
Worker (crew) logins are money-free by design and can't see rates, invoices or contract figures.
We take reasonable steps to protect personal information, including encrypted connections (HTTPS), hashed passwords, signed session cookies, per-account data isolation, access controls, and regular backups. No online service can be completely secure, so we can't guarantee absolute security — but we work to reduce the risk and to respond quickly if something goes wrong.
We keep your information for as long as your account is active and for a reasonable period afterwards, so you can reactivate, and to meet legal, tax and record-keeping obligations. You can export your data at any time using the Job Pack export. When information is no longer needed, we take reasonable steps to delete or de-identify it. You can ask us to delete your account and data — see section 11.
Foremate uses a signed session cookie to keep you logged in, and stores small preferences (like your theme and dismissed prompts) in your browser's local storage. We don't use third-party advertising or cross-site tracking cookies. You can clear these through your browser, but the service won't work properly without the session cookie.
You can:
To make a request, email hello@foremate.com.au. We'll verify it's you and respond within a reasonable time. Some information may be retained where the law requires it.
If a data breach that's likely to cause serious harm occurs, we'll take reasonable steps to contain it and will notify affected users and, where required, the Office of the Australian Information Commissioner (OAIC), consistent with the Notifiable Data Breaches scheme.
Foremate is a business tool intended for people aged 18 and over. We don't knowingly collect personal information from children.
We may update this policy as Foremate or our providers change. If we make a material change we'll give reasonable notice by email or in-app. The "Last updated" date shows the current version.
For any privacy question, request or complaint, contact us at hello@foremate.com.au. We'll work with you to resolve it. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.