Privacy Policy.

We collect the following types of personal information:

• Business contact details — your name, business name, phone number, email and address when you sign up or enquire.
• Voice recordings and transcripts — when you use the voice-to-quote feature, we capture your audio and the text transcript we generate from it.
• Lead and enquiry data — names, contact details and job descriptions of your trades business's own customers ("end leads") that come through Kynetic.
• Payment and billing information — processed by third-party payment processors; we don't store full card numbers ourselves.
• Usage data and logs — IP address, browser, pages visited, and which features you use.
• Communications — emails, support chat messages, and call recordings (only with your consent).
• Information from integrations — data from third-party tools you connect, such as Tradify, Fergus, ServiceM8, simPRO, Xero, Gmail, Outlook, Facebook, Instagram, WhatsApp, Twilio and Slack.

• Directly from you when you sign up, use the service or contact support.
• Automatically via cookies, analytics and server logs when you use the platform.
• From third-party integrations you choose to connect to your Kynetic account.
• From your end customers and leads when they contact your business through channels Kynetic monitors — website forms, social DMs, missed calls, SMS and similar.

We collect personal information for these primary purposes:

• Providing and operating the Kynetic platform.
• Processing voice recordings to generate quotes and invoices.
• Automatically responding to, qualifying and following up your leads.
• Integrating with your job management software.
• Billing, invoicing and account management.
• Customer support.
• Product improvement and AI model training. You can opt out of having your content used to train our models at any time by emailing privacy@kynetic.agency.
• Meeting legal and regulatory obligations.
• Marketing communications about Kynetic features and updates. You can opt out at any time using the unsubscribe link in any email or by contacting us.

We share personal information only where it's necessary to run the service or required by law:

• Sub-processors and infrastructure providers — cloud hosting, AI/LLM providers, payment processors and analytics tools. Each is engaged under a data processing agreement that requires them to protect your information.
• Integrations you connect — such as Tradify, Fergus, ServiceM8, simPRO, Xero, Gmail, Outlook, Facebook, Instagram, WhatsApp, Twilio and Slack. We only share data with these tools because you connected them.
• Legal disclosure — where we are required by law, or where disclosure is necessary to protect our rights, your safety, or the safety of others.

We do not sell personal information to third parties.

Cross-border disclosure. Some of our providers process data in the United States, the European Union and other countries. For Australian users, this disclosure is made under Australian Privacy Principle (APP) 8. For New Zealand users, it's made under Information Privacy Principle (IPP) 12. We take reasonable steps to ensure overseas recipients handle your information in a way that is consistent with applicable privacy laws.

We use three types of cookies and similar technologies:

• Essential — required for login, security and core platform functionality.
• Analytics — to understand how the platform is used so we can improve it.
• Marketing — to measure the performance of our advertising.

You can manage or disable cookies in your browser settings. Turning off essential cookies may break parts of the platform.

• We retain your personal information for as long as your account is active or as needed to provide the service.
• Voice recordings are retained for 90 days unless you request earlier deletion. Generated transcripts and quotes are retained alongside your job records.
• After you close your account, we delete or anonymise your personal information within 90 days, except where we are legally required to keep it longer (for example, tax and financial records).
• Lead data is retained according to the retention settings on your account.

We use industry-standard security measures including encryption in transit and at rest, access controls, and regular security reviews.

No method of transmission or storage over the internet is 100% secure, so while we work hard to protect your information, we cannot guarantee absolute security.

If a data breach occurs that is likely to cause serious harm, we will notify affected individuals and the relevant regulator in line with the Australian Notifiable Data Breaches (NDB) Scheme (Privacy Act 1988, Part IIIC) and the breach notification obligations of the New Zealand Privacy Act 2020 (sections 113–120).

If you're in Australia, the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs) give you the right to:

• Access the personal information we hold about you (APP 12).
• Correct information that is inaccurate or out of date (APP 13).
• Ask how we handle your data.
• Opt out of direct marketing at any time (APP 7).
• Make a complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we've breached the APPs.

If you're in New Zealand, the Privacy Act 2020 and its 13 Information Privacy Principles (IPPs) give you the right to:

• Access the personal information we hold about you (IPP 6).
• Request correction of personal information (IPP 7).
• Know why we're collecting your information (IPP 3).
• Opt out of direct marketing.
• Make a complaint to the Office of the Privacy Commissioner (OPC) at privacy.org.nz if you believe we've breached the IPPs.

Note: the New Zealand Privacy Act 2020 replaced the 1993 Act and came into force on 1 December 2020.

Kynetic is built for trades businesses and isn't directed at people under 18. We don't knowingly collect personal information from minors. If you believe a minor has provided us with information, contact us and we'll delete it.

We may update this policy from time to time. If we make material changes, we'll let you know by email or with an in-app notice before they take effect. Continued use of Kynetic after the changes means you accept the updated policy.

To exercise any of your rights, ask a question about this policy, or raise a complaint, email privacy@kynetic.agency.

We'll respond within 30 days, as required by both Australian and New Zealand law.

If you're not happy with our response, you can take it further with the OAIC in Australia (oaic.gov.au) or the OPC in New Zealand (privacy.org.nz).