Privacy Policy

Last updated 26 September 2026

The Tech Company Group (ABN 60 997 507 184) operates TCG Invoice, an invoicing service for small businesses and trades. This policy explains what personal information we collect, why, who we share it with, and what you can do about it. It is written to meet our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Two kinds of people appear in this policy, and the distinction matters throughout: you, the business that signs up for an account, and your clients, the people you invoice. We handle information about both, but in different roles.

Information we collect about you

• Account details — your email address, and your mobile number if you choose to sign in that way.
• Business details — business name, business email, country, ABN, and whether you are registered for GST.
• Payment details for your subscription — handled by Stripe. We never see or store your card number; we hold only a customer reference and your current plan.
• Bank details you choose to show on invoices — if you enable bank transfer, the account details you enter are stored so they can be printed on the invoices you send.
• If you sign in with Google or Apple — your name and email address from that account. With Sign in with Apple you can choose to hide your email, in which case we receive a private relay address instead.
• Your business address, if you set up Tap to Pay — Stripe registers in-person card payments against a business location, so we pass it to Stripe.
• Job descriptions for AI drafting — when you use “Describe the job”, the words you type or say, together with the descriptions and prices of items you have invoiced before, are sent to our AI provider to suggest line items.
• Technical information — server logs recording requests to the service, including IP address and timestamps, kept for security and troubleshooting.

Information you give us about your clients

When you create a client or issue an invoice, you provide us with that person's name, and typically their mobile number or email address so we can deliver the invoice. We hold this information on your behalf. We do not market to your clients, sell their details, or use them for any purpose other than delivering and processing the invoices you send.

You are responsible for having a proper basis to give us your clients' details, and for the accuracy of what you enter.

The TCG Invoice phone app

The phone app uses the same account and data as the website. It also asks your phone for a few permissions. Each is asked for only when you use the feature that needs it, and you can turn any of them off in your phone's settings:

• Location — only while you take a Tap to Pay card payment, because Stripe checks where in-person payments are taken. We do not track or store your location, and it is never collected in the background.
• Microphone and speech recognition — only while you tap “Speak the job”. Your phone's own speech service (Apple or Google) turns your words into text; we receive the text, not the recording.
• Face ID, Touch ID or fingerprint — to sign you in if you turn it on. This is handled entirely by your phone. We never receive your face or fingerprint data.
• NFC — used by Stripe during a Tap to Pay payment to read your client's card or phone. Card details go to Stripe and never reach our systems.

The app does not contain advertising, and it does not share data with advertisers or data brokers.

How we use information

• To provide the service — creating, sending and tracking invoices.
• To send invoices to your clients by SMS or email, on your instruction.
• To take payment for invoices through Stripe or Paystack, including in person with Tap to Pay, and to bill you for your subscription.
• To suggest line items from a job description, when you ask for it.
• To authenticate you when you sign in.
• To tell you about your account and changes to our terms or the service, using your business email. We don't send marketing to it without asking.
• To respond when you contact us for support.
• To keep records we are required by law to keep, and to detect and prevent misuse.

We do not sell personal information, and we do not use your invoice data or your clients' details to train machine learning models. Our AI provider processes job descriptions only to return a suggestion and, under its commercial terms, does not use them to train its models.

Who we share information with

We use a small number of service providers to run TCG Invoice. Each receives only what it needs to do its job:

Some of these providers store or process information outside Australia, which means personal information may be disclosed to overseas recipients (APP 8). We take reasonable steps to ensure they handle it consistently with the APPs, but their handling is also governed by their own terms and the laws of the countries they operate in.

We may also disclose information where we are required or authorised by law, or where it is necessary to investigate suspected fraud or misuse.

Security

Data is transmitted over encrypted connections and stored in databases with access controls that restrict each account to its own records. Payment card details never reach our systems. No system is perfectly secure, and we do not claim otherwise — but we take reasonable steps to protect information from misuse, loss, and unauthorised access.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

How long we keep information

We keep your account and invoice records for as long as your account is open, and for a period afterwards where we are required to — tax and business records generally must be kept for five years under Australian law. When we no longer need information and are not required to keep it, we delete or de-identify it.

Accessing and correcting your information

You can view and correct most of your information directly in the app, under Settings and in your client and invoice records. Under Settings you can also download your data as spreadsheets, and delete your account.

Deleting your account removes your sign-in immediately. If nobody else belongs to your business, it also deletes the business and all of its clients, quotes, invoices and payment records, and cancels a subscription paid on the website. A subscription bought in the phone app is billed by Apple or Google and must also be cancelled in your phone's subscription settings. If others belong to the business, it stays with them. Because you may need to keep tax records for five years or more, download your data before deleting. Copies in our backups are removed as those backups expire.

Step-by-step instructions, including how to ask by email if you can't sign in, are on our Delete your account page.

For anything you cannot do yourself — including a copy of the personal information we hold about you — email privacy@thetechcompanygroup.com. We will respond within a reasonable period, normally 30 days.

If your client asks you to correct or delete their details, you can do that yourself in the app. If they contact us directly, we will generally refer them to you, since the information is yours to manage.

Cookies and tracking

We set cookies that are necessary for the service to work — principally to keep you signed in. We do not use advertising cookies or third-party tracking pixels inside the application. Emails we send you may record whether they were opened or delivered, which we use to tell whether sign-in messages are reaching people.

Children

TCG Invoice is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16.

Changes to this policy

We may update this policy as the service changes. The date at the top shows when it was last revised. If we make a change that materially affects how we handle your information, we will tell you by email or in the app before it takes effect.

Complaints and contact

If you have a question or want to complain about how we have handled your personal information, email privacy@thetechcompanygroup.com. We will acknowledge your complaint and aim to resolve it within 30 days. If you would prefer to write to us, ask and we will give you a postal address.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.