Introduction
BOB is operated by J Gonsalves & T Muir, ABN 50 584 196 404. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal information when you use our marketing website (backofficebuilders.com.au) or our software platform (app.backofficebuilders.com.au).
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
By using our website or platform, you agree to the collection and use of information as described in this policy.
About us
BOB is a job management platform for small construction businesses, based in Australia. It is operated by J Gonsalves & T Muir, ABN 50 584 196 404. You can contact us at hello@backofficebuilders.com.au.
What information we collect
Website visitors
When you visit our website, we may collect:
- Your name and email address if you submit a contact or enquiry form
- Basic usage information such as pages visited, if analytics are enabled (see Cookies and analytics below)
- IP address and browser information collected automatically by our hosting infrastructure
Platform and app users
When you create and use a BOB account, we collect:
- Account information: your name, email address, and password (passwords are encrypted and never stored in plain text)
- Business information: your business name, phone number, address, and ABN
- Team information: names, email addresses, phone numbers, and roles of team members you invite
- Client information: names, company names, and contact details of clients you add to the system
- Job and project data: project names, descriptions, milestones, schedules, and status updates
- Financial data: quotes, cost estimates, expenses, and margin information you enter
- Photos and documents: images and files you upload as part of project updates or job documentation
If you create an account or use BOB on behalf of a business, you are responsible for ensuring you have authority to provide personal information relating to team members, clients, and other contacts that you add to the platform.
Payments
Payment information (such as credit or debit card details) is handled directly by our payment processor, Stripe. We do not store your card details. See Third-party services below.
How we collect information
We collect information:
- Directly from you, when you register, use the platform, or contact us
- Automatically, through your use of the website or platform (such as session data and activity logs)
- From your team members, when they accept an invitation and set up their own accounts
How we use your information
We use your information to:
- Provide and operate the BOB platform
- Set up and manage your account
- Send transactional emails such as account invites, password resets, and service notifications
- Respond to enquiries and provide support
- Improve and develop our products and services
- Comply with legal and regulatory obligations
- Protect the security and integrity of our platform
We do not sell your personal information to third parties. We do not use your information for targeted advertising.
When we may disclose information
We may disclose your information to:
- Service providers: third-party companies who help us operate and improve our platform (see Third-party services below). These providers are contractually bound and may only use your data to deliver services on our behalf.
- Legal obligations: where required by law, court order, or lawful government request.
- Business transfers: in the event of a merger, acquisition, or sale of our business. We would notify affected users before their information became subject to a different privacy policy.
We will not disclose your information in any other circumstances without your consent.
Data storage and security
Your data is stored using Supabase, a managed database and infrastructure service built on AWS. We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access. These include:
- Encrypted data transmission (HTTPS/TLS) for all connections
- Passwords encrypted using industry-standard hashing — never stored in plain text
- Access controls so users can only access their own organisation's data
- Row-level security enforced at the database level
No method of electronic storage is completely secure. While we take these steps seriously, we cannot guarantee absolute security.
Cookies and analytics
Our website uses cookies — small files stored in your browser — to support basic website functionality and to help us understand how visitors use the site.
We use Google Analytics to collect anonymised information about how visitors interact with our website, such as pages visited, time on site, and general location. This data is aggregated and does not identify you personally. Google Analytics uses cookies to collect this information. You can opt out of Google Analytics tracking by using the Google Analytics opt-out browser add-on.
Our website also loads fonts from Google Fonts, which may result in your browser making a request to Google's servers.
If you prefer not to accept cookies, you can adjust your browser settings. Note that doing so may affect how parts of the website function.
Access and correction
You have the right to request access to the personal information we hold about you, and to ask us to correct anything that is inaccurate, out of date, or incomplete.
To make a request, contact us at hello@backofficebuilders.com.au. We will respond within a reasonable timeframe.
In some circumstances we may be unable to provide access — for example, if it would unreasonably affect the privacy of another person, or if a legal exception applies. We will explain why if this is the case.
Third-party services
We use the following third-party services to operate BOB. Each has its own privacy policy, which we encourage you to review.
- Supabase — database, authentication, file storage, and real-time infrastructure. Your application data is stored and processed by Supabase.
- Stripe — payment processing. Stripe handles and stores payment card information on our behalf. BOB does not store card details.
- Vercel — website and application hosting and deployment.
- Google Analytics — website analytics. Collects anonymised usage data to help us understand how visitors use the site.
- Google Fonts — web fonts delivered via Google's CDN when you visit our marketing site.
Overseas disclosure
Some of our third-party service providers may store or process personal information outside Australia, including in the United States and other countries where they or their sub-processors operate. Supabase uses AWS infrastructure, Stripe operates globally, and Vercel serves content via a global CDN.
Where personal information is disclosed to overseas service providers, we take reasonable steps to ensure those providers handle it in a way that is consistent with Australian privacy law.
Contact us about privacy
If you have a question, concern or complaint about how we handle your personal information, please contact us at hello@backofficebuilders.com.au.
BOB is operated by J Gonsalves & T Muir, ABN 50 584 196 404.
Please provide enough detail for us to understand and investigate the issue. We aim to acknowledge privacy complaints within 7 business days and respond substantively within 30 days, although some matters may take longer where they are complex.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are significant, we may also notify users by email or via an in-app notice.
We encourage you to review this policy periodically.