Privacy Policy

1. Who We Are

Trimsy Software Pty Ltd (ACN 703 225 870, ABN 69 703 225 870), trading as "Trimsy" ("we", "our", "us"), operates the Trimsy queue & booking management platform accessible at trimsy.au. We are the data controller for personal information collected through the platform. For privacy enquiries, contact us at [email protected].

2. Information We Collect

We collect information in the following ways:

Information you provide directly

• Account details: business name, name, email address, phone number, and password
• Business information: address, ABN/tax registration number, website, and social links
• Payment information: billing details processed securely by Stripe — we do not store card numbers
• Staff profiles: name, role, contact details, and work roster information
• Customer records: names, phone numbers, email addresses, postal address, date of birth, booking and visit history, and loyalty points
• Family members: where a customer books on behalf of others (for example a child), the name and, if provided, the date of birth and contact details of those people — entered and managed by the account holder
• Where a business uses them, additional records such as pets, vehicles, intake and consent form answers (which may include health or allergy information a customer chooses to provide), uploaded documents and identity details (for example a passport, visa or licence), and — for businesses that provide migration, visa or similar services — background information such as address, employment, education and travel history

Some of this is sensitive information (such as health details on an intake form, or government-identity documents). We only collect it where a business you deal with has configured its forms to ask for it, and we handle it with additional safeguards — see Data Security.

Information collected automatically

• Log data: IP address, browser type, pages visited, and timestamps
• Usage data: features used, session duration, and interaction patterns
• Device information: device type, operating system, and screen resolution

3. The Trimsy Mobile App

The Trimsy app for iOS and Android is the same platform described above, used by a business on its own devices — a front-counter kiosk, a queue display, or a point-of-sale terminal. It signs in to the business's existing Trimsy workspace and handles the same records described in section 2.

Device access the app asks for. Local network access only, and only to find receipt printers on the same Wi-Fi as the device. iOS shows this as a "local network" prompt. The app does not use background location or run when closed.

What the app does not collect. It requests no access to your location, camera, photos, contacts, calendar or microphone, and it contains no third-party advertising, analytics or crash-reporting software. We do not track you across other companies' apps or websites, and we do not sell or share personal information for advertising.

Payments taken in the app. Where a business takes card payments through the app, card details are captured by Stripe's own payment components or by a card reader and sent directly to Stripe. Card numbers never pass through Trimsy and we never store them.

Notifications. If a business turns on notifications, the device is issued a notification token by Apple or Google that lets us deliver alerts to it. The token identifies the device, not the person, and is deleted when notifications are turned off or the app is uninstalled.

4. How We Use Your Information

We use collected information to:

• Provide, operate, and improve the Trimsy platform
• Process payments and send billing notifications and invoices
• Send transactional communications such as booking confirmations and reminders via email and SMS
• Provide customer support and respond to enquiries
• Monitor and analyse usage to improve features and performance
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations

5. SMS Communications

Trimsy uses Twilio and Guni to send SMS messages on behalf of tenants, including booking confirmations, appointment reminders, and loyalty notifications. Message frequency depends on your business's settings. Standard message and data rates may apply. Customers can opt out at any time by replying STOP to any SMS. For help, reply HELP or contact the business directly.

6. Sharing of Information

We do not sell your personal information. We share information only in the following circumstances:

• Service providers (sub-processors): providers who process data on our behalf under data processing agreements, including:
  • Stripe and Square — card payments and billing
  • Twilio and Guni — SMS and messaging
  • ZeptoMail / Postmark — transactional email; Brevo — email newsletters and contact lists
  • Wasabi — file and backup storage, hosted in Australia (Sydney)
  • Cloudflare — content delivery, DNS and bot protection
  • Google — Analytics (marketing website only, with your consent), Maps/Places address lookup, and web fonts
  • Anthropic and OpenAI — optional AI features, described below
• AI features: where a business enables them, limited data is processed by AI providers (Anthropic and OpenAI) to power features such as our help assistant and, where a business uses identity verification, reading the details from an uploaded identity document. These providers process the data to return a result and do not use it to train their models; some AI processing occurs outside Australia.
• Business operators: Customer booking data is accessible to the business you are booking with — this is necessary to provide the service
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to affected users

7. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. After account termination, we retain data for up to 90 days to allow for account recovery, then delete it unless we are required by law to retain it longer. Anonymised aggregate data may be retained indefinitely for analytics purposes.

8. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted data storage, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect any unauthorised access.

9. Cookies

Inside the Trimsy app we use only essential cookies and browser storage (localStorage / sessionStorage) to keep you signed in and remember your preferences — no analytics or advertising trackers run there. On our public marketing website (trimsy.au) we additionally use Google Analytics, which sets analytics cookies only if you consent via our cookie banner. Our Cookie Policy lists every cookie and the third parties involved, and lets you change your choices at any time. You can also disable cookies in your browser settings, although this may affect the functionality of the Service.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Delete your own account at any time, without asking us — sign in to your customer portal, open Profile, and choose Delete my account. You will be asked for your password to confirm. Your name, contact details and other identifying information are permanently removed so the remaining records can no longer be traced to you; some transaction records are kept in anonymised form where we are legally required to retain them. You can also email us and we will do it for you
• Portability: Request your data in a portable, machine-readable format
• Objection: Object to certain processing activities
• Opt-out of SMS: Reply STOP to any SMS message or update your preferences in the customer portal

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. Deleting Your Data

You can have your personal information deleted at any time, whether you use Trimsy through a business's website, the customer portal, or the Trimsy app.

Delete it yourself. Sign in to your customer portal, open Profile, and choose Delete my account. You will be asked for your password to confirm. This takes effect immediately — you do not need to contact us or wait for approval.

Ask us to do it. If you cannot sign in, never created a password, or were added to a business's records by staff, email [email protected] from the address or phone number the business holds for you, or ask them directly. We respond within 30 days.

What is removed. Your name, email address, phone number, postal address, date of birth, any identity details and documents you uploaded, and records such as pets, vehicles and intake-form answers are permanently removed, and your bookings and visit history can no longer be traced to you.

What is kept, and why. Records of completed sales are kept in a form that no longer identifies you, because businesses are required by law to retain financial and tax records. These cannot be used to contact you or to rebuild your profile. Where a business is legally required to keep a specific record — a signed consent form, for example — it stays with that business rather than with us.

Business accounts. If you run a business on Trimsy, deleting the workspace removes the business's own records. Contact [email protected] from the account owner's address and we will confirm before anything is removed.

12. Children's Privacy

Trimsy is business software: it is used by businesses to manage their own customers, and children do not sign up for or use Trimsy directly. Some businesses do serve children — a children's hairdresser, for example — and in that case a parent or guardian, or the business itself, may enter a child's details (such as a name, and if the business asks for it, a date of birth) to make a booking on the child's behalf. Where that happens, the information is provided and managed by the responsible adult or the business, who is responsible for having the authority and any parental consent needed to provide it. We handle a child's information the same way as other customer information described in this policy, and it can be corrected or removed at any time (see "Deleting Your Data"). If you believe a child's information has been provided without proper authority, contact us and we will remove it promptly.

13. International Transfers

Trimsy operates primarily in Australia. If you access the Service from outside Australia, your information may be transferred to and processed in Australia and other countries where our service providers operate. We ensure appropriate safeguards are in place for any international transfers.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

15. Contact Us

For any privacy-related questions or requests, please contact:

Trimsy Software Pty Ltd (trading as Trimsy)
ACN 703 225 870 · ABN 69 703 225 870
Attn: Privacy Team
[email protected]