Privacy Policy

Effective 29 September 2026

Arbrik is a renovation marketplace: homeowners describe a project, verified tradies quote on it, and payment is held in escrow and released as work is completed. Running that involves personal information. This policy explains what we collect, why, who sees it, and the choices you have. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Who we are

Arbrik (“Arbrik”, “we”, “us”) is operated by AusRenoGuides, Australia. Arbrik is available at app.arbrik.com and through the Arbrik mobile app for iOS and Android. Questions about this policy or your information: hello@arbrik.com.

2. What we collect

We collect only what the service needs to work. Most of it you give us directly.

Account and identity

Email address, name (if provided), and the identifier of the sign-in method you use (email code, Google, or Apple). Sign-in is handled by Clerk; we never see or store your password.
Which role(s) you use the platform in: homeowner, tradie, or both.

Homeowner profile

Postcode, suburb and state (used to match your project with tradies who service your area).

Tradie profile

Business name, ABN, licence number and licensing state, trade categories and service regions.
ABN details are checked against the Australian Business Register; the result (entity name, status) is stored on your profile.
Stripe Connect account identifier and status (see Payments below).

Projects, quotes and messages

Project details: title, scope, budget range, timing, whether it is an insurance restoration and, if so, claim details you enter.
Photos you upload of the property, of quoted work, and of milestone progress. We strip camera metadata (including GPS location) from every photo before storing it.
Quotes and line items, quote status, milestone and dispute records.
Messages between a homeowner and a tradie in the in-app chat.

Payments

Payments are processed by Stripe. Card numbers and bank account details are entered on Stripe-hosted pages and never reach Arbrik's servers.
We store Stripe's identifiers for you and your transactions, amounts, fees, payout timing and the escrow ledger for each project. We are required to keep financial records.

Devices and technical data

If you enable notifications in the mobile app, a push notification token for your device and its platform.
Server logs: IP address, browser or app version, pages or endpoints requested, timestamps. Used for security, abuse prevention and debugging.

Correspondence

Anything you send us by email or through support channels.

We do not use third-party advertising trackers or analytics cookies. We do not collect government identifiers other than an ABN (which is a business identifier) and we do not ask for date of birth.

3. How we use it

To run the marketplace: create your account, show homeowner projects to matching tradies, deliver quotes, run escrow and milestone payments, and route messages and notifications between the parties to a project.
To verify tradies (ABN check, licence details shown to homeowners) and to display trust signals such as verification badges.
To generate AI assistance (next section).
To send transactional email and push notifications: new quotes, accepted quotes, milestone events, messages, disputes, payouts. These are part of the service; you can turn off push notifications on your device.
To detect and prevent fraud, abuse and fee circumvention, and to keep the service secure.
To comply with legal obligations, including tax and financial record-keeping, and to resolve disputes.
To improve the product. We look at how features are used in aggregate; we do not sell or rent personal information, ever.

4. AI features

Some features send your content to an AI model to produce a draft or an analysis: the Photo→Scope tool (photos and your description → a draft scope of works and budget range), the quote analyser (quotes on your project → a comparison and flags), and the council waste-management plan generator (project details → a draft plan).

The model provider is Anthropic (Claude API), under its commercial API terms, which do not allow your content to be used to train its models.
Photos sent to the Photo→Scope tool are used for that request and are not stored by Arbrik unless you separately attach them to a project.
AI outputs are drafts and estimates. They are not building, legal, insurance or financial advice and can be wrong. Always check them against a qualified tradie's quote and the relevant council or state requirements.

5. Who we share it with

Other users, as the service requires

Tradies who claim your project see its scope, budget range, timing, suburb and any photos you attached. They do not see your street address or contact details until you engage with them.
Homeowners see a quoting tradie's business name, verification status, licence details, quote, quote photos and milestone photos.
Chat messages are visible to both parties of the conversation and to Arbrik staff when needed to resolve a dispute or investigate abuse.

Service providers

We use a small number of providers to run the platform. Each only receives what its function needs, and each is bound by its own privacy and security commitments.

Provider	Purpose	Where data is processed
Amazon Web Services	Hosting, database, photo storage, backups	Sydney, Australia
Clerk	Sign-in, sessions, account emails	United States
Stripe	Payments, escrow, tradie payouts, subscriptions	Australia and United States
Anthropic	AI features described in section 4	United States
Google and Apple	Sign-in with Google or Apple, if you choose it; push notification delivery	United States and other regions those companies operate in
Expo	Push notification delivery to the mobile app	United States
Australian Business Register	ABN verification for tradies	Australia

Overseas disclosure

Your primary data (account, projects, photos, messages, ledger) is stored in Australia. As the table shows, some providers process information overseas, mainly in the United States. By using Arbrik you consent to those disclosures; we take reasonable steps, through our contracts and provider selection, to ensure that information is handled in a way consistent with the Australian Privacy Principles.

Legal and safety

We may disclose information where the law requires it, to enforce our Terms, to protect the rights, property or safety of Arbrik, our users or the public, or as part of a merger, acquisition or sale of the business (in which case this policy continues to apply to your information).

6. Cookies and local storage

The web app uses a session cookie set by Clerk to keep you signed in, and browser storage for small preferences. The mobile app keeps your session in the device’s secure storage. There are no advertising or cross-site tracking cookies.

7. How we protect it

All traffic is encrypted in transit (HTTPS). The database, backups and photo storage are encrypted at rest.
Photos are stored in private storage and served only through short-lived, signed links generated for the person entitled to see them.
Access to production systems is restricted and logged. Rate limits guard against automated abuse.
Staff sign in to the admin console with a password and a code from an authenticator app, and repeated failed attempts lock the sign-in for an hour.
We keep off-site backups so that data can be restored after a failure.

No system is perfectly secure. If we become aware of a data breach likely to result in serious harm, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires.

8. How long we keep it

Account, profile, project, quote and message data: for as long as your account is active, and afterwards only as needed for the purposes below.
Financial records (escrow ledger, fees, payouts, invoices): at least seven years, as Australian tax law requires, even after an account is closed.
Dispute records: for the period in which a claim could be brought in relation to the project.
Server logs: typically 90 days.
Backups: rotated on a schedule; a deleted item may persist in a backup for up to 30 days before it ages out.

9. Your choices and rights

Access and correction. You can see and edit most of your information in the app. For anything else, email us and we will respond within 30 days.
Deletion. You can delete your account in your account settings, or ask us to. When you do, your name, phone number and email are removed, the account can no longer be signed in to, and your devices stop receiving notifications. The records the other people on a job rely on stay in place, so the job’s history stays whole for them: the project record, quotes, messages and payment history. Financial records are kept as section 8 describes. An active Pro subscription is cancelled at the same time.
Notifications. Push notifications can be disabled in your device settings. Transactional emails about your projects and payments are part of the service.
Sign-in providers. If you signed in with Google or Apple, you can manage what those providers share with us in your Google or Apple account settings.
Complaints. If you think we have mishandled your information, contact us first and we will investigate and reply. If you are not satisfied, you can complain to the OAIC at oaic.gov.au.

10. Children

Arbrik is for adults engaging tradespeople or offering trade services. You must be 18 or older to hold an account. We do not knowingly collect information from anyone under 18; if you believe we have, email us and we will delete it.

11. Changes to this policy

We will update this page when our practices change and update the effective date at the top. For material changes we will also notify you by email or in the app before they take effect. Continued use after that date means you accept the updated policy.

12. Contact

Privacy questions, access requests, corrections, deletion requests and complaints: hello@arbrik.com. See also our Terms of Service.