GoFolio Privacy Policy

GoFolio is booking, job and invoicing software for automotive businesses, available at gofolio.com.au / gofolioapp.com and as an iOS app. This policy covers both the businesses that use GoFolio (“businesses”) and their customers whose details are recorded in it.

Business account data — your name, email, phone number, business details (name, address, trading hours, services, bank details shown on invoices) and team member details.

Customer records — details a business enters or its customers submit through its booking form: name, email, phone, service address, vehicle details (make, model, registration, odometer) and booking notes.

Job and payment records — bookings, job notes, inspection checklists, photos of vehicles and work, invoices and their payment status.

Bank statement extracts — when a business uses payment matching, uploaded statements are processed to extract transaction lines (date, amount, bank description). The uploaded document itself is processed in memory and never stored; only the extracted lines are kept.

Technical data — error reports and basic usage logs, with personal information stripped before they reach our monitoring tools.

Solely to run the product: taking bookings, scheduling jobs, sending booking and invoice notifications by email and SMS, generating invoices and inspection reports, matching payments, and syncing with services a business has chosen to connect. We do not sell data, show advertising, or use tracking for advertising.

Payment matching uses Anthropic’s AI to read uploaded bank statements. Only the statement document is sent — never customer or invoice records. Documents are not stored by GoFolio and are not used to train AI models. Matching against invoices happens in our own code.

Only with the service providers that make the product work, and only what each needs: Supabase (database and file storage), Netlify (hosting), Resend (email delivery), Mobile Message (SMS delivery), Sentry (error monitoring, scrubbed of personal data), and Anthropic (bank statement reading, as above). If a business connects optional integrations, relevant data flows to those too: Stripe (card payments), Xero (accounting) and Google (calendar and address autocomplete). Each provider processes data under its own privacy terms; none may use it for their own purposes.

Customer records belong to the business that collected them. GoFolio stores and processes those records on the business’s behalf, and strictly isolates every business’s data from every other’s. If you are a customer of a business that uses GoFolio and want your details corrected or removed, contact that business — or us, and we’ll pass the request on.

All data is encrypted in transit, access is protected by row-level security scoped to each business, and integration credentials are stored encrypted. We keep data for as long as an account is active; on account closure or verified request we delete it, except records we must keep to meet legal obligations (such as tax records).

We handle personal information in line with the Australian Privacy Principles. You can ask us at any time what we hold about you, ask for corrections, or ask for deletion — email miqui.campuzano@gmail.com and we’ll respond within 30 days. If you’re unsatisfied with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

To delete your account and data, see Delete your account — you can do it yourself from the app or the dashboard, or ask us to.

GoFolio is a business tool and is not directed at children under 16; we do not knowingly collect their information.

If we change how we handle data, we’ll update this page and the date at the top before the change takes effect.