Privacy policy
Last updated 30 October 2026
baseDNA (run by Crosstalk Studios, ABN 25 274 596 671, “we”, “us”) respects your privacy. This policy explains what personal information we collect through our website, www.basedna.com.au, and our quoting system, app.basedna.com.au, and how we handle it. We aim to follow the Australian Privacy Principles.
If you’re a baseDNA client, this policy covers your own details. Your customers’ information in your app is handled under the privacy policy on your website and our client agreement with you: we handle it only on your behalf, to run and support your app.
What we collect
- Quote requests: your name, phone number, email address (optional), suburb, the type of job and anything you tell us about it.
- Job details: the site address, your business details, rates and photos, notes and photos from a site visit, and the quotes, dates and bookings for your job.
- Quote responses: when you accept a quote online we record the name you type, the date and time, your IP address and browser details, and the version of our terms you agreed to, as a record of your acceptance. If you ask for a change or decline, we keep your message. When you approve or decline a change to the job (a variation) online, we record the same details for your answer, and any message you add.
- Payments: if you pay a deposit by bank transfer, we see the payment in our bank account. If you pay by card, the payment is handled by Stripe and we never see your card details.
Our website doesn’t use advertising or tracking cookies. We count visits with Vercel Web Analytics, which uses no cookies and doesn’t store your IP address; it only gives us totals, like how many people viewed a page. While you browse, your browser remembers (for that visit only, in the tab’s session storage) which website sent you here, the first page you landed on and any campaign tag in the link. We only receive it if you send us an enquiry, so we know which of our listings and ads work; since 27 October 2026 we don’t keep ad click identifiers or the address of the page you came from, only the site, and we’re removing them from enquiries made before then. Our quoting system uses one cookie to keep the business owner (or a staff member they’ve invited) signed in, and one that remembers whether they prefer light or dark mode.
How we use it
Only to respond to your enquiry, visit your site, prepare and send your quote, book and carry out the work, contact you about your job (including weather changes), take payment, and keep records we need for tax and legal purposes. We don’t sell your information, and we don’t use it for marketing without your permission.
Who we share it with
We use a small number of service providers to run the business, and they handle your information on our behalf:
- Vercel (website and quoting system hosting, and storage of photos and files)
- Neon (database for the quoting system)
- Resend (sends quote and booking emails)
- Google (our business email and calendar)
- Stripe (card payments, only if you choose to pay by card)
- GitHub (keeps our nightly backups for 30 days, encrypted before they’re stored so they can’t be read without a key only we hold)
- Anthropic (AI writing help we ask for, like drafting quote lines or tidying the tone of an email to you; your name, email address and phone number are taken out first where we can spot them, and Anthropic doesn't use it to train AI)
Some of these providers store data outside Australia, including in the United States. Otherwise we only share your information if the law requires it.
Google Calendar and Gmail
Our quoting system connects to the business owner’s own Google Calendar. It reads when the calendar is busy, to suggest free dates for jobs; creates, moves and deletes calendar events for site visits and bookings; and shows the owner their own calendar events (titles, times and locations) inside the private planner, where they can also add new events. It doesn’t access anyone else’s calendar. Calendar data is only shown to the business owner, is used only to plan our work and week, isn’t stored by the quoting system beyond what’s needed to display it, and is never sold or shared. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The connection can be removed at any time from the quoting system’s settings or from the Google account’s security settings.
If the business owner connects their Gmail, the quoting system can also show the owner their own email conversations with customers next to the jobs they’re about, and send the owner’s replies from their own address. When the owner opens a conversation it is marked as read in their Gmail. It reads email only when the owner opens it, doesn’t keep a copy of the message, only shows it to the business owner, and never uses it for advertising or to train AI. The same Limited Use commitment above applies. The Gmail connection is stored encrypted and can be removed at any time.
When the owner files a sender, we store that choice in this business’s database: the address or the company domain, the name we showed, the door, the room when we have one, and whether they kept it, quieted it, or set it aside for a week. We do not store the message, the subject, or an unsubscribe link. Quieting a sender does not contact them, and an unsubscribe is not sent from here. Disconnecting Gmail leaves those choices in place. Forget my filing, in Settings, deletes them. Labels already applied in Gmail stay there.
Secure links
Sometimes we need to send you something private, like our bank details or a gate code. Instead of putting it in an email, we send a one-time secure link and give you a 6-digit code separately. The message is encrypted on our phone before it leaves it, so our system only ever stores a scrambled copy that it can’t read. That copy is deleted as soon as you open it, after three wrong codes, or when the link expires (within 7 days). We keep a note of when it was opened, never what it said. The part of the link that unlocks it stays in your own browser: it’s kept in that tab’s session storage only until you open the message, then removed, and it is never sent to us.
Contacts
We also keep contact details (name, phone, email and company) for suppliers, subcontractors and other people we work with, entered by us or imported from our own phone, so we can reach them about jobs. You can ask us to remove yours at any time.
Keeping it safe
Your information is stored with the providers above, using encrypted connections. Only the business owner, and staff the owner has invited, can sign in to the quoting system. Staff only see the jobs they’re working on, with what’s needed on site (the site address, access notes and the customer’s first name), never your phone number, email or prices. Quote pages are reached through a long private link that only you receive. Job alerts sent to the owner’s phone travel encrypted through Apple’s or Google’s notification service and never include your name, phone number or address.
How long we keep it
We keep job records, quotes and acceptances for as long as we need them for warranty, tax and legal purposes (generally up to 7 years). Enquiries that don’t go ahead are deleted on request.
Your choices
You can ask to see, correct or delete the personal information we hold about you. Email contact@basedna.com.au or call 0466 327 654. If you’re unhappy with how we’ve handled your information, tell us first and we’ll try to fix it. You can also contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change this policy, we’ll update this page and the date at the top.