Privacy Policy

This Privacy Policy explains how Mercury Road Equipment Pty Ltd (ABN 36 614 422 187) (“we”, “us” or “our”) collects, uses, shares and protects your personal information when you use Tradeflux (the “Service”). We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

Tradeflux is voice-first by design. To make the voice and AI features work, your information is sent to third-party processors — that’s an inherent part of how the product functions and can’t be avoided if you use those features. Section 4 sets out exactly who receives what, and why.

1. Who we are

Mercury Road Equipment Pty Ltd is the entity responsible for your personal information. You can reach us about privacy at vlad@dfortix.ai.

2. What we collect

• Account information — your email address and password (stored only as a secure hash).
• Business profile — your business name, ABN, GST status, address, contact details and bank details you enter for your invoices.
• Client information — the names, email addresses and addresses of the clients you invoice, which you enter.
• Invoice data — line items, descriptions, amounts, references, notes and payment records.
• Voice data — when you use voice features, the audio you speak and the live transcript generated from it.
• Technical data — basic information needed to operate the Service securely, such as your session cookie.

3. How we use your information

We use your information to:

• provide the Service — creating, drafting (including by voice), rendering and emailing invoices;
• look up your ABN and GST status so your invoices are tax-correct;
• track payments and the status of your invoices;
• process your subscription and payments;
• secure your account and prevent misuse; and
• respond to you and meet our legal obligations.

4. Third-party processors

We share information with the following processors so the Service can function. We only share what each one needs for its specific purpose. Some of these providers are located, or process and store data, outside Australia (for example in the United States), which means your information may be handled overseas.

• ElevenLabs (voice AI). When you use voice features, we send your voice audio and the live transcript, along with the business profile, invoice draft and client details the assistant needs, so it can understand you and build your invoice in real time. This is the most significant sharing of your data and only happens when you use the voice features.
• Google (Maps Places API). We send the address text you type or speak to return address suggestions and standardise addresses.
• Australian Business Register (ABR). We send ABN and business-name queries to confirm your business and GST details.
• Stripe (billing). We send your email, subscription status and invoice totals to manage your subscription and process payments. Stripe collects your payment details directly under its own terms; we don’t store full card numbers.
• Email delivery (SMTP). We send your client’s email address and the invoice PDF to deliver invoices on your behalf.
• Hosting / database. Your account and invoice data are stored in our database to operate the Service.

We do not sell your personal information, and we don’t share it for third-party advertising.

5. A note on voice data

Voice features require sending your audio and transcript to ElevenLabs — there’s no way to provide real-time voice invoicing without it. If you’d rather not have your voice processed this way, you can simply not use the voice features: every field in Tradeflux can be entered and edited by hand, and the manual path doesn’t send audio to the voice provider.

6. Storage and security

We take reasonable steps to protect your information, including hashing passwords, storing only a hash of your session token, and verifying the authenticity of billing webhooks. No method of transmission or storage is completely secure, but we work to protect your information from misuse, loss and unauthorised access.

7. How long we keep it

We keep your information for as long as your account is active and as long as we need it to provide the Service, comply with our legal obligations (including tax and record-keeping requirements), resolve disputes and enforce our agreements. You can ask us to delete your account and associated data — see your rights below.

8. Your rights

Under the Australian Privacy Principles you can ask us to access or correct the personal information we hold about you, and you can ask us to delete it. To make a request, email vlad@dfortix.ai. We’ll respond within a reasonable time and may need to verify your identity first.

9. Cookies

We use a single, essential session cookie to keep you logged in. We don’t use advertising or tracking cookies.

10. Children

Tradeflux is intended for businesses and is not directed at anyone under 18. We don’t knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes we’ll take reasonable steps to let you know. The “last updated” date above shows when it was last revised.

12. Contact and complaints

If you have a question or a privacy complaint, contact us at vlad@dfortix.ai and we’ll work to resolve it. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. You can also read our Terms of Service.