Legal

Privacy policy

Last updated 18 September 2026

Who we are

Tinker Tally Pty Ltd (ABN 21 700 457 085) builds web apps for Australian accounting practices, at tinkertally.com.au. In this policy, "we" and "us" means Tinker Tally. You can contact us about privacy at hello@tinkertally.com.au.

What we collect

  • Account details. When your firm signs up or is set up by us: your name, firm name, email address, phone number and login details, and the usernames your firm creates.
  • Billing details. Payments are handled by Stripe. We receive your subscription status and billing contact, but never your full card number.
  • Information you put into our apps. Data your firm enters or uploads, and data from a Xero organisation when you choose to connect one. We process it only to provide the apps to your firm.
  • Enquiries and feedback. What you send through our contact form or feedback tool, including any files you attach.
  • Business contact details for outreach. The name, job title, firm and work email address of people at accounting practices, from public sources such as firm websites and from business contact data providers such as Apollo.io.
  • Technical information. Sign-in and security records, and basic logs from the services that run our website.

How we use it

  • To provide, secure and support our apps and your firm's account.
  • To bill your subscription and send account emails, such as password resets, invitations, trial reminders and receipts.
  • To reply to enquiries and fix problems you report.
  • To tell accounting practices about Tinker Tally, and to send product updates to people who use it or asked for them. See "Marketing email" below.

We don't sell personal information.

Marketing email

We send marketing email to:

  • people at Australian accounting practices whose business email address is publicly available, about products relevant to their work;
  • people who have started a free trial, who are told at sign-up that product updates come with the trial;
  • people given a login by their firm, who are told when they set their password that product updates come with it;
  • people who have asked to receive our newsletter.

Every marketing email identifies us and includes a way to unsubscribe. You can also unsubscribe by replying or writing to hello@tinkertally.com.au. We act on unsubscribe requests promptly, and keep a record of them so you aren't contacted again. Unsubscribing doesn't stop essential account emails, such as password resets.

Who we share it with

We use trusted service providers to run Tinker Tally. They handle personal information on our behalf, for these purposes only:

  • Supabase: database, file storage and sign-in
  • Netlify: website hosting
  • Stripe: payments and subscriptions
  • Resend: sending account emails and our newsletter
  • Google Workspace: our own email
  • Apollo.io: business contact data and outreach email
  • Xero: only when your firm chooses to connect a Xero organisation

We may also disclose information where the law requires it.

Storage outside Australia

Some of these providers store or process information outside Australia, including in the United States and other countries. We choose established providers with appropriate security.

Keeping it secure

Access to firm data is restricted to your firm's own logins, with two-factor authentication available to firms and required for our own administrator accounts. Data is encrypted in transit. No system is perfectly secure, but we take reasonable steps to protect the information we hold and to limit who can see it.

Accessing, correcting or deleting your information

You can ask to see the personal information we hold about you, have it corrected, or have it deleted where we don't need to keep it. Email hello@tinkertally.com.au and we'll respond within 30 days.

Complaints

If you have a concern about how we've handled your personal information, email us first and we'll try to resolve it. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.