Privacy Policy
ClientStream is an Australian-focused service for small businesses to manage clients, jobs, reminders, quotes, invoices, payments and expenses. This policy explains how personal information is handled when you use ClientStream.
Information we collect
We may collect account details such as your name and email address; business profile information such as business name, contact details and ABN; information you enter about customers; jobs, notes, reminders, quotes, invoices, payments and expenses; subscription status; Smart Write usage; and security or operational records needed to run and protect the service.
How information is collected
Most information is supplied directly by you when you create an account or use ClientStream. Some operational information is generated when the service records actions, usage limits, billing events, login sessions or delivery events.
Why we use information
We use information to provide and secure ClientStream, store your business records, send requested communications, recover and verify accounts, operate reminders, provide reports, enforce plan limits, manage subscriptions, investigate faults or abuse, and improve reliability.
Service providers and overseas processing
ClientStream uses service providers that may process information outside Australia. Current providers include Cloudflare for hosting, database, security and Workers AI; Resend for transactional email when enabled; and Square for paid subscriptions when enabled. Processing locations can vary with each provider's infrastructure.
Smart Write and automated processing
Smart Write can send the rough notes and customer name you choose to provide to Cloudflare Workers AI to generate a draft customer message. ClientStream does not use Smart Write to make decisions that significantly affect a person's rights or interests. The output is a draft for you to review, edit and decide whether to use.
Sharing and selling
ClientStream does not sell personal information. Information is disclosed to service providers only as needed to operate the service, or where disclosure is required or permitted by law.
Security
ClientStream uses encrypted HTTPS transport, password hashing, secure session cookies, tenant-scoped database queries, rate limits and access controls. No internet service can guarantee absolute security, so users should also protect their login credentials and devices.
Access, correction and portability
You can update business and customer information inside ClientStream. Account owners can export a copy of their business data from Settings. If information cannot be corrected in the product, use the contact details below.
Retention and deletion
Business data is kept while the account is active unless a longer period is reasonably required for legal, security or billing purposes. An account owner can request permanent deletion from Settings after any active paid subscription is cancelled. Provider-level recovery copies and security records may remain for a limited retention period before expiry.
Complaints and questions
For a privacy question, access/correction request or complaint, use the contact details on clientstream.io. We will review the issue and respond within a reasonable period. You can also find privacy guidance and complaint information from the Office of the Australian Information Commissioner.
ClientStream aims to follow the Australian Privacy Principles where they apply. The Privacy Act can apply differently depending on the size and activities of a business, so this policy is written to provide a clear baseline regardless of whether an exemption may apply.