Last updated 12 October 2026

Privacy

What we collect, who else sees it, how long we keep it, and how to get a copy or have it deleted. This covers this website, the Order app at app.spdy.au and the Staff app at staff.spdy.au. 1Quote, at 1quote.au, app.1quote.au and supply.1quote.au, has its own privacy policy at 1quote.au/privacy.

The short version

We collect what we need to make your order, deliver it and sort out a problem. Not more than that.
We never sell your information. We never contact your customer ourselves: a quote you email them from the Order app goes out under your business name, through our email service.
Our customer records and files are stored in Australia.
Fitters on our list: retailers who use the Order app see your name, where you work, mobile, photo and answers. We don't show them your email or your ABN.
If your own software, an ordering platform or an AI assistant you connect sends us orders for you, we keep what it sent the same way we keep a job you send from the app.
This website uses Google Analytics to measure visits and what gets used. It also uses advertising tags from Google and from Meta (Facebook and Instagram), so our ads can be shown to people who have visited. They set cookies. No name, email, phone number or message goes to Google or Meta from it, and you can switch the ads off (see Analytics, below). Live Chat and the order form set cookies of their own, and only once you open them.
Want a copy, a correction or your login deleted? Email sales@speedyblinds.com.au.

Your customer's details

Most jobs you send us carry information about someone who is not you: your customer's name on the job reference, the delivery address, and photos of their windows. We handle that information for you, on your instruction. It is your relationship with your customer, and it stays that way.

We use it to make the job, get it to the right address and answer you when something needs checking. We do not add your customer to a mailing list, we do not quote them, and we do not contact them ourselves. Speedy never sells to, quotes for, measures for or installs for an end consumer. That is the whole basis of how we work, and it applies to their details as much as to their windows.

When you email your customer a quote from the Order app, it goes out under your business name, with your logo and your reply email, and their replies come to you. The preview you check first passes through our server to make the PDF, and is not kept. The email on its way passes through our server and Resend, the email service we use, in the United States, which keeps a copy of each email for 30 days. We don't keep the quote, your customer's name or email, or your prices: only a count of the quotes each login sends, so we can hold a daily limit.

You can also send a job to a fitter from Sent Jobs in the Order app. The fitter gets the job sheet with every price left off, your customer's name, address and phone number as you type them in, and your own name, company, mobile and email so they can reach you. The job's notes go as you wrote them, and so do its photos and drawings. Photos in the sheet carry no location.

It goes to the fitter the way that fitter chose: in their own Order app login, by email, or both. Only send a customer's details to a fitter if your customer is happy for you to.

When it goes in the app, we keep your customer's details, your mobile and email and the job sheet for 90 days so the fitter can open them, then we delete them. When it goes by email only, we keep none of those: the email passes through our server and Resend, in the United States, which keeps a copy for 30 days. Either way we keep a record of the send for 12 months: who sent it, to which fitter, when, how, and your Job Reference.

Once a fitter has a job, it is theirs. We can't take an email back, and a fitter can save the job sheet from the app. Fitters run their own businesses. They are not Speedy, we don't choose one for you, and what a fitter does with a job is between you and them.

If you connect an AI assistant. An assistant such as Claude or ChatGPT is a service you choose, run by its own company. When you ask it to quote or order through the Order app, that company receives what you type and what we answer. That can include your customer's name where you use it as a job reference, a delivery address, and your prices. What the assistant's company does with it is under their terms and their privacy policy, not ours. We don't send it anything you didn't ask it for.

If your own software or an ordering platform sends us orders. Its maker handles your orders before they reach us, under your agreement with them. We receive what it sends: the job, your references, the delivery address, any notes and any files, and from a platform, your business details too.

If your customer asks what happened to their information, they should come to you, because you hold the order. Call us and we will help you answer.

What this website collects

You can read the whole public site (fabric stock, group search, the motor guides) without an account and without telling us anything about yourself.

The enquiry forms

Company, name, mobile, email and postcode. It goes straight to sales@speedyblinds.com.au as an email. Nothing is saved to a database, and nothing is added to a marketing list.

On our landing pages for new retailers, the email also records which page you sent it from and, if the link you followed carried them, its campaign tags: the utm_ tags, and the ad click IDs gclid, gbraid, wbraid and fbclid. Your browser holds those tags until you close the tab, so they're kept if you move between those pages. The form sends them to us only in that email. Like the rest of the web address you arrive on, they are also seen by Vercel, which hosts this site and counts its page views, by Google Analytics and by the Meta pixel.

The order form

The order form on this site is hosted by Cognito Forms and runs inside the page. What you type goes to Cognito Forms and then to us. Our own code never sees it.

The motor guide videos

Videos are set to no cookie and only load when you press play. The thumbnail picture does come from a Google server as soon as the page opens, which tells Google your IP address.

Live Chat

Only if you tap it. Live Chat is Zoho SalesIQ, and nothing from it loads before that tap. What you type, and any name or email you give, goes to Zoho and reaches our office. Zoho sets its own cookies and keeps an ID in your browser so it knows you next time.

Our internal stock pages

Speedy staff update fabric and parts stock behind a shared password. Those pages hold stock levels, not personal information about anyone.

What the Order app collects

The Order app at app.spdy.au is for retailers with an account with us.

Your login: Your email address and a password. The password is hashed with scrypt before it is stored, and the hash sits in our CRM. We never store the password itself, and nobody at Speedy can read it. Signing in on a new phone or computer, after you sign out, and every 90 days also needs a 6 digit code we email to your login's email.
Your business details: Business name, contact name, phone, email, delivery address, and your logo if you upload one. You can edit these yourself in the app, and the change writes back to our records.
Jobs you send: Everything on the order form, the job address, the job reference (which is usually your customer's name), any notes you add, and the photos, files and drawings you attach. The job and each attachment go to our WorkDrive, and an email to sales@speedyblinds.com.au tells the office it is there, with a link to each file rather than the file itself.
Drafts and quotes: A New Job draft or a Quick Quote is saved in your phone's own browser storage, with any photos, files and drawings you add to it. It is also backed up on our server for the login that made it, so it appears on the other phones and computers you sign in on, and only that login sees it in the app. Your markup and margin are backed up with it, for your login only. It stays on your phone until you delete it, even after the job is sent. The backup keeps it for 12 months after you last changed it, and deleting it deletes the backup too. The backup is not an order: your selling prices, your discount and your customer's name and email never come to our office with a job you send.
Quotes you email your customer: Your customer's name and email, the quote at your selling price, and your logo or business name. Our server makes the quote's PDF from what your phone sends and emails it through Resend under your business name, with a copy to you. A preview passes through our server the same way, to make the PDF you check first, and nothing of it is kept or emailed. Your customer's name and email, and each quote you email, are saved with the record on your phone and in its backup, and they never come to our office with a job you send. Apart from that backup and Resend's 30 day copy, we keep only a count of the quotes each login sends, with no customer and no prices in it.
Job Issue and Import Job: What you type, and the photos and files you attach. They go to our WorkDrive and to sales@speedyblinds.com.au as an email, so the right person picks it up.
Your history: A record of what you sent and when, so you can check it later and so we can answer you when you ask about a job.
Orders and quotes from your own software or an AI assistant: With your say so, software you use or an assistant you connect can ask us for prices, send us orders and ask where an order is. It can only do what your login can do. We keep each quote it asks for (the job as it was sent and our prices for it), each order (the job, your references, the delivery address, notes, and any files it uploaded) and a log of each request: the time, which key or assistant, which kind of request and whether it worked. The log holds no names, no addresses, no references and nothing you or it typed.
API keys: A key lets your software act as your login. We show it to you once and keep only a scrambled copy that can't be turned back into the key, with who made it, when, and when it was last used. Revoking a key stops it straight away.
Connected assistants: For each assistant you connect we keep its name, where it sent you back to after you allowed it, and the day you connected it. You can see them and disconnect any of them in Profile.
The Fitters List: Before the list shows, you tick that you have read the notice and agree to it. We keep which login ticked, when, and the exact words you agreed to.
Fitting service for other retailers: If you turn this on in your Profile, you are asking to join the Fitters List yourself. Everything under "Fitters who join our list" below applies to you. Turning it off takes you off the list at once and keeps your answers for next time. Your company's History in the app shows that you turned it on or off and which questions you changed, never the answers.
Protecting our prices: To protect our prices and stop misuse, the app records each line your login asks it to price, including the lines of a saved quote or job: the product, the fabric group, the track or control, the other choices, the sizes, which device asked and when. It never records a price, a room name, notes or your customer's details. If the pattern looks unusual, the app raises a flag, and it may slow its price answers, ask you to confirm it is you with a code we email to your login's email, or in an extreme case pause prices until our office checks. A new device that downloads a large number of your saved quotes and jobs in its first hour also raises a flag. Our office is told about each flag, usually by email, with your name, login email, company and the numbers behind it, and may then switch the login off. The lists of choices the app sends your login, such as fabrics and colours, carry hidden markers that show which login they were sent to and in which month. The markers never change a price, the order of a list or what you see. If a value from a copied list is used to ask for prices, our office is told.

When you type a delivery address, what you type goes to Google Places so it can suggest the rest of it. That is the only part of the app that talks to Google.

If you are a developer with a sandbox login. We keep your name, your company, your email and a scrambled copy of your password, the test keys you make, and the assistants you connect. A sandbox works on sample prices and sample stock. Nothing you send through it reaches our order folder, our inbox or our customer records.

Photos keep the location they were taken

Phones record where a photo was taken inside the photo file itself. We keep the file exactly as you sent it, so a photo or file you send us with a job, or through Job Issue or Import Job, may carry the location where it was taken, usually your customer's house. A drawing you make in the app carries no location.

That is deliberate. The file we look at is then identical to the one on your phone, which matters when we are working out what went wrong on a job.

If you would rather not send it, you have two easy options: turn location off in your phone's camera settings before you take the photo, or send a screenshot of the photo instead of the photo itself. A screenshot carries no location.

The measure scan button

On a phone or tablet, the Order app has a scan button beside the measurement boxes. Point it at a laser measurer, tap Capture, and it reads the number for you.

To read it, the app takes a photo of the box on your screen, and a little around it, and sends it to OpenAI in the United States, which reads the number and sends it back. The photo covers more than the measurer's screen, so it can show your hand, the measurer and part of the room behind it, often your customer's home. The photo carries no location, and nothing about you or the job goes with it. We tell OpenAI not to keep the request as a saved response; OpenAI's own policies cover how it handles what it receives.

While we improve the reader, we keep some photos to train it: only scans where you used the number. They are kept in the Order app's database in Sydney for 90 days at most. Copies made on a Speedy computer to train the reader never carry a name or login, and anything older than 90 days is deleted each time training runs. A scan you don't use is deleted within three days. A kept photo is linked to the login that took it, but holds no name, company or job. We never keep photos from the demo login.

We also keep a record of every scan, linked to your login: which box it was for, the number it read, whether you used it, and how long and how much it cost to read. It holds no photo, and it has no fixed deletion date yet.

Rather not use it? Type the number in instead. Nothing is sent.

What the Staff app collects

The Staff app at staff.spdy.au is for Speedy staff only. It holds a work email address and a PIN to sign in, and it keeps a log of what was scanned, which job it belonged to and which device it was done on. That log can include a customer or company name and a retailer's email address, because those are what identify a job.

Barcode scanning happens on the phone itself. The camera frames never leave the device. No picture is uploaded, and none is kept.

When a retailer collects an order from our factory, we record their signature on a staff device, or the staff member's name when the retailer can't sign, together with the job code, what was collected and the time. We keep it in our Zoho WorkDrive as proof of collection. Until it's saved there, it waits on that staff device.

Fitters who join our list

We share a list of independent fitters with retailers in the Order app. You can ask to join it with our fitters form, or from your Profile if you have an Order app login.

What we keep: What you send: your name, mobile, email, business name, where you work, ABN, photo, and your answers about the work you do, where you go, how you like to be paid and how you want to get job details. We also keep when you sent it, and the notice you were shown about who sees your details. Only your name and mobile are needed. Leave the rest out if you would rather.
Your photo: Your phone shrinks it before it leaves, which drops where it was taken. We don't accept a photo that carries a location.
What we use it for: To decide whether to add you to the list, and to get in touch with you about it.
Who sees it once you are on the list: Retailers signed in to the Order app, after they agree to our notice about the list. They see your name, business name, where you work, mobile, photo, your answers, how you take job details, and a short note of ours where there is one. They can't see your email, your ABN, or your answer to whether you're happy to help other fitters. We use that answer for one thing: a retailer who also offers fitting in the app is shown another fitter when you both work in the same state and neither of you said no, so an answer left blank counts the same as yes. Retailers who aren't fitters see you either way.
Who sees it at Speedy: The staff who look after the list. Your email, your ABN and that one answer are open to one staff login only. Our staff log records when your entry is added, moved or changed, by your name. It never holds your email or ABN.
Jobs from retailers: If you choose to get job details in the app or by email, a retailer can send you a job. You receive their customer's name, address and phone number, the job sheet without prices, and the retailer's name, company, mobile and email. If you reply to a job email, your reply goes straight to that retailer, so they see your email address then. A job in the app stays open to you for 90 days. Any arrangement for a job is between you and the retailer. Speedy isn't part of it.
Changing your details, or coming off the list: With an Order app login, change your answers or switch yourself off in Profile. You are off the list at once, and your answers are kept for next time. Without one, email or call us and we will change them or take you off the list. Once you are off, we delete your details 12 months later.
If we don't add you: We delete your details 12 months after we decide.
Where it is kept: In the Order app's database in Sydney, photo included. The email that tells us about your request goes through Resend, in the United States, which keeps a copy for 30 days.

Cookies, and what stays on your phone

Our own code sets seven cookies across the three sites. Five remember that you signed in, one of them for developers only. The other two help the Order app ask for a sign in code: one tells it a browser is a device it has seen, and one holds a code request for 15 minutes. Signing in on the screen an AI assistant opens (Sign in with your Order app login) sets the same session cookie as the Order app's own login. The API sets no cookie and reads none. They are signed, so they cannot be edited or faked. Your browser will not hand them to any script, and no other site can read them. There is no personal information inside any of them. The order form is hosted by Cognito Forms, which may set its own cookies inside that form. Live Chat is Zoho SalesIQ: once you tap it, Zoho sets cookies of its own and keeps an ID in your browser's storage so it knows you next time.

spdy_order30 days
Remembers that you have entered the retailer password for the order form on this site.
spdy_update1 day
Remembers a staff sign in on our internal stock pages. Staff only.
__Host-spdy_app_session90 days on a device you confirmed with a sign in code, otherwise 30 days
Keeps you signed in to the Order app.
__Host-spdy_app_device400 days
Tells the Order app this browser is a device it has seen, so it knows when to ask for a sign in code.
__Host-spdy_app_pending15 minutes
Holds a sign in code request, so the code only works in the browser that asked for it.
spdy_staff_session400 days, renewed with use
Keeps Speedy staff signed in to the Staff app.
spdy_dev30 days
Keeps a developer signed in to the Order app's developer reference with a sandbox login. Developers only.

Google's tags on this website set Google's own cookies: the Google Analytics ones, which tell one visit from the next, and Google's advertising cookies, which measure a visit that came from one of our Google ads and let our ads be shown to people who have visited this website. The Meta pixel on this website sets Meta's own cookies as well, for example _fbp. See Analytics, below. The Order app and the Staff app do not load Google's tags or the Meta pixel.

Stored on your device

The apps also use your browser's own storage, which stays on your device. Nothing in it comes to us unless you send it: a job you send us, or a quote you email your customer, and the Order app's backup, which keeps your Quick Quotes and jobs, their photos, files and drawings, the quotes you have emailed and your markup and margin on our server for the login that made them. (One exception on the website: our landing pages for new retailers keep a link's campaign tags there for the tab, and they go with an enquiry if you send one. See The enquiry forms, above.) The Order app keeps your Quick Quotes and Open Jobs there (sent jobs too, until you delete them) with the photos, files and drawings on them, the markup and margin you use for your selling price, the email your customers' replies go to, the quotes you have emailed, a marker that stops the same job being sent twice from two tabs, a marker that stops a job going to the same fitter twice (it holds none of your customer's details), and anything still queued to send. The Staff app keeps a work email so staff do not retype it at every sign in, and a pick up signature until it's saved to our WorkDrive. All three remember whether you chose the light or the dark theme, and the website notes for the tab that the curtain calculator has been counted, so a visit is counted once.

Clearing your browser data clears all of it. When you sign in to the Order app again, your Quick Quotes and jobs come back from the backup, apart from any change that hadn't backed up yet and anything you haven't changed in the last 12 months.

Analytics

This site and the Order app both use Vercel Web Analytics and Vercel Speed Insights. Web Analytics is cookieless. It counts page views and a few taps that tell us what's working, such as opening the Order app, sending an enquiry or using the curtain calculator, without anything you typed. Speed Insights measures how fast pages load. Neither sets a cookie or collects personal information, and neither follows you from site to site or builds a profile of you. The Staff app has neither.

This website also uses Google Analytics, loaded through Google Tag Manager, to measure visits and which actions are taken: page views, an enquiry form sent, a tap on a phone, email or WhatsApp link, a click through to the Order app, a file download and use of the curtain calculator. Google Analytics uses cookies to tell one visit from the next. Google processes these measurements on its own servers, including outside Australia. No name, email, phone number or message text is sent to Google by these tags. We may use the measurements to judge how our advertising performs.

We also use Google's advertising features with Google Analytics. Google may recognise that a browser has visited this website, so that our ads can be shown to past visitors on Google's own sites and its partner sites. Google calls this remarketing. It also lets us leave out people who have already sent us an enquiry. For this, Google uses its advertising cookies and similar identifiers in your browser. If you are signed in to a Google account and have ad personalisation turned on there, Google may link your visit to that account. No name, email, phone number or message text is sent to Google for this.

What Google receives: the pages you view and the actions you take, the address you came from, an approximate location worked out from your IP address, details of your browser and device, and a cookie identifier. Google explains what it does with this on its page How Google uses information from sites or apps that use our services. Google Analytics cookies last up to two years. We keep the Analytics event data for 14 months.

You can switch this off. To stop ads from Google that are based on your visits, turn off personalised ads in Google's My Ad Centre. To stop Google Analytics recording your visits, use Google's browser add on. For interest based ads in general, from Google and from other companies, use youronlinechoices.com.au or your browser's own settings, where you can also block or delete cookies. This website still works without Google's cookies.

This website also uses the Meta pixel, a tag from Meta, the company that runs Facebook and Instagram. It is loaded through Google Tag Manager. It tells Meta when a page is viewed, an enquiry form is sent, or a phone or WhatsApp link is tapped. No name, email, phone number or message text is sent to Meta. We use it to measure how our Facebook and Instagram ads perform, to show our ads on Facebook and Instagram to people who have visited this website, and to leave out people who have already sent us an enquiry.

Meta uses its own cookies for this, for example _fbp. With each page view or action, Meta gets the address of the page, your IP address, details of your browser and device, and the identifiers in its cookies. If your browser is signed in to Facebook or Instagram, Meta may link the visit to that account. If you have a Facebook or Instagram account, you can choose how Meta uses this for the ads you see in your ad preferences. Meta's Privacy Policy says what it does with what it receives. You can also block or delete Meta's cookies in your browser's settings. This website still works without them.

For visitors in the European Economic Area, the United Kingdom and Switzerland, Google Analytics is set not to store cookies, and Google's advertising features stay off as well: no advertising cookies, and no remarketing. Google still receives a measurement of the visit, without cookies. The Meta pixel does not load for these visitors at all. The Order app and the Staff app do not load Google Analytics, Google Tag Manager, any of Google's advertising features or the Meta pixel.

Live Chat and the order form (Cognito Forms) set cookies of their own, and neither loads until you open it. Google and Meta are the only companies with advertising tags on this website. If we add another measuring or advertising tag, this page changes first.

Who else sees your information

We run on other companies' services, the way every business does. Here is the full list and what each one gets.

Zoho (CRM and WorkDrive): Our customer records and our file storage, both in Zoho's Australian data centre. Accounts, jobs, notes and the files you upload live here.
Zoho SalesIQ (Live Chat): The Live Chat on this website's contact button, in Zoho's Australian data centre. Nothing from it loads until you tap Live Chat. Then it gets what you type into the chat, including any name or email you give, the page you are on, your IP address and your browser. It sets its own cookies and keeps an ID in your browser so it knows you next time. A chat can also become a ticket in Zoho Desk, our support desk, in the same data centre.
Vercel: Hosts all three sites and runs the pages. Anything you send to a page passes through Vercel on the way to us. Vercel also stores the photos, files and drawings on your backed up Quick Quotes and jobs, and the quotes you email your customers, in Sydney. A job sent to a fitter in the app is kept here too, for 90 days. Files your software uploads for an order are kept here, in Sydney, until they are copied into our own storage with the order.
Neon: The database behind the Order app, in Sydney. Holds your job history, job issue records, your logo, the backup of your Quick Quotes and jobs, a count of the quotes you email your customers, the measure scan photos we keep for a while, the record of your devices and sign ins, a copy of your login's details for signing in, and the record of the lines your login asks the app to price, with any flags. It also holds the Fitters List (each fitter's details and photo), your tick on the list's notice, and the record of jobs sent to fitters. A second database, kept apart from the first and also in Sydney, holds everything to do with the API and AI assistants: your API keys (scrambled), your connected assistants, the quotes and orders they send, the retailer details an ordering platform sends with an order, each platform account we have seen, the request log, and the record of which stage each job was at.
OpenAI: Reads the number off a laser measurer when you use the scan button in the Order app. It gets the photo you capture and nothing else about you. OpenAI is in the United States.
Resend: Sends our email. Enquiries, job issues, imported jobs and every job sent from the Order app go out through Resend to reach us. Those emails carry links to your files, never the files themselves. Resend also delivers the quotes you email your customers from the Order app: the quote, your customer's name and email, and your reply email. It keeps a copy of each email for 30 days. It also delivers a job you send to a fitter by email (the job sheet, your customer's name, address and phone, and your reply email) and the email that tells us a fitter has asked to join the list. And it delivers the sign in code we email you when you sign in on a new device or the app asks you to confirm it is you, and the email that tells our office about a flag on a login.
Google Analytics, Google Tag Manager and Google advertising: Measures visits to this website and which actions are taken, and lets our ads be shown to people who have visited, as set out under Analytics above. Google gets the pages you view and the actions you take, the address you came from, an approximate location worked out from your IP address, details of your browser and device, and its cookie identifiers. It uses cookies, advertising cookies included, and Google processes all of this on its own servers, including outside Australia. No name, email, phone number or message text is sent to it. The Order app and the Staff app do not load it.
Google Places: The address lookup in the Order app. What you type into an address box is sent to Google so it can suggest the rest of it. Nothing on this website uses it.
Meta (Facebook and Instagram): The Meta pixel on this website, as set out under Analytics above. It measures how our Facebook and Instagram ads perform and lets our ads be shown there to people who have visited. Meta gets the pages you view, an enquiry form sent and a tap on a phone or WhatsApp link, with the address of the page, your IP address, details of your browser and device, and its cookie identifiers. It uses its own cookies, and Meta processes all of this on its own servers, including outside Australia. No name, email, phone number or message text is sent to it. It does not load for visitors in the European Economic Area, the United Kingdom and Switzerland. The Order app and the Staff app do not load it.
YouTube: The motor setup videos. They are set to no cookie and only load when you press play, but the thumbnail image comes from a Google server as soon as the page opens, which tells Google your IP address.
Cognito Forms: Hosts the order form on this site. Everything you type into that form goes to Cognito Forms and then to us. The rest of this site never sees it.
Nettex: Supplier stock levels for the fabric pages. Fabric codes only, no personal information.
MachShip and Interparcel: Freight quotes. They get the suburb and postcode we are quoting to, and the weight and size of the box. Never a name, a street address, or anything else about your customer.
Fitters you send a job to: Independent businesses, not Speedy. A fitter gets a job only when you send it: the job sheet without prices, your customer's name, address and phone, and your name, company, mobile and email. When a fitter taps the address, their phone opens it in Google Maps.
Retailers who use the Order app: For fitters on our list: retailers see your name, business name, where you work, mobile, photo and answers. We don't show them your email or your ABN.
Your AI assistant's provider: Only if you connect one. Not chosen by us and not working for us. It gets what you ask the assistant to do with the Order app and what we answer: fabrics, stock, your prices, your quotes and orders, and where your jobs are. We never send it payment details or whether a job is paid, because the connection doesn't carry them.
Your ordering software or platform: Only if you use one with a key. Not chosen by us and not working for us. It gets what the key can read: our catalogue and stock, your prices, the quotes and orders it sends, and where those orders are.

Each of them is there to do one job for us. We do not sell your information. Advertising comes into it in one place only: Google's and Meta's tags on this website, which we use to judge how our advertising performs and to show our ads to people who have visited, as set out under Analytics above.

Where your information is stored

Our customer records and files are stored in Australia. Our CRM, our file storage and Live Chat are in Zoho's Australian data centre, and the Order app's database and the backup of your quotes, jobs and their files are in Sydney. The Fitters List and the jobs sent to fitters in the app are in Sydney too, and so is the separate database behind the API and AI assistants.

Four things are held elsewhere: what you type into the order form on this site is kept by Cognito Forms on their own servers, the emails we send, including the quotes you email your customers, go through Resend in the United States, which keeps each one for 30 days, the Google Analytics measurements of this website are processed by Google on its own servers, including outside Australia, and what the Meta pixel sends from this website is processed by Meta on its own servers, including outside Australia.

When you use the measure scan button, OpenAI reads the photo in the United States. The servers that build the pages you open run in Sydney.

How long we keep it

Job records and the emails that go with them: 7 years. Long enough to cover tax, a warranty question, or a claim that turns up later.
Quick Quotes and Open Jobs: They're saved on your phone and backed up on our server for the login that made them, with their photos, files and drawings, so they appear on your other devices. An empty one clears itself after 24 hours. On your phone, everything else stays until you delete it, one at a time or with Delete All in your profile. The backup keeps each one for 12 months after you last changed it, then deletes it, and your phone keeps its copy. Deleting one deletes its backup too, and it goes from your other devices. For a job you sent, the job record we hold stays for the 7 years above.
Quotes you email your customer: The quote and your customer's name and email stay with the record: on your phone until you delete it, and in its backup until 12 months after you emailed it or last changed the record, whichever is later. A copy goes to your reply email. Resend keeps each email for 30 days. We keep only a count of the quotes each login sends, with no customer and no prices in it. It has no fixed deletion date yet.
Your Order app login: If nobody signs in, and your software or assistant doesn't use it either, for 90 days we disable it. Your password is kept, so call us and we will switch it back on. You will not need a new one.
Your login's details for signing in: So the Order app doesn't have to ask our CRM on every page, it keeps a copy of your login: your name, login email, mobile, company and delivery address. It is updated as you use the app, and deleted 90 days after you last used it.
Your devices and sign ins: The Order app keeps a record of each device you sign in on: the type of device, the browser, a rough location worked out from your connection, and when it was first and last used. Each record is deleted 90 days after that device was last used. A note of an unusual sign in is kept 12 months.
The lines your login asks the app to price: Each line's record, and each day's summary of them, is deleted after 90 days. A daily count of what each login priced, kept as scrambled codes with no prices, is deleted after 12 months. A flag, what our office decided about it, and any use of a copied list are kept 12 months. So our office can be told about a flag, we keep one record for each login with its name, login email, company and latest counts. It is deleted 90 days after the login last asked for a price. If the login is paused, has been asked for an email code, or has a flag our office hasn't decided, it is kept until that is settled.
Invite codes: 3 days. After that the code stops working and we send a new one.
Staying signed in: 90 days in the Order app on a device you confirmed with a sign in code, then you sign in again with your password and a new code. Signing out on a device, or changing your password on another one, also means a new code next time on that device. Staff devices stay signed in to the Staff app: 400 days, counted again from each day they're used.
Measure scan photos: A scan you don't use is deleted within three days. A scan you use is kept in our database for 90 days at most. Copies made to train the reader are cleared of anything older than 90 days each time training runs.
Scan records (no photo): No fixed deletion date yet. Each record is linked to your login and holds the number the scan read.
Google Analytics measurements of this website: The Google Analytics cookies in your browser last up to two years. We keep the Analytics event data for 14 months.
Live Chat conversations: No fixed deletion date yet. A chat is kept in Zoho SalesIQ, and in Zoho Desk once it becomes a ticket.
Fitters on our list: Until you come off it. Switching yourself off in Profile keeps your answers. Once we take you off, or if we don't add you, we delete your details and photo 12 months later.
Jobs you send to a fitter: Sent in the app: your customer's name, address and phone, your mobile and email, and the job sheet are kept 90 days for the fitter, then deleted. Sent by email only: we keep none of them, and Resend keeps the email for 30 days. The record of the send (who, which fitter, when, how, and your Job Reference) is kept 12 months. Your own History keeps the line that says you sent it.
Your tick on the Fitters List notice: No fixed deletion date yet. It holds your login, the date and the words you agreed to.
The fitters form's limit: To stop the form being flooded we keep a scrambled code made from your internet address for up to two days. It can't be turned back into the address.
Quotes your software or an assistant asked for: A quote nobody ordered from is deleted after its 14 days. One an order used is kept 12 months.
Orders your software, a platform or an assistant sent: The job record is kept like any job: the 7 years above. Our own copy of what the request said (the delivery address, notes and room names) is kept until the order reaches our folder, then cleared 12 months later. An order that hasn't reached our folder yet is kept until it does. A short record that the order existed stays, so the same order can never be taken twice.
Your details, when a platform orders for you: An ordering platform sends your business name, ABN, contact name, email, mobile and delivery address with each order. We keep them with the order, the same way as the rest of its request: until it reaches our folder, then 12 months.
Your account on an ordering platform: When a platform asks us for prices or sends an order for you, we keep your account number on the platform, the business name and every ABN it has given, how often it asked, and when we first and last saw it. We delete them 12 months after we last see the account. If we have blocked the account, we keep them for as long as it stays blocked.
Where a platform's order is up to: Our copy of the job for an order a platform sent us (its job code, its stages, its tracking numbers and its production and shipping dates) is kept for 12 months after we received the order.
How many prices a platform asked for: For each account, a scrambled code for each line priced, with its product and its fabric's code, so we can count the day's lines. Deleted after 31 days. It holds no prices, rooms or references.
Files uploaded for an order: Until they are copied into our storage with the order. A file no order used is deleted after 24 hours. If an order never reaches our folder, its files are deleted after 30 days.
The request log: 90 days. It holds no names, addresses, references or anything typed.
A connected assistant: It stays connected for 30 days, then you sign in again. Our record of it is deleted 90 days after it ended.
API keys: Until you revoke them. A revoked key's record (its scrambled copy, its name and who made it) is deleted 12 months after it was revoked.
Your login's API switch: Whether your login may use the API and assistants, and the last day it did, are kept while your login exists.
Which stage each job was at: 12 months. It holds the job, the product, the stage and when, and nothing personal.
A developer's sandbox login: 12 months after it was last used, with its test keys. Test orders: 12 months. A test quote nobody ordered from is deleted after its 14 days, like any quote; one a test order used is kept 12 months.
Your login and history, if you ask us to delete them: Gone when you ask. The order records themselves stay for the 7 years above.

Keeping it safe

Passwords are hashed with scrypt before they are stored. We hold the hash, never the password.
Sign in cookies are signed, so they cannot be edited or forged, and they expire on their own.
Every page on this site and in both apps is served over an encrypted connection.
We never collect card or bank details. There is no payment form anywhere on this site or in either app, so there is nothing of that kind for us to store or for anyone to take.
An API key is shown once and stored only as a scrambled copy. So are the codes an AI assistant uses to stay connected.
A key or an assistant can only do what your own login can do. It can't change or cancel a sent order, see payments, or see anything your login can't.
An assistant can't send an order in one step. It has to show you the order first, and our side refuses a send that wasn't shown.
Changing your password disconnects every assistant on that login.
We can switch a login's API and assistants off, and it takes effect on the next request.

If you think someone else has your login, call us on 0436 666 687 and we will disable it while you sort it out.

Ask for a copy, a correction, or deletion

Email sales@speedyblinds.com.au and tell us which business you are with. Any of these is fine to ask for.

A copy

We will send you what we hold about you and your business.

A correction

Tell us what is wrong and we will fix it. Your own contact details are quicker to change yourself in the Order app.

Deletion

We disable your login and delete your history and your logo. The order records themselves stay for the 7 years, because we have to keep them.

If you are a fitter

Tell us your name and mobile. We will send you what we hold, fix what is wrong, or take you off the list. Your details are deleted 12 months after you come off.

We will come back to you within 30 days, and usually much sooner. If there is something we cannot do, we will tell you plainly why.

If you are not happy with our answer

Tell us first, at sales@speedyblinds.com.au or on 0436 666 687. We will look into it and tell you what we found and what we are doing about it.

If our answer still does not sit right, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.

Where we stand under the Privacy Act

Under the Privacy Act, a business with an annual turnover of $3 million or less is exempt from it. Speedy Blinds is under that threshold, so the small business exemption applies to us and we are not an APP entity.

We follow the Australian Privacy Principles anyway. Our retailers trust us with their customers' details, and the right way to handle that does not change because of a turnover figure.

Changes to this page

If we change how we handle your information, we will update this page and change the date at the top. There is no other notice. This page is the notice, so check it here.

Privacy contact

Speedy Blinds Pty Ltd
ABN 41 164 169 135

33 Latitude Blvd
Thomastown VIC 3074

sales@speedyblinds.com.au
0436 666 687

Speedy Blinds Pty Ltd · ABN 41 164 169 135 · 33 Latitude Blvd, Thomastown VIC 3074 · Last updated 12 October 2026