LEGAL
Privacy Policy
Privacy Policy
Last Updated: 24 September 2026
1. Introduction
Chargetree Pty Ltd (ABN 56 671 867 137) ("Chargetree", "we", "us", "our") provides a white-labelled accounts receivable automation platform for small and medium businesses in Australia. Our service integrates with our customers' accounting systems (such as Xero) and Stripe accounts, and uses automated email, SMS and AI-assisted voice calls to follow up on overdue invoices on our customers' behalf, including pre-legal reminders where our Customer has enabled them.
We are committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs), regardless of whether Chargetree is strictly required to comply due to its size. This Privacy Policy explains what personal information we collect, how we collect, hold, use and disclose it, and how you can access, correct or complain about the handling of your personal information.
This Privacy Policy applies to:
Our direct customers – the small business owners, staff and authorised users who sign up for and use the Chargetree platform ("Customers", "you", "your account"); and
Our customers' customers – the individuals and businesses who owe money to our Customers and who we contact on our Customers' behalf as part of the accounts receivable service ("Contacts").
Where this policy applies differently to these two groups, we say so clearly.
2. Who We Are
Chargetree Pty Ltd
ABN: 56 671 867 137
chargetree.co
Privacy Contact: support@chargetree.co
3. Our Role: Two Groups of Personal Information
Chargetree collects and handles personal information in two distinct capacities, and it is important to understand the difference:
3.1 Personal information about our Customers (account holders)
When a business signs up to Chargetree, we collect personal information about that business's owners, directors and staff who use our platform. For this information, Chargetree is the APP entity responsible for the personal information – we determine how and why it is collected, used and disclosed, and this Privacy Policy governs that use directly.
3.2 Personal information about our Customers' Contacts
To provide the accounts receivable service, our Customers connect their accounting system (such as Xero) and Stripe account, and instruct us to contact their own customers (Contacts) about overdue invoices via email, SMS and AI-assisted voice calls. For this information, Chargetree acts as a service provider processing personal information on our Customer's instructions. Our Customer remains responsible for ensuring it has a proper basis to disclose its own customers' personal information to Chargetree, and for meeting its own obligations (including under its own privacy policy) to notify its customers that a third-party platform (Chargetree) is engaged to assist with invoice follow-up and reminders. Businesses may also use our service through a partner's platform; in that case, 'Customer' includes those businesses.
Chargetree nonetheless applies the protections described in this Privacy Policy to Contact personal information, and Contacts may contact us directly using the details in Section 17 with any question or complaint about how their information has been handled.
Communications sent to Contacts (SMS, email and AI voice calls) are sent in the name of our Customer's business. Email and SMS messages, and our payment portal, display "Powered by Chargetree". If you are a Contact and unsure who is contacting you or how your information is being handled, you can contact us using the details in Section 17, or contact the business you owe the invoice to.
4. Kinds of Personal Information We Collect
4.1 About Customers (account holders)
Name, email address, phone number and job title
Business name, ABN, business address and industry
Account login credentials
Billing and payment information (processed via Stripe – we do not store full card details)
Communications with our support team
Usage data (how you use the Chargetree platform), device and browser information, IP address, and analytics/cookie data (see Section 13)
4.2 About Contacts (our Customers' customers)
Name and contact details (email address, phone number, mailing address)
Business name and ABN (where the Contact is a business), includingABN validity information we look up via the Australian Business Register
Invoice details: amounts owing, due dates, invoice history and payment status, sourced from Xero or other connected accounting system
Payment status and transaction details for payments made through our payment portal. Card and bank details are collected and processed by Stripe; we do not receive or store them
Payment behaviour and communication history (e.g. which reminders were sent, opened, or responded to)
Where AI voice calls are made: call audio recordings, call transcripts and call metadata (time, duration, outcome)
Records of any dispute, hardship request, opt-out or unsubscribe request, or pre-legal reminder sent
We do not collect sensitive information (such as health, racial or ethnic origin, or criminal record information) as part of our ordinary service, and we ask that Customers do not provide us with sensitive information about their Contacts.
5. How We Collect Personal Information
Directly from Customers, when they create an account, contact support, or use the platform.
From our Customers' connected accounting and payment systems (Xero or other accounting system, and Stripe), which our Customers authorise us to access in order to identify overdue invoices and Contact contact details.
Through the ordinary operation of the service, including message delivery logs, call recordings and transcripts, and engagement data (e.g. email opens, link clicks).
From the Australian Business Register, when we check the validity of an ABN provided by or about a Customer or Contact.
From Contacts themselves, if they reply to a message, speak with our AI voice system, or contact us to dispute or resolve an invoice.
We generally collect Contact personal information indirectly – that is, from our Customer rather than from the Contact directly – because that is the nature of an accounts receivable service.
6. Purposes for Which We Collect, Hold, Use and Disclose Personal Information
We collect, hold, use and disclose personal information to:
provide, operate and improve the Chargetree platform;
follow up overdue invoices on our Customers' behalf via automated email, SMS and AI voice calls;
verify ABNs and business details;
send pre-legal reminders where our Customer has enabled them;
record voice calls for quality assurance and evidence-gathering purposes (callers are told at the start of the call that it is being recorded);
process billing and payments for our own service;
provide customer support and respond to enquiries or complaints;
maintain the security and integrity of our platform, and detect and prevent fraud;
comply with our legal and regulatory obligations; and
with consent, or as otherwise permitted by law, for any other purpose notified to you at the time of collection.
7. Artificial Intelligence and Automated Decision-Making
Chargetree uses artificial intelligence and automation as a core part of its service, including to:
draft and send automated email and SMS reminders;
conduct AI-assisted voice calls to follow up on overdue invoices; and
help prioritise which overdue invoices are followed up, and when an account may be escalated to a pre-legal reminder.
Human oversight: Automated decisions that may significantly affect a Contact – such as sending a pre-legal reminder – are subject to review, and a Contact or Customer can request that a human review any automated outcome by contacting us using the details in Section 17.
Kinds of personal information used: invoice and payment history, communication and engagement history, and (for AI voice calls) call audio and transcripts.
Kinds of decisions: prioritisation and timing of follow-up communications, and escalation recommendations for unresolved overdue invoices.
We do not use Customer or Contact personal information to train AI models beyond what is needed to operate the specific service provided to that Customer, and we do not share this information with AI providers for their own model-training purposes where we can control this through our vendor agreements.
8. Who We Disclose Personal Information To
We disclose personal information to trusted third parties who help us operate the Chargetree platform and provide our service, including:
cloud hosting and database providers, who store and process the data underlying the platform;
communications providers, who help us deliver email, SMS and AI-assisted voice call reminders;
AI and automation service providers, who help power the automated and AI-assisted features of our service;
accounting and payment integration partners (such as Xero and Stripe), which our Customers authorise us to connect to;
our professional advisers (legal, accounting), where necessary to obtain advice or meet legal obligations;
law enforcement or regulatory bodies, where required or authorised by law;
a law firm or other adviser engaged by our Customer, where our Customer asks us to provide records for legal proceedings it takes; and,
partners through whose platform a Customer uses our service, and the Customer itself, including records of reminders, replies and call recordings relating to that Customer's invoices.
The specific third-party providers we use may change from time to time as our platform evolves. We require our vendors to protect personal information appropriately and to use it only for the purposes we authorise, and we take reasonable steps to put appropriate data protection arrangements in place with each of them.
9. Overseas Disclosure
We are likely to disclose personal information to recipients located overseas, principally in the United States, where a number of our communications and AI service providers are based. Some of our infrastructure is also hosted within Australia.
Before disclosing personal information overseas, we take reasonable steps to ensure that overseas recipients handle it consistently with the Australian Privacy Principles, including through vendor due diligence and contractual data protection commitments.
10. How We Protect Personal Information
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including:
access controls and authentication for our systems and staff;
encryption of data in transit where supported by our infrastructure providers;
limiting access to personal information to staff and vendors who need it to perform their role; and
regular review of our security practices as our platform and vendor relationships evolve.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. How Long We Keep Personal Information
We retain account and billing records for our Customers for 7 years after the end of the relevant business relationship, consistent with Australian record-keeping requirements. We retain Contact information for as long as our Customer uses our service and for up to 12 months afterwards, unless our Customer asks us to return or delete it sooner, or we need to keep particular records for an active dispute, legal proceedings or other legal obligation. When personal information is no longer required, we take reasonable steps to destroy or de-identify it.
12. Accessing and Correcting Your Personal Information
You may request access to, or correction of, the personal information we hold about you by contacting us using the details in Section 17. We will respond within a reasonable period (generally within 30 days). We may need to verify your identity before providing access, and there are limited circumstances under the Privacy Act where we may decline a request (for example, where it would unreasonably impact the privacy of others) – if so, we will explain why.
If you are a Contact and believe an invoice, payment record or other information we hold about you is incorrect, please contact us or the business you owe the invoice to, so it can be corrected.
13. Direct Marketing, Cookies and Analytics
Marketing: We do not currently send newsletter-style marketing emails to Customers or Contacts. If this changes, any marketing communication will include a clear way to opt out, consistent with the Spam Act 2003 (Cth).
Cookies and analytics: Our website (chargetree.co) uses cookies and similar tracking technologies, including Google Analytics, Mixpanel and the Meta Pixel, to understand how visitors use our website and to measure the effectiveness of our marketing. These tools may collect information such as your IP address, device and browser type, pages visited, and referring website. You can control or disable cookies through your browser settings, though this may affect how the website functions.
14. Data Breach Notification
If we become aware of a data breach involving personal information that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches scheme in the Privacy Act, including notifying the Office of the Australian Information Commissioner (OAIC) and affected individuals as required.
15. Complaints
If you have a concern about how Chargetree has handled your personal information, please contact us first using the details in Section 17, with as much detail as possible. We will investigate and aim to respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Website: www.oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our vendors, or the law. The updated version will be posted on our website with a revised "last updated" date. We encourage you to review this policy periodically.
17. Contact Us
Chargetree Pty Ltd
ABN 56 671 867 137
support@chargetree.co
chargetree.co
1. Introduction
Chargetree Pty Ltd (ABN 56 671 867 137) ("Chargetree", "we", "us", "our") provides a white-labelled accounts receivable automation platform for small and medium businesses in Australia. Our service integrates with our customers' accounting systems (such as Xero) and Stripe accounts, and uses automated email, SMS and AI-assisted voice calls to follow up on overdue invoices on our customers' behalf, including pre-legal reminders where our Customer has enabled them.
We are committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs), regardless of whether Chargetree is strictly required to comply due to its size. This Privacy Policy explains what personal information we collect, how we collect, hold, use and disclose it, and how you can access, correct or complain about the handling of your personal information.
This Privacy Policy applies to:
Our direct customers – the small business owners, staff and authorised users who sign up for and use the Chargetree platform ("Customers", "you", "your account"); and
Our customers' customers – the individuals and businesses who owe money to our Customers and who we contact on our Customers' behalf as part of the accounts receivable service ("Contacts").
Where this policy applies differently to these two groups, we say so clearly.
2. Who We Are
Chargetree Pty Ltd
ABN: 56 671 867 137
chargetree.co
Privacy Contact: support@chargetree.co
3. Our Role: Two Groups of Personal Information
Chargetree collects and handles personal information in two distinct capacities, and it is important to understand the difference:
3.1 Personal information about our Customers (account holders)
When a business signs up to Chargetree, we collect personal information about that business's owners, directors and staff who use our platform. For this information, Chargetree is the APP entity responsible for the personal information – we determine how and why it is collected, used and disclosed, and this Privacy Policy governs that use directly.
3.2 Personal information about our Customers' Contacts
To provide the accounts receivable service, our Customers connect their accounting system (such as Xero) and Stripe account, and instruct us to contact their own customers (Contacts) about overdue invoices via email, SMS and AI-assisted voice calls. For this information, Chargetree acts as a service provider processing personal information on our Customer's instructions. Our Customer remains responsible for ensuring it has a proper basis to disclose its own customers' personal information to Chargetree, and for meeting its own obligations (including under its own privacy policy) to notify its customers that a third-party platform (Chargetree) is engaged to assist with invoice follow-up and reminders. Businesses may also use our service through a partner's platform; in that case, 'Customer' includes those businesses.
Chargetree nonetheless applies the protections described in this Privacy Policy to Contact personal information, and Contacts may contact us directly using the details in Section 17 with any question or complaint about how their information has been handled.
Communications sent to Contacts (SMS, email and AI voice calls) are sent in the name of our Customer's business. Email and SMS messages, and our payment portal, display "Powered by Chargetree". If you are a Contact and unsure who is contacting you or how your information is being handled, you can contact us using the details in Section 17, or contact the business you owe the invoice to.
4. Kinds of Personal Information We Collect
4.1 About Customers (account holders)
Name, email address, phone number and job title
Business name, ABN, business address and industry
Account login credentials
Billing and payment information (processed via Stripe – we do not store full card details)
Communications with our support team
Usage data (how you use the Chargetree platform), device and browser information, IP address, and analytics/cookie data (see Section 13)
4.2 About Contacts (our Customers' customers)
Name and contact details (email address, phone number, mailing address)
Business name and ABN (where the Contact is a business), includingABN validity information we look up via the Australian Business Register
Invoice details: amounts owing, due dates, invoice history and payment status, sourced from Xero or other connected accounting system
Payment status and transaction details for payments made through our payment portal. Card and bank details are collected and processed by Stripe; we do not receive or store them
Payment behaviour and communication history (e.g. which reminders were sent, opened, or responded to)
Where AI voice calls are made: call audio recordings, call transcripts and call metadata (time, duration, outcome)
Records of any dispute, hardship request, opt-out or unsubscribe request, or pre-legal reminder sent
We do not collect sensitive information (such as health, racial or ethnic origin, or criminal record information) as part of our ordinary service, and we ask that Customers do not provide us with sensitive information about their Contacts.
5. How We Collect Personal Information
Directly from Customers, when they create an account, contact support, or use the platform.
From our Customers' connected accounting and payment systems (Xero or other accounting system, and Stripe), which our Customers authorise us to access in order to identify overdue invoices and Contact contact details.
Through the ordinary operation of the service, including message delivery logs, call recordings and transcripts, and engagement data (e.g. email opens, link clicks).
From the Australian Business Register, when we check the validity of an ABN provided by or about a Customer or Contact.
From Contacts themselves, if they reply to a message, speak with our AI voice system, or contact us to dispute or resolve an invoice.
We generally collect Contact personal information indirectly – that is, from our Customer rather than from the Contact directly – because that is the nature of an accounts receivable service.
6. Purposes for Which We Collect, Hold, Use and Disclose Personal Information
We collect, hold, use and disclose personal information to:
provide, operate and improve the Chargetree platform;
follow up overdue invoices on our Customers' behalf via automated email, SMS and AI voice calls;
verify ABNs and business details;
send pre-legal reminders where our Customer has enabled them;
record voice calls for quality assurance and evidence-gathering purposes (callers are told at the start of the call that it is being recorded);
process billing and payments for our own service;
provide customer support and respond to enquiries or complaints;
maintain the security and integrity of our platform, and detect and prevent fraud;
comply with our legal and regulatory obligations; and
with consent, or as otherwise permitted by law, for any other purpose notified to you at the time of collection.
7. Artificial Intelligence and Automated Decision-Making
Chargetree uses artificial intelligence and automation as a core part of its service, including to:
draft and send automated email and SMS reminders;
conduct AI-assisted voice calls to follow up on overdue invoices; and
help prioritise which overdue invoices are followed up, and when an account may be escalated to a pre-legal reminder.
Human oversight: Automated decisions that may significantly affect a Contact – such as sending a pre-legal reminder – are subject to review, and a Contact or Customer can request that a human review any automated outcome by contacting us using the details in Section 17.
Kinds of personal information used: invoice and payment history, communication and engagement history, and (for AI voice calls) call audio and transcripts.
Kinds of decisions: prioritisation and timing of follow-up communications, and escalation recommendations for unresolved overdue invoices.
We do not use Customer or Contact personal information to train AI models beyond what is needed to operate the specific service provided to that Customer, and we do not share this information with AI providers for their own model-training purposes where we can control this through our vendor agreements.
8. Who We Disclose Personal Information To
We disclose personal information to trusted third parties who help us operate the Chargetree platform and provide our service, including:
cloud hosting and database providers, who store and process the data underlying the platform;
communications providers, who help us deliver email, SMS and AI-assisted voice call reminders;
AI and automation service providers, who help power the automated and AI-assisted features of our service;
accounting and payment integration partners (such as Xero and Stripe), which our Customers authorise us to connect to;
our professional advisers (legal, accounting), where necessary to obtain advice or meet legal obligations;
law enforcement or regulatory bodies, where required or authorised by law;
a law firm or other adviser engaged by our Customer, where our Customer asks us to provide records for legal proceedings it takes; and,
partners through whose platform a Customer uses our service, and the Customer itself, including records of reminders, replies and call recordings relating to that Customer's invoices.
The specific third-party providers we use may change from time to time as our platform evolves. We require our vendors to protect personal information appropriately and to use it only for the purposes we authorise, and we take reasonable steps to put appropriate data protection arrangements in place with each of them.
9. Overseas Disclosure
We are likely to disclose personal information to recipients located overseas, principally in the United States, where a number of our communications and AI service providers are based. Some of our infrastructure is also hosted within Australia.
Before disclosing personal information overseas, we take reasonable steps to ensure that overseas recipients handle it consistently with the Australian Privacy Principles, including through vendor due diligence and contractual data protection commitments.
10. How We Protect Personal Information
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including:
access controls and authentication for our systems and staff;
encryption of data in transit where supported by our infrastructure providers;
limiting access to personal information to staff and vendors who need it to perform their role; and
regular review of our security practices as our platform and vendor relationships evolve.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. How Long We Keep Personal Information
We retain account and billing records for our Customers for 7 years after the end of the relevant business relationship, consistent with Australian record-keeping requirements. We retain Contact information for as long as our Customer uses our service and for up to 12 months afterwards, unless our Customer asks us to return or delete it sooner, or we need to keep particular records for an active dispute, legal proceedings or other legal obligation. When personal information is no longer required, we take reasonable steps to destroy or de-identify it.
12. Accessing and Correcting Your Personal Information
You may request access to, or correction of, the personal information we hold about you by contacting us using the details in Section 17. We will respond within a reasonable period (generally within 30 days). We may need to verify your identity before providing access, and there are limited circumstances under the Privacy Act where we may decline a request (for example, where it would unreasonably impact the privacy of others) – if so, we will explain why.
If you are a Contact and believe an invoice, payment record or other information we hold about you is incorrect, please contact us or the business you owe the invoice to, so it can be corrected.
13. Direct Marketing, Cookies and Analytics
Marketing: We do not currently send newsletter-style marketing emails to Customers or Contacts. If this changes, any marketing communication will include a clear way to opt out, consistent with the Spam Act 2003 (Cth).
Cookies and analytics: Our website (chargetree.co) uses cookies and similar tracking technologies, including Google Analytics, Mixpanel and the Meta Pixel, to understand how visitors use our website and to measure the effectiveness of our marketing. These tools may collect information such as your IP address, device and browser type, pages visited, and referring website. You can control or disable cookies through your browser settings, though this may affect how the website functions.
14. Data Breach Notification
If we become aware of a data breach involving personal information that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches scheme in the Privacy Act, including notifying the Office of the Australian Information Commissioner (OAIC) and affected individuals as required.
15. Complaints
If you have a concern about how Chargetree has handled your personal information, please contact us first using the details in Section 17, with as much detail as possible. We will investigate and aim to respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Website: www.oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our vendors, or the law. The updated version will be posted on our website with a revised "last updated" date. We encourage you to review this policy periodically.
17. Contact Us
Chargetree Pty Ltd
ABN 56 671 867 137
support@chargetree.co
chargetree.co
Collections that feels human and actually works
Everything you need to recover overdue invoices at scale, without chasing or awkward conversations.
Start a free trial
Automated collections, built for real relationships.
Collections that feels human and actually works
Everything you need to recover overdue invoices at scale, without chasing or awkward conversations.
Start a free trial
Automated collections, built for real relationships.
Collections that feels human and actually works
Everything you need to recover overdue invoices at scale, without chasing or awkward conversations.
Start a free trial
Automated collections, built for real relationships.