Privacy Policy

Effective 18 July 2026. Updated 17 October 2026.

Who we are

DocketBridge is a product of Laurits Christophersen, a sole trader based in Western Australia, ABN 29 653 929 021. In this policy, "we" and "us" mean Laurits Christophersen.

What DocketBridge does

DocketBridge transfers completed ServiceM8 form PDFs to matching Xero invoices at your direction. It is offered to businesses in Australia and New Zealand.

Information we store

We store your email address, a one-way password hash, business name, selected settings, activity records, and encrypted ServiceM8 and Xero connection credentials. Each activity record holds the Xero invoice ID and invoice number, the ServiceM8 attachment ID, the file name, the result and the time. If you subscribe, we store Stripe customer and subscription identifiers. If you connect with ServiceM8 sign-in, we also store your ServiceM8 account name and account identifier. We also store the name of the Xero organisation you connect, so your dashboard can show it.

To show you what DocketBridge did and why, we also store records of invoices it skipped: the Xero invoice ID and invoice number, the reason, both totals when they differ, and when it was first and last seen. We keep the Xero invoice IDs of invoices queued to be checked again, whether a ServiceM8 or Xero connection needs attention and since when, the time of the last successful check, and, if you subscribe, the times of any failed payment and of your subscription ending. For account emails we keep a record of which email was sent to you and when, and whether you switched off reminder emails.

When you log in, DocketBridge sets one cookie, docketbridge_session, which keeps you logged in for 30 days. It holds a random token, and we store only a hash of it. DocketBridge sets no other cookies and uses no analytics or advertising trackers. To limit repeated login and email attempts, we also keep hashed records of the IP addresses and email addresses used, with a count and a time.

Documents and accounting data

We do not store your PDFs. Document bytes pass through server memory from ServiceM8 to Xero and are discarded after each request. We read the minimum job, form, attachment, and invoice information needed to match and transfer each docket.

ServiceM8 data we use

From ServiceM8, DocketBridge reads jobs (to match the job number and total to a Xero invoice), completed form responses and their attachment records, the completed form and docket PDFs themselves, form template names so you can choose which forms are dockets, and client names and identifiers for your client rules. With ServiceM8 sign-in it also reads your account name and account identifier. The PDFs pass through server memory on their way to Xero and are never stored. We keep only the form and client identifiers you select, activity records (described above), and encrypted connection credentials.

Connections and permissions

The Xero connection requests offline access, invoice access, and attachment access. The ServiceM8 connection uses either ServiceM8 sign-in, which grants DocketBridge read-only access to your account details, jobs, attachments, forms, and clients, or a read-only API key supplied by you. Stripe hosts payment entry, so DocketBridge does not receive or store your card number.

Service providers

We use Render for hosting, Xero and ServiceM8 to provide the integration, Stripe for subscription billing, and Resend to send our emails: account verification and password recovery, and the service emails described below.

Emails we send

We email the verified login address of your account. Resend delivers these emails for us and receives your email address and the message to do so.

• Account emails: email verification, password reset, and confirmation that your account was deleted.
• Billing emails: when a payment fails, when DocketBridge pauses 24 hours later because it is still unpaid, and when it is running again.
• Connection emails: once when ServiceM8 or Xero stops accepting DocketBridge.
• Deletion warning: 14 days before we delete your workspace under "How long we keep information".
• Reminders: a welcome email after you verify your email, a setup reminder if ServiceM8 or Xero is not connected after about a day, and trial reminders 3 days before and when your trial ends.

Every reminder has a link to stop reminders, and we honour it straight away. If you email us instead, we switch them off within one business day. Account, billing, connection and deletion emails are part of running the service, so they keep coming while they apply.

Where your data is stored

Our database and its daily backups are stored with Render in Singapore. Stripe and Resend may process information in the United States and other countries. Each provider is bound by its own privacy terms.

We disclose personal information only to these service providers, so they can run DocketBridge for us, or where the law requires it. Information also moves between your ServiceM8 account and your Xero organisation at your direction, once you connect them.

Security

Connection credentials, including ServiceM8 sign-in tokens and API keys, are encrypted at rest. Passwords are protected with Argon2id hashing and login sessions are stored server-side.

How long we keep information

• While your trial or subscription is current, we keep your account, settings and activity records so DocketBridge can run.
• If your trial ends without a subscription, or your subscription ends, we keep your workspace for 12 months in case you come back. We then delete your account, stored connection credentials, settings and activity records automatically. We email you 14 days before, and subscribing again before then keeps your workspace.
• You can delete your workspace yourself at any time with Delete account on your dashboard. It cancels any subscription straight away, deletes your workspace at once and we confirm by email.
• If you ask us by email to delete your workspace, we do it within 30 days and confirm by email.
• Records of skipped invoices are removed once the invoice matches, or after 90 days without the same skip.
• Daily backups are kept for 14 days, so deleted information is removed from them within 15 days.
• We keep billing records for as long as tax law requires.

Disconnecting and uninstalling

From your DocketBridge dashboard you can remove a saved ServiceM8 read-only API key, or disconnect Xero, at any time. Each deletes the stored credentials and pauses DocketBridge. Disconnecting Xero also asks Xero to remove DocketBridge's connection; if Xero cannot be reached, you can remove it in Xero yourself.

You can disconnect ServiceM8 sign-in from your DocketBridge dashboard at any time. This deletes the stored ServiceM8 tokens and account details and pauses DocketBridge. If you disable or uninstall the DocketBridge add-on in ServiceM8, ServiceM8 withdraws our access. While DocketBridge is running, it usually notices within about an hour, then deletes the stored ServiceM8 tokens, pauses, and shows a notice on your dashboard. If DocketBridge is paused, or your trial or subscription has ended, it notices the next time you open your dashboard. To remove the stored tokens straight away, press Disconnect or email us. Your settings and activity records are kept as described under "How long we keep information".

Responsibilities

You are responsible for:

• having authority to connect each ServiceM8 account and Xero organisation you connect to DocketBridge;
• keeping your DocketBridge login, ServiceM8 API keys and other credentials secure;
• checking invoices and attachments before you send them to your customers; and
• telling us promptly at laurits@specializedcg.com.au if you believe someone has accessed your DocketBridge account without your permission.

We are responsible for:

• using your ServiceM8 and Xero data only to provide DocketBridge to you;
• never selling your information;
• protecting it with the security measures described in this policy;
• telling affected customers promptly about any data breach that is likely to cause them serious harm; and
• honouring your requests to delete your workspace information, as described below.

Your choices

You can pause DocketBridge, remove its connections from your dashboard or revoke them in Xero and ServiceM8, stop reminder emails, delete your workspace from your dashboard, or request deletion of your workspace information.

Your rights

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email laurits@specializedcg.com.au from the address you log in with. We reply within 20 working days. If we cannot do what you ask, we tell you why.

When we delete your workspace, we delete your account, stored credentials, settings, activity records, records of skipped invoices and email records, except anything we must keep by law, and confirm by email. Stripe keeps its own billing records.

Complaints

If you think we have mishandled your personal information, email us with the details. We acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or, in New Zealand, the Privacy Commissioner (privacy.org.nz).

Contact

For privacy questions, access, correction and deletion requests, or complaints, email laurits@specializedcg.com.au.