Privacy Policy
Last updated: June 2025
About CoatCore
CoatCore is SaaS (software-as-a-service) production management software built specifically for powder coating workshops and allied manufacturing businesses. CoatCore is operated by CoatCore Pty Ltd.
What Data We Collect and Store
When you use CoatCore, we may collect and store the following categories of data on your behalf:
- Business profile information (name, address, contact details)
- Customer names and contact details
- Quotes, job intakes, production jobs, and job line items
- Invoice data, invoice categories, and payment references
- Powder inventory and product catalogue data
- Workforce records including employee names, timesheets, and leave requests
- Settings, configuration, and accounting integration mapping data
- Usage activity for platform security and reliability purposes
All data is stored securely. Access is restricted by business — you can only access data belonging to your own business account.
Xero Integration
CoatCore offers an optional integration with Xero accounting software. If you choose to connect your Xero account:
- CoatCore will request OAuth 2.0 access to your Xero organisation with the minimum scopes required for invoice and accounting export functionality.
- Access tokens and refresh tokens are stored securely on our servers and are never exposed to your browser or other users.
- CoatCore may access accounting data (such as contacts, transaction settings, and organisation details) as needed to support connection status checks and future invoice export features.
- You can disconnect the Xero integration at any time from Settings → Integrations. Disconnecting will remove stored tokens immediately.
- CoatCore's use of data received from Xero APIs is limited to the features described here and complies with Xero's developer terms of service.
How We Use Your Data
- To provide and operate the CoatCore platform and its features
- To enable integrations you have explicitly connected (such as Xero)
- To send system notifications, subscription updates, and account communications
- To monitor platform reliability and security
CoatCore does not sell your data to third parties.
Data Retention
Your data is retained while your CoatCore account remains active. If you cancel your subscription, we retain data for a reasonable period to allow for account recovery before permanent deletion. Contact us if you wish to request data deletion.
Security
CoatCore uses industry-standard security practices including access controls, encrypted storage for sensitive tokens, and role-based data access. We do not store plain-text passwords. Integration tokens (such as Xero OAuth tokens) are stored server-side only and are never transmitted to the browser.
Your Rights
- You may disconnect any third-party integration (such as Xero) at any time from your Settings.
- You may request a copy of your data or deletion of your account by contacting us.
- You may update your business profile and contact details within the application.
Contact
For any privacy-related questions or requests, please contact us at: glen@coatcore.com.au