Draft prepared: 31 October 2026 · Effective date: To be confirmed on publication
1. About this policy
This Cookie Policy explains how SubbieFlow uses cookies and similar technologies on its public website and in its subcontractor claims and project management software (the Platform). It should be read with our Privacy Policy and Terms of Service. This document describes our currently identified technologies; the production environment must be audited before publication.
3. Essential authentication and session cookies
SubbieFlow uses Supabase authentication and server-side cookie handling to maintain user sessions, authenticate requests and support secure access to the Platform. The precise cookie names, expiration periods and settings may vary with the Supabase authentication implementation and must be verified in the deployed application. These cookies are necessary for login and core functionality.
4. Subcontractor company-selection cookie
The Platform sets a cookie named sf_installer_company to remember the company context selected in the subcontractor portal. The cookie stores a company identifier, not bank account details. Its configured lifetime is up to 90 days; it is HttpOnly, uses SameSite=Lax, is scoped to /installer, and uses Secure when running in production. The Platform separately checks the signed-in user’s associated company profiles rather than relying on the cookie alone for access.
5. Subscription checkout and third-party services
SubbieFlow uses Stripe to handle subscription checkout and billing. When a user visits Stripe-hosted checkout or other Stripe services, Stripe may use cookies or similar technologies for payment processing, fraud prevention and security under its own policies. The specific technologies present depend on the actual checkout integration and must be checked during launch testing. SubbieFlow does not use Stripe to transfer subcontractor payments.
6. Analytics and advertising technologies
Our current source-code checks did not identify Google Analytics, Meta Pixel, Microsoft Clarity, Hotjar, PostHog or Vercel Analytics in the website and application folders reviewed. This is not a guarantee that no such technologies exist in production or in third-party pages. We will update this policy and assess consent or preference controls before introducing optional analytics or advertising tracking.
7. Your choices
You can usually view, block or delete cookies through your browser settings. Blocking essential cookies may prevent you from signing in, keeping a session active or using parts of the Platform. If optional non-essential tracking is introduced, SubbieFlow will assess the appropriate notice and choice mechanisms under applicable law and the technologies used.
8. Personal information and security
Some cookies or related identifiers may be personal information where they identify or can reasonably identify an individual. Our Privacy Policy explains how we handle personal information, including access, correction, complaints and contact details. Cookie settings do not replace the Platform’s authorisation controls.
9. Updates
We may update this Cookie Policy when the Platform, providers, cookie practices or applicable legal requirements change. We will show an updated effective date when a revised policy is published and provide additional notice where appropriate.
10. Contact
For questions about cookies, privacy or this policy, contact admin@subbieflow.com.au. SubbieFlow is operated by Brandon Kermeci, sole trader, ABN 65 256 377 693, Victoria, Australia.