SunLedger for ServiceM8 — Privacy Policy

ServiceM8 add-on · Last updated 6 October 2026

This policy covers the SunLedger add-on for ServiceM8: what it reads from a ServiceM8 account, what it writes into one, where that information is kept and for how long. It sits alongside our general Privacy Policy, which covers the rest of SunLedger.

SunLedger is a product of VC & NB Pty Ltd (ABN 57 621 355 002), Victoria, Australia — a CRM for Australian solar companies. The add-on is offered in Australia only.

1. Who connects, and why

• A solar company that uses SunLedger connects its own ServiceM8 so the installs its own crew does arrive there as jobs.
• An installer or contractor connects their ServiceM8 so that solar companies who use SunLedger can send them install jobs. They need no SunLedger account, and they connect from an invite sent by the company or from the ServiceM8 Add-on Store.

The add-on connects with ServiceM8's OAuth sign-in. We never see or store a ServiceM8 password.

2. What the add-on reads from ServiceM8

Only what it needs, through these permissions:

• Your account's name, email and ServiceM8 account ID — to show which ServiceM8 is connected, to the company and to you.
• Jobs the add-on created, and nothing else — their status (Work Order, Completed, Unsuccessful) and completion date, so the solar company can see when an install is done or has been handed back.
• The bookings on those jobs — the scheduled date and time, and the names of the staff booked to them, so the company can see when the install is happening and who is going.
• Clients — only to find or create the solar company itself as the client on the jobs it sends you.

ServiceM8 tells us when a job or booking changes. When that message is about any job the add-on did not create, we ignore it without reading the job. The add-on does not read your other clients or jobs, quotes, invoices, payments, photos, forms, messages or inbox.

3. What the add-on writes into ServiceM8

When a solar company sends an install to an installer, the add-on creates one Work Order in that installer's ServiceM8 with:

• the solar company as the client, and the property's address as the job address;
• the homeowner's name and mobile number as the site contact, so the crew can call ahead — never their email;
• a description of the system (panels, inverters, battery), the requested install date and the company's quote number as the order number;
• a job note with a link to the job pack (roof layout, equipment, strings and checklist), and a note if the company later changes the requested date.

It never writes prices, rebates, finance or anything else the solar company charged its customer. If the company withdraws a job, or sends it to a different installer, the add-on marks the first Work Order Unsuccessful. It never deletes anything in your ServiceM8.

4. Who can see it

• A solar company sees only the jobs it sent: their status, bookings and completion. It never sees an installer's other work, or work for other companies.
• An installer who works for several companies sees, on their SunLedger page, only the names of the companies that send them jobs. Each company sees only its own jobs. One company never learns which other companies an installer works for.
• Inside a solar company, the SunLedger people who can open that customer see the job's status, as for the rest of the customer record.

5. How it is stored and protected

The connection keys ServiceM8 issues are stored encrypted, and only our server ever reads them. For each job we keep its ServiceM8 job ID and number, status, booked date, time and staff names, and completion date, with the solar company's customer record. Each solar company's data is kept separate at the database level. All traffic is encrypted in transit.

6. What we never do

We do not sell ServiceM8 data, use it for advertising, share it with anyone outside the solar company the job belongs to, or use it to train AI models.

7. How long we keep it, and disconnecting

• Installers can stop one company, or disconnect ServiceM8 from SunLedger entirely, from their page at sunledger.com.au/sm8. Disconnecting deletes the connection keys at once, and every company is told.
• Solar companies can disconnect their own ServiceM8 from Settings → Integrations → ServiceM8, which deletes its keys at once.
• Removing the SunLedger add-on inside ServiceM8 also ends our access: ServiceM8 refuses our keys from then on.
• Job details kept by a solar company stay with that customer's record for as long as the record exists, and are deleted with it. A solar company that leaves SunLedger has its data deleted as our general Privacy Policy describes.
• Jobs already in your ServiceM8 stay there. They are yours.

8. Your rights and contact

We handle personal information under the Australian Privacy Principles. To ask what we hold, or to have it corrected or deleted, email admin@sunledger.com.au. If a solar company sent you a job, the homeowner's details belong to that company, so please ask them as well; we will help them answer.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

VC & NB Pty Ltd (ABN 57 621 355 002), trading as SunLedger. Victoria, Australia.