Privacy Policy

1. What personal information we collect

We collect personal information that is reasonably necessary for our business activities. This may include:

• Contact details: name, position, employer, email address, phone number, postal address
• Account credentials: usernames, password hashes, role assignments and access permissions
• Usage data: IP addresses, device information, browser type, access times, pages viewed, features used
• Communications: records of emails, support tickets, chat messages and other correspondence
• Uploaded content: photographs, inspection reports, condition assessments and other documents uploaded by users to the platform, which may contain personal information incidental to the asset record

We do not collect sensitive information (as defined in the Privacy Act) unless it is necessary and we have obtained your consent, or an exception under the APPs applies.

2. How we collect personal information

We collect personal information:

• directly from you when you register for an account, complete forms, correspond with us, or use our platform
• from your employer or organisation where they administer your access to the platform
• through automated technologies such as cookies and server logs when you interact with our website or platform
• from third-party service providers where you have authorised such collection

3. Why we collect, hold, use and disclose personal information

We use and disclose personal information for the primary purposes for which it was collected, including:

• providing, operating and maintaining the AssetStack platform and services
• authenticating users and managing access permissions
• communicating with you about your account, service updates, security alerts and support requests
• improving our platform, developing new features and conducting analytics
• complying with legal obligations, resolving disputes and enforcing our agreements
• marketing our services to you (where you have consented, or where permitted by law)

We do not sell personal information to third parties.

4. Disclosure of personal information

We may disclose personal information to:

• our employees, contractors and professional advisers who need it to perform their duties
• third-party service providers who assist us in operating our platform (e.g., cloud hosting providers, payment processors, analytics providers), subject to confidentiality obligations
• regulatory authorities, government agencies or law enforcement bodies where required or authorised by law
• your employer or organisation, where they are the account holder and you are an authorised user

All third-party providers are bound by contractual obligations to handle personal information in accordance with the APPs and our instructions.

5. Overseas disclosure

AssetStack stores all personal information in Australia. We do not transfer personal information to overseas recipients. If this position changes, we will update this Privacy Policy and obtain your consent where required by the APPs.

6. Data security

We hold personal information in secure cloud environments with:

• encryption in transit (TLS 1.2+) and at rest (AES-256)
• role-based access controls and multi-factor authentication
• per-tenant data isolation
• regular security assessments and monitoring

For further details, please refer to our Security page.

7. Access, correction and complaints

You have the right to:

• request access to the personal information we hold about you
• request correction of inaccurate, out-of-date, incomplete or misleading personal information
• make a complaint if you believe we have breached the APPs

To make a request or complaint, contact our Privacy Officer using the details below. We will respond within 30 days.

8. Cookies and analytics

Our website and platform use cookies and similar technologies to:

• maintain user sessions and authentication
• remember preferences and settings
• analyse platform usage and performance

You can configure your browser to refuse cookies, though this may affect platform functionality.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will be published on our website with the effective date. We encourage you to review it periodically.

10. Contact us

Privacy OfficerAssetStack Pty LtdEmail: [email protected]Address: 388 George Street, Sydney NSW 2000