PRIVACY POLICY

This Privacy Policy explains how iDocket collects, uses, stores and discloses personal information. We are committed to handling your information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who we are

iDocket is operated by [LEGAL ENTITY NAME] [ABN: XX XXX XXX XXX] ("we", "us", "our"). We are the entity responsible for personal information collected through idocket.com.au and the iDocket app.

2. What personal information we collect

3. How we collect it

We collect information directly from you when you sign up, subscribe, fill in day sheets, upload photos, or contact us. We collect technical data automatically as you use the service. When a business invites a worker, the business provides some of the worker's details.

4. Why we collect and use it

We use personal information to:

• create and manage accounts and businesses;
• provide the core features (day sheets, dockets, expenses, hours, earnings estimates);
• send day sheet emails and notifications to the recipients you choose;
• process subscriptions and payments;
• provide support and respond to enquiries;
• maintain security, prevent misuse, and improve the service;
• comply with our legal obligations.

5. Worker information & your role

Where a business uses iDocket to manage workers, the business is responsible for how it collects and uses its workers' information, including obtaining any necessary consent and informing workers how their data is handled. iDocket acts as the platform that stores and processes that information on the business's behalf. Workers can contact us, but requests about how a particular business uses their data should generally be directed to that business.

6. Who we share it with

We do not sell your personal information. We share it only:

• with the email recipients a worker selects when submitting a day sheet (e.g. the business, accounts, payroll);
• with trusted service providers who help us run iDocket — including Supabase (database/storage, Sydney), Stripe (payments), Resend (email delivery), and Netlify (hosting);
• where required by law, or to protect our rights, users, or the public;
• in connection with a sale or restructure of our business, subject to this Policy.

7. Where your information is stored

Your work records, photos and account data are stored on Supabase infrastructure located in Sydney, Australia (ap-southeast-2). Some service providers (e.g. Stripe, email and analytics providers) may process limited data overseas — see section 13.

8. Security

We take reasonable steps to protect personal information using measures such as encryption in transit, access controls, and reputable infrastructure providers. No system is completely secure; you also play a role by keeping your password confidential. If we become aware of a data breach likely to cause serious harm, we will respond in line with the Notifiable Data Breaches scheme.

9. Data retention & deletion

We keep personal information while your account is active and as needed to provide the service. After you cancel or close your account, we may retain data for a reasonable period to meet legal, accounting or dispute-resolution needs, after which it is deleted or de-identified. You can request deletion at any time (see section 10). Export your records before cancelling if you need them.

10. Your rights (Access & correction)

Under the APPs you can:

• Access the personal information we hold about you;
• Correct information that is inaccurate or out of date;
• Request deletion of your information, subject to legal retention requirements;
• Opt out of marketing communications.

To make a request, email privacy@idocket.com.au. We may need to verify your identity and will respond within a reasonable time (generally 30 days).

11. Cookies & analytics

iDocket uses cookies and similar technologies to keep you signed in, remember preferences, and understand how the service is used. We may use privacy-respecting analytics to improve the product. You can control cookies through your browser settings, though some features may not work without them.

12. Direct marketing

We may send you service-related messages (essential) and, where permitted, occasional product news. You can opt out of marketing at any time via the unsubscribe link or by contacting us. We will not use sensitive information for marketing.

13. Overseas disclosure

Some of our service providers may store or process limited personal information outside Australia (for example, Stripe and certain email/analytics providers). Where this occurs, we take reasonable steps to ensure your information is handled consistently with the APPs.

14. Complaints

If you believe we have breached the APPs, contact us first at privacy@idocket.com.au and we will investigate. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

15. Changes & contact

We may update this Policy from time to time. Material changes will be notified by email or in-app. For any privacy question, contact:

Privacy Officer
[LEGAL ENTITY NAME]
Email: privacy@idocket.com.au
[BUSINESS POSTAL ADDRESS]

See also our Terms of Service.