Privacy Policy

We collect the following categories of personal information:

• Account and identity information: full name, email address, mobile number, RIW number, job designation, and password (stored as a salted hash — we never store or can see your plain-text password).
• Job and safety documentation: content you enter into NRF014 pre-work briefings, NRF015A forms, diary entries, and any files you upload or attach (maps, briefing/sign-on sheets, and other Worksite Protection Plan documents).
• Billing information: for paid plans, our payment processor (Stripe) collects and stores your payment card details directly — we do not receive or store full card numbers ourselves. We retain subscription status, plan tier, and billing history.
• Usage and technical information: login timestamps, session activity, IP address, device/browser information, and audit logs of actions taken within the Service (for example, document exports and pack activity), collected for security and operational purposes.

We collect information directly from you when you create an account, accept a team invitation, complete your profile, generate or upload documents, or contact us for support. We also collect technical information automatically through your use of the Service (for example, via session cookies used to keep you signed in).

• To provide, operate, and maintain the Service, including generating and storing your worksite documentation.
• To pre-fill and lock your Protection Officer identity (name, signature, contact number, RIW number) into documents you generate, so that one account cannot be used to sign documents as different people.
• To process payments and manage your subscription.
• To communicate with you about your account, service updates, or support requests.
• To maintain the security, integrity, and proper functioning of the Service, including detecting misuse.
• To comply with our legal obligations.

We do not sell your personal information, and we do not use your information for third-party advertising.

We disclose personal information only where necessary to operate the Service, including to:

• Stripe — for payment processing and subscription billing.
• Our SMS delivery provider — to send worksite pack links via SMS, where you or your organisation choose to use that feature. Only the mobile number and message content required for delivery are shared.
• Cloud hosting and storage providers (including our application hosting, database, and file storage providers) — to operate and store the Service and your data securely.
• Other members of your own organisation, where document or activity data is shared internally as part of the Service's design.
• Law enforcement or regulators, where required or authorised by law.

We do not otherwise disclose your personal information to third parties without your consent.

Some of our service providers (including cloud hosting, storage, and payment processing) may store or process information on servers located outside Australia, including in the United States. Where this occurs, we take reasonable steps to ensure those providers handle your information consistently with the Australian Privacy Principles.

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. This includes password hashing, access controls restricting data to your own organisation, and encrypted connections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain your account and document information for as long as your account is active, and for a reasonable period afterward to meet legal, operational, or record-keeping requirements — including retaining completed worksite protection documentation, which by its nature is intended to serve as a permanent job record. You may request deletion of your account as described below, subject to any documentation we are required or reasonably need to retain.

Under the Australian Privacy Principles, you have the right to request access to the personal information we hold about you, and to request correction of that information if it is inaccurate, out of date, or incomplete. Most of your profile information can be updated directly within the Service.

To make a request, or if you have a complaint about how we have handled your personal information, contact us at ntdevstudio@gmail.com. We will respond within a reasonable timeframe. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We use a small number of strictly necessary cookies to keep you signed in and to secure your session. We do not use third-party advertising or tracking cookies.

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as by updating the "Last updated" date above or notifying you within the Service.

Rahnix Pty Ltd (trading as NtDev Studio)
ABN 38 694 398 411
Email: ntdevstudio@gmail.com