Privacy Policy

Everything below is information your business puts into the app, or that the app needs to work:

• Account details — name, phone number, trade, and either an email address or a 6-digit worker code.
• Business details — business name, country and join code.
• Timesheets — hours worked, sites, tasks, notes and approval decisions.
• Leave requests — dates, leave type, the reason you give, and the manager's decision.
• Site records — site names and addresses, diary entries, comments, and photos taken or uploaded.
• Tools and vehicles — descriptions, serial numbers, values, photos, registration and service dates.
• Documents — toolbox talks, assessments, plans and any files uploaded against a site, plus sign-offs.
• Insurance records — policy details and broker contact details you enter.
• Messages — chat messages in company, site and direct conversations.
• Meetings — titles, times, locations and attendee lists, including guest email addresses you enter.
• Device push tokens — an anonymous delivery address for your phone so notifications can reach it.

We do not collect payment card details in the app, and we do not track you across other websites.

To run the app for the business that owns the account: rostering, timesheets, chat, records and notifications. We also use aggregate, non-identifying usage information to keep the service running and to fix faults.

We do not sell your information, and we do not use it for advertising.

Each business's data is isolated. People in your business see your business's records, with manager-only areas (such as insurance and vehicles) restricted further. No other customer can see your data.

Our staff only access customer data when it's needed to support you or investigate a fault, and access is logged.

While your account is open, we keep your records so your history stays available. When an account is cancelled, data is kept for 7 years before permanent deletion. That window matches New Zealand tax and employment record-keeping expectations for timesheets and wage records.

Items you delete inside the app — a message, a diary entry, a tool — are removed at the time you delete them. If you delete your whole account, deletion is scheduled and you can cancel it during the notice period shown in the app.

Information Privacy Principle 12 of the Privacy Act 2020 requires us to tell you when your information is held overseas. Your data is stored on managed cloud infrastructure located in Singapore.

It is encrypted in transit and at rest, held under contractual terms that require safeguards comparable to those under the New Zealand Privacy Act, and access is restricted to authenticated users of your business.

Push notifications are delivered through Google's Firebase Cloud Messaging, which may process the notification title, body and your device token on servers outside New Zealand.

If your organisation requires Australian or New Zealand hosting, contact us at privacy@sitecrew.app before signing up.

Under the Privacy Act 2020 you can ask for a copy of the personal information we hold about you, and ask us to correct it if it's wrong. You can also ask us to export or delete your business's data.

• Access and correction — most details can be changed in the app; otherwise email us.
• Export — the account owner can request a full export from the Team screen; we prepare and send it.
• Deletion — the account owner can schedule account deletion from the Team screen.

We'll respond within 20 working days, as the Act requires.

We have a written breach response process. If there is a privacy breach we contain it, assess whether it is likely to cause serious harm, and where it is, we notify the Office of the Privacy Commissioner and the people affected as soon as practicable — normally through the business owner as well as the individuals involved.

The notice will say what happened, what information was involved, what we've done and what you should do. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz.

Privacy questions and requests: privacy@sitecrew.app.