Privacy Policy

1. Introduction

RouteBoard ("we", "us", or "our") is operated by Platform21 (ABN: 49 721 370 876), located in Brisbane, Queensland, Australia. We are committed to protecting your privacy and handling your personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile application and web platform ("Services").

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name
• Password (stored securely using bcrypt hashing)
• Phone number (optional)
• Profile image (optional)
• Timezone preference
• Working hours configuration

2.2 Business and Customer Data

To provide our scheduling services, we store:

• Customer names, email addresses, phone numbers, and physical addresses
• Job and appointment details (dates, times, notes, quotes)
• Photos uploaded for jobs (before/after images)
• Service duration and pricing information

2.3 Location Data

With your permission, we collect:

• GPS coordinates for route optimisation and geofencing (100-metre radius around job sites)
• Address data for geocoding and travel time calculations
• Actual arrival and departure times at job sites

Location data is only collected when the app is in use or when you have granted "Always Allow" permission for geofencing notifications on iOS, or background location permission on Android.

2.4 Technical and Usage Data

• IP addresses
• Device information and user agent strings
• Actions performed within the app (for audit logging and security)
• Timestamps of activities

3. How We Use Your Information

We use your information to:

• Provide and improve our scheduling and route optimisation services
• Calculate travel times and optimise your daily routes
• Send geofencing notifications when you arrive at or depart from job sites
• Generate proposals, invoices, and reports
• Communicate with you about your account and services
• Ensure the security and integrity of our platform
• Comply with legal obligations

4. Third-Party Services

We share data with the following third-party services to provide our functionality. Each service has its own privacy policy governing its use of your data:

5. Cross-Border Data Transfers

Some of our third-party service providers are located in the United States. By using our Services, you consent to your data being transferred to and processed in the United States by the following providers:

• Google (Maps API, Gemini)
• OpenAI
• SendGrid (Twilio)
• Cloudflare

We take reasonable steps to ensure these providers maintain appropriate data protection standards.

6. Data Security

We protect your data through:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing using bcrypt
• API keys stored securely with hashing
• JWT-based authentication for mobile apps with secure token storage
• Audit logging of user actions for security monitoring
• Regular security reviews and updates

7. Data Retention and Deletion

We retain your personal information for as long as your account is active or as needed to provide you with our Services.

Account Deletion: You may request deletion of your account at any time through the app settings or by contacting us. Upon deletion request:

• Your account will enter a 30-day cool-off period during which you can reactivate it
• After 30 days, your personal data will be permanently deleted
• Some data may be retained where required by law or for legitimate business purposes (e.g., audit logs for security compliance)

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Complaint: Lodge a complaint with us or the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached

To exercise these rights, please contact us at privacy@routeboard.au.

9. Children's Privacy

Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@routeboard.au.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: