Privacy Policy

1. Introduction

SiteSpotter ("we", "us", "our") is committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use SiteSpotter ("the Service") at sitespotter.com.au.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Who We Are

SiteSpotter is operated by Cameron Jesse Gisinger, an individual/sole trader registered in Queensland, Australia.

ABN: 78 350 866 147

Contact: support@sitespotter.com.au

Website: sitespotter.com.au

3. Information We Collect

3.1 Account Information

When you create an account, we collect your email address and a password (stored in encrypted form). We do not collect your name, phone number, or physical address unless you provide it voluntarily.

3.2 Site Photos

When you perform a scan, you upload photos of construction sites. These photos are stored securely in our database. Photos may contain images of workers, equipment, signage, and site locations.

3.3 Scan Data

We store the results of each scan including work type classifications, compliance findings, legislation references, summaries, and any notes you add.

3.4 Usage Data

We collect information about how you use the Service including scan counts, site names you create, and activity timestamps. This data is used to improve the Service and for internal reporting.

3.5 Technical Data

We may collect standard technical information including your IP address, browser type, device type, and pages visited. This is collected automatically by our hosting infrastructure.

4. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service
• Process and store your scan photos and results
• Perform AI-powered compliance analysis on your uploaded photos
• Improve the accuracy and performance of the Service
• Communicate with you about your account, updates, and support
• Monitor usage patterns to improve the Service
• Comply with legal obligations

5. How We Store Your Information

Primary storage — Australia:

Your account data, scan results, and site photos are stored in Supabase, hosted in the ap-southeast-2 (Sydney, Australia) region. This is our primary data store.

Data processed overseas:

To deliver the Service, your data is also processed by third-party services located outside Australia:

By using the Service, you consent to your site photos being transmitted to and processed by Anthropic in the United States for the purpose of AI analysis. Anthropic's privacy policy is available at anthropic.com/privacy.

Short text search queries (not photos or personal data) are transmitted to OpenAI in the United States for the purpose of generating vector embeddings. OpenAI's privacy policy is available at openai.com/privacy.

6. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties.

We may share your information in the following circumstances:

6.1 Third-party service providers

As described in Section 5, your data is processed by Anthropic, OpenAI, Vercel, and Supabase solely for the purpose of delivering the Service.

6.2 Shared scans

If you choose to share a scan using the share link feature, the scan result (including photos) will be accessible to anyone with the link. You control whether sharing is enabled.

6.3 Legal requirements

We may disclose your information if required to do so by law, court order, or government authority.

6.4 Business transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified of any such change.

7. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, your personal data and scan photos will be deleted within 30 days, except where we are required by law to retain it.

Scan results and photos associated with your account can be deleted by you at any time through the application.

8. Security

We implement reasonable security measures to protect your information including:

• Encrypted storage of passwords
• Row-level security on all database tables (you can only access your own data)
• HTTPS encryption for all data in transit
• Access controls limiting who can access production systems

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

9. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Make a complaint about how we handle your personal information
• Request deletion of your personal information (subject to legal retention requirements)

To exercise any of these rights, contact us at privacy@sitespotter.com.au. We will respond within 30 days.

10. Cookies and Tracking

SiteSpotter uses session cookies to maintain your login state. We do not use third-party advertising cookies or tracking pixels.

11. Children's Privacy

The Service is not intended for use by persons under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@sitespotter.com.au.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on the Service. The effective date at the top of this policy indicates when it was last updated.

13. Complaints

If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us at privacy@sitespotter.com.au. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.