Draft for legal review

This document is a working draft prepared during development. It must be reviewed by an Australian legal practitioner before PoolPreCert is launched commercially.

Privacy Policy

This policy explains how PoolPreCert collects, uses, stores and discloses personal information. It has been drafted with reference to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What we collect

  • Account details: name, email address, phone number (optional), business details for professional accounts.
  • Property details: addresses, pool and barrier information, inspection responses and measurements.
  • Photographs you upload, which may incidentally show people, vehicles or neighbouring properties.
  • Billing information handled by our payment processor, Stripe. We do not store card numbers.
  • Technical information such as log data needed to operate and secure the service.

How we use it

  • To provide inspections, reports, reminders and maintenance tracking.
  • To analyse photographs with an AI service provider, only when you request an analysis.
  • To process payments and manage subscriptions.
  • To secure the platform, prevent misuse and meet legal obligations.

Overseas disclosure and service providers

PoolPreCert uses service providers to host data (Supabase), deliver the application (Vercel), process payments (Stripe), send email and analyse photographs (an AI provider). Some of these providers may store or process data outside Australia. [Legal review: confirm hosting regions and APP 8 cross-border disclosure statements before launch.]

Photographs and AI

Photographs are stored privately and are only accessible to members of your account, through short-lived links. When you request AI analysis, the photograph is sent to the AI provider for that purpose only. We ask users not to photograph people, and we do not use your photographs to train AI models. [Legal review: confirm provider data-use terms.]

Access, correction, export and deletion

You can update your details in Settings, download a copy of your data, or request deletion of your account from the Privacy section of your account settings. Some records may need to be retained where required by law.

Complaints

Contact us at [privacy contact email]. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).