Privacy Policy

1. About This Policy

33 Industries Pty Ltd (ABN pending) ("we", "us", "our") operates ServoSimple. This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using ServoSimple, you consent to the practices described in this policy.

2. What Personal Information We Collect

We collect personal information necessary to provide the ServoSimple service, including:

• Account information: email address, business name, ABN (if provided)
• Staff records: staff display names, shift patterns, and timesheet data you enter into the platform
• Billing information: payment method details processed by Stripe (we do not store card numbers)
• Usage data: log data, IP addresses, browser type, pages visited, and actions taken within the platform
• Communications: emails and support requests you send to us

We collect personal information directly from you when you register, during onboarding, and when you use the platform. Some technical data is collected automatically.

3. How We Use Personal Information

We use your personal information to:

• Provide, maintain, and improve the ServoSimple platform
• Process payments and manage your subscription
• Send transactional emails (sign-in links, receipts, service notices)
• Provide customer support
• Detect and prevent fraud or security incidents
• Comply with our legal obligations
• Send product updates and feature announcements (you can opt out at any time)

We do not use your staff data (names, shifts, timesheets) for any purpose other than delivering the service to you.

4. Disclosure to Third Parties

We share personal information only where necessary with trusted third-party service providers who process data on our behalf:

• Supabase, database and authentication hosting (servers in AWS ap-southeast-2, Sydney)
• Stripe, payment processing (PCI DSS compliant)
• Resend, transactional email delivery
• Vercel, application hosting and content delivery
• Anthropic / Groq, AI features (roster suggestions). Only anonymised roster structure is sent; no identifying staff information is transmitted.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

We may disclose personal information if required by law, court order, or government authority, or to protect the safety and rights of our users.

5. Data Storage and Security

Your data is stored on servers located in Australia (AWS ap-southeast-2, Sydney) via Supabase. We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS) and at rest
• Row-level security (RLS) ensuring each business can only access its own data
• Regular security reviews and access controls

No method of transmission or storage is 100% secure. We encourage you to use strong credentials and report any suspected security issues to support@servosimple.com immediately.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the service. If you close your account:

• You may request an export of your data within 30 days of account closure
• After 30 days, operational data (staff records, timesheets, rosters) will be permanently deleted
• Some information (billing records, legal compliance data) may be retained for up to 7 years as required by Australian tax and business law

7. Cookies and Tracking

ServoSimple uses cookies and similar technologies for:

• Session cookies: to keep you signed in
• Functional cookies: to remember your preferences

We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect platform functionality.

8. Your Rights Under the Australian Privacy Principles

Under the APPs, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or out-of-date personal information
• Request deletion of your personal information (subject to legal retention requirements)
• Opt out of marketing communications at any time
• Make a complaint if you believe we have mishandled your personal information

To exercise these rights, contact us at privacy@servosimple.com. We will respond within 30 days.

9. Complaints

If you believe we have breached the Australian Privacy Principles, please contact us first at privacy@servosimple.com. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notice. Continued use of ServoSimple after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related enquiries:

Privacy Officer
33 Industries Pty Ltd
Melbourne, Victoria, Australia
privacy@servosimple.com