Privacy policy

HelloMapper Software (“HelloMapper”, “we”, “us”) provides software that organisations use to manage their workers, the people they support and their operations. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Two kinds of information

Information organisations put into HelloMapper, such as worker records, rosters, credentials, participant records, notes and incidents. The organisation using HelloMapper is responsible for that information and decides what is collected and who can see it. We process it on their behalf, only to provide the service to them. If you have a question about information an organisation holds about you, please contact that organisation first.

Information about our own customers and visitors, such as the details of the people who sign up, contact us or book a demo. This policy explains how we handle both.

What we collect

• Account details: name, email address, phone number and password (stored only as a secure hash).
• Information you or your organisation add while using HelloMapper.
• Billing details: our payment provider, Stripe, collects card details. We never see or store card numbers.
• Messages you send us through our website or by email.
• Technical information needed to run and secure the service, such as IP addresses and the times of sign-ins and changes.

How we use it

• To provide, secure and support HelloMapper.
• To send service emails and texts, such as invitations, shift alerts and reminders.
• To bill organisations for their subscriptions.
• To reply to enquiries.

We do not sell personal information, and we do not use the information organisations put into HelloMapper for advertising.

Where it is stored

Information is stored in Australia. Each organisation's information is kept separate from every other organisation's by rules enforced inside our database.

Service providers we use

• Hosting and file storage in Australia.
• Zoho ZeptoMail, to send email.
• Stripe, to take payments.
• Twilio, to send text messages, where an organisation uses SMS.

Each receives only the information it needs to do its job.

How we protect it

See our security page. In short: separation in the database, role-based access, two-step login for owners and admins, encrypted file storage, and an activity log that can't be edited.

How long we keep it

We keep an organisation's information while it uses HelloMapper and for as long as the law requires afterwards. Organisations can ask us to delete their information when they leave, unless we must keep it by law. Job applicants can ask the organisation they applied to to delete their application.

Access, correction and complaints

You can ask to see or correct the personal information we hold about you, or make a privacy complaint, by emailing hellomapper2025@gmail.com. We'll respond within 30 days. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We'll update the date at the top when this policy changes, and tell our customers about significant changes by email.