Privacy Policy

When you or your employer creates an account, we collect your name, email address, and password (stored as a secure hash). Your email address is your primary identifier within the system.

As part of normal use, the app allows you to record client names, contact names, and phone numbers against projects. This information is entered by you and stored as part of the project record.

When completing an access panel handover, we collect a hand-drawn signature image and the name and phone number of the person signing. These are stored as part of the signed handover record.

The app allows you to upload photos to project photo galleries. Photos you upload are stored in your workspace and are accessible to other members of the same workspace.

Location data is optional. When completing an access panel sign-off, the app may offer to attach GPS coordinates to the record as an optional detail. You can decline this. We do not collect location data in the background or outside of this specific action.

We collect basic technical information necessary to operate the service, including device type, operating system, and timestamps of actions (such as when a record was saved or signed). We do not use third-party analytics or advertising SDKs.

The Bin Chutes app is built on Google Firebase, a platform operated by Google LLC (United States). Firebase provides our authentication, database, and file storage infrastructure. Your primary application data (projects, buildings, floor records, and signatures) is stored in Google Cloud Firestore in the australia-southeast1 region (Sydney, Australia). Photos and PDF files are stored via Cloudflare R2 (see below).

Firebase authentication infrastructure is operated by Google LLC in the United States. By using the app, you acknowledge that some data — including authentication tokens and session information — may be processed on servers located outside Australia. Google LLC participates in the EU–US Data Privacy Framework and maintains appropriate safeguards. For more information, see firebase.google.com/support/privacy.

Photos and PDF documents (including shop drawings) are stored using Cloudflare R2, an object storage service operated by Cloudflare, Inc. (United States). Files you upload or generate in the app are stored in Cloudflare’s infrastructure. Cloudflare’s privacy policy is available at cloudflare.com/privacypolicy.

Subscription payments are processed through Stripe, Inc. via our website (binchutes.com). Payment card details are entered directly into Stripe’s secure payment form and are never transmitted to or stored by Daffi Labs. Deleting a billing owner’s account cancels the active subscription, but Stripe may retain transaction and billing records where required by law or under its own retention obligations. Stripe’s privacy policy is available at stripe.com/au/privacy.

We may disclose personal information if required by law, court order, or a regulatory authority, or where necessary to protect the rights, property, or safety of Daffi Labs, our users, or others.

When a subscription is cancelled through the normal cancellation process, the workspace is archived. Archived workspace data (projects, buildings, floor records, photos, signatures) is retained for 30 days after archiving, after which it is permanently deleted.

You can permanently delete your account through our account deletion page. After you sign in, review the consequences, and confirm deletion, your login credentials, name, email address, profile information, and workspace membership records are deleted immediately. Account deletion cannot be reversed and there is no recovery window.

If you are the only active member of a workspace you own, deleting your account also permanently deletes that workspace and its projects, buildings, floor records, photos, documents, signatures, and other stored files immediately.

If the workspace has other active members, it is not deleted. An owner must choose another active member to take ownership before deletion can continue. If you are not the owner, only your membership is removed. In both cases, the workspace and its business records continue to exist.

Work you contributed to a workspace that continues to exist — including floor progress, project notes, uploaded photos and documents, and access panel sign-offs — remains part of that workspace’s business record. Some records may continue to display your name as part of an audit trail, but your deleted login account is no longer available.

You may request deletion of specific data without closing your account through our data deletion page. We process these requests within 30 days, subject to workspace permissions, the rights of other users, and any legal obligation to retain the information.

We may retain limited records where required by Australian law, a court or regulatory authority, or where reasonably necessary to establish, exercise, or defend legal claims, prevent fraud, or protect the security of the Service. Any retained information will be restricted to those purposes and kept only for as long as necessary.