Privacy Policy
Effective date: 31 May 2026 · Daffi Labs · ABN 42 244 881 028
1. Who we are
Bin Chutes is operated by Daffi Labs (ABN 42 244 881 028), a business based in New South Wales, Australia.
Address: 47a Romney Crescent, Miller NSW 2168, Australia
Privacy enquiries: admin@binchutes.com
2. What information we collect
Account information
When you or your employer creates an account, we collect your name, email address, and password (stored as a secure hash). Your email address is your primary identifier within the system.
Contact and project information
As part of normal use, the app allows you to record client names, contact names, and phone numbers against projects. This information is entered by you and stored as part of the project record.
Digital signatures
When completing an access panel handover, we collect a hand-drawn signature image and the name and phone number of the person signing. These are stored as part of the signed handover record.
Photos
The app allows you to upload photos to project photo galleries. Photos you upload are stored in your workspace and are accessible to other members of the same workspace.
Location data
Location data is optional. When completing an access panel sign-off, the app may offer to attach GPS coordinates to the record as an optional detail. You can decline this. We do not collect location data in the background or outside of this specific action.
Usage and technical data
We collect basic technical information necessary to operate the service, including device type, operating system, and timestamps of actions (such as when a record was saved or signed). We do not use third-party analytics or advertising SDKs.
3. How we use your information
We use the information we collect to:
- Create and manage your account and workspace
- Provide, operate, and improve the Bin Chutes service
- Allow team members within a workspace to collaborate on projects
- Generate PDF progress reports and access panel handover documents
- Respond to support and account enquiries
- Meet our legal obligations
We do not sell your personal information. We do not use your information for advertising.
4. Disclosure to third parties
Google Firebase
The Bin Chutes app is built on Google Firebase, a platform operated by Google LLC (United States). Firebase provides our authentication, database, and file storage infrastructure. Your primary application data (projects, buildings, floor records, and signatures) is stored in Google Cloud Firestore in the australia-southeast1 region (Sydney, Australia). Photos and PDF files are stored via Cloudflare R2 (see below).
Firebase authentication infrastructure is operated by Google LLC in the United States. By using the app, you acknowledge that some data — including authentication tokens and session information — may be processed on servers located outside Australia. Google LLC participates in the EU–US Data Privacy Framework and maintains appropriate safeguards. For more information, see firebase.google.com/support/privacy.
Cloudflare R2
Photos and PDF documents (including shop drawings and generated progress reports) are stored using Cloudflare R2, an object storage service operated by Cloudflare, Inc. (United States). Files you upload or generate in the app are stored in Cloudflare’s infrastructure. Cloudflare’s privacy policy is available at cloudflare.com/privacypolicy.
Stripe
Subscription payments are processed through Stripe, Inc. via our website (binchutes.com). Payment card details are entered directly into Stripe’s secure payment form and are never transmitted to or stored by Daffi Labs. Stripe’s privacy policy is available at stripe.com/au/privacy.
Other disclosures
We may disclose personal information if required by law, court order, or a regulatory authority, or where necessary to protect the rights, property, or safety of Daffi Labs, our users, or others.
We do not share personal information with any other third parties.
5. Data storage and security
Your data is stored in Google Cloud infrastructure. Primary application data is stored in the australia-southeast1 (Sydney) region. We implement industry-standard security measures including encrypted data transmission (TLS), Firebase security rules that restrict data access to authorised users only, and role-based access controls within workspaces.
No method of transmission over the internet or electronic storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.
6. Data retention
Workspace data
When a subscription is cancelled, the workspace is archived. Archived workspace data (projects, buildings, floor records, photos, signatures) is retained for 30 days after archiving, after which it is permanently deleted.
User account data
If you request deletion of your personal account, your account data (name, email, login credentials) is retained for up to 30 days before being permanently deleted. This window allows recovery in the event of accidental deletion.
Signed handover records
Access panel sign-off records (including signatures) form part of your workspace data and are subject to the workspace retention period above.
7. Your rights
Under the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or outdated information
- Request deletion of your personal information (subject to our retention periods and legal obligations)
- Complain about a breach of the APPs
To exercise any of these rights, contact us at admin@binchutes.com. We will respond within 30 days. To request deletion of your account and all associated data, visit our account deletion page. To request deletion of specific data without closing your account, visit our data deletion page.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Children
Bin Chutes is a business-to-business service intended for use by adults in a professional context. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For material changes, we will notify workspace owners via email. Continued use of the service after a change constitutes acceptance of the updated policy.
10. Contact us
For privacy-related questions or requests:
Daffi Labs — ABN 42 244 881 028
47a Romney Crescent, Miller NSW 2168, Australia
Email: admin@binchutes.com