Privacy Policy

Deployr is job-management software for trade contractors, made by Sentoro Technologies Pty Ltd, an Australian company. In this policy "we", "us" and "our" mean Sentoro Technologies Pty Ltd, and "Deployr" means the website at deployr.tech, the app at app.deployr.tech, and any Deployr mobile app.

We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth). We hold ourselves to them as a matter of policy, whether or not the Act obliges a business of our size to — the people whose information passes through Deployr should not have to work out which.

This policy explains what we collect, why, who else sees it, and how to reach us about it. It is published here free of charge, and anyone may read it without an account.

Deployr sits between two groups of people, and the answer to "who is responsible for this information?" is different for each.

• Information about you as a Deployr user. When you sign up, sign in, or are invited into a contractor's Deployr account, we hold your name and contact details and a record of your use of the service. We decide how that information is handled, and this policy governs it.
• Information a contractor puts into Deployr about other people. A contractor's jobs, customers, site contacts, staff, subcontractors and payroll records belong to that business. We hold and process them on the contractor's instructions, as their service provider. We don't use them for our own purposes, and we don't sell them.

So if you are a customer, a site contact, a subcontractor or an employee of a business that uses Deployr, and you want to see, correct or remove the records that business keeps about you, ask the business first — those are its records. We will help it do that, and you can always contact us as well.

Account and contact details. When an account is created we collect a name, email address, phone number, date of birth, country and the business name. Date of birth is collected because trade businesses carry apprentices and employment records, and age matters to both.

The records you enter. Everything a business runs on: customers and their contacts, sites and their access notes, jobs and their history, quotes, invoices, purchase orders, assets and maintenance agreements, suppliers, subcontractors and staff.

Work done in the field. Photos and videos of jobs and defects, voice notes recorded against a job, signatures captured on sign-off and on onboarding forms, meter and equipment readings, timesheets, and the times work started and finished.

Employment and identity details, where a business uses Deployr for onboarding. This can include tax file numbers, superannuation details, bank account details, emergency contacts, home address, and photographs of licences and tickets. These are held apart from the rest of a business's records and are readable only by that business's administrators and by the person they are about.

Payment details. Subscription payments and, where a contractor switches on card payments, their customers' invoice payments are processed by Stripe. Card numbers, expiry dates and security codes are entered on Stripe's own pages and are never stored on Deployr's servers. We keep the amount, the date, and Stripe's reference for the payment.

Technical information. The IP address and browser or device your requests come from, sign-in times, and a record of changes made to records — who changed what, and when. When a customer opens a quote link we sent them, or accepts a quote through it, we record the IP address and the time as evidence of the acceptance.

Measurement. Page views on the website and in the app, counted without cookies and not tied to your account.

Questions you ask for help. When you ask Ask Deployr a question in the Help drawer, we keep the question, the answer, the screen you were on and whether you said it helped, so we can see what our help doesn't answer yet. If you send it on to our support team, your name and email go with it so we can reply.

We do not collect your location. Deployr does not ask for or record GPS or device location, and no part of the app tracks where a person is. We do not use advertising cookies, and we do not track you across other companies' websites or apps.

Usually from you directly — when you register, fill in a form, upload a file, or use the app.

Sometimes from someone else, because that is how the product works: a contractor enters their customers' details; a customer's office invites site contacts to its portal; a contractor invites a subcontractor or a new employee to complete an onboarding pack; a technician photographs a job.

From public links we send on a contractor's behalf. Opening a quote link, an onboarding pack or an invoice payment page records that it was opened.

From systems a contractor connects, such as Xero, and from files a contractor imports from the software they are moving off.

When we collect information about you from someone other than you, we take reasonable steps to see that you are told it has been collected, why, and who else is likely to see it — usually by the business that entered it, at the point it invites you or sends you something.

• To provide Deployr: to run the jobs, quotes, invoices, documents and portals the service exists to run.
• To create and administer accounts, verify who is signing in, and keep people inside their own business's data.
• To send the service's own email — sign-in codes, invitations, reminders, and the documents a contractor sends to their customers.
• To take payment for the subscription, and to pass an invoice payment to the contractor's own Stripe account.
• To keep the service secure, to investigate misuse, and to keep audit records of who changed what.
• To support you when you contact us, and to improve the product using page-view counts and de-identified usage.
• To meet our legal obligations, including Australian record-keeping and tax law.
• To send product news and tips by email, but only if you asked for them.

We do not sell personal information. We do not disclose it for another organisation's marketing.

Parts of Deployr work things out automatically. We think you should know which, and what they use.

• Pay. Where a business sets a technician's Fair Work award, Deployr works out that person's ordinary, overtime, weekend, public holiday and shift hours from the times recorded on their timesheet, their award profile and the public holidays their business has saved, and produces the pay lines from them. It is a calculation, not a judgement: nobody is rated or ranked, and a person in the office reviews, approves and can override the result before anyone is paid.
• Access to the service. A Deployr subscription that ends — a trial that runs out, or a payment that keeps failing past its grace period — automatically turns that business's account read-only until it is sorted out. That happens without anyone at Sentoro deciding it.
• Scheduled account deletion. When the only administrator of a business asks for it to be deleted, the deletion runs automatically once the seven-day window passes, unless an administrator stops it first.
• The AI features draft text, suggest how the columns of an import file line up, read the lines out of a document, and answer questions about using Deployr from its help articles. They use only the content submitted to them, they never decide anything about a person, and what they produce is a draft a person edits or discards, or an answer a person can check against the article it links.

Nothing in Deployr profiles people, scores them, or decides on its own whether someone may be employed, engaged or paid. If you think an automated result about you is wrong, tell the business it belongs to, or email us.

Inside Deployr, a business's records are visible only to people that business has given access to, and each person sees only what their role allows — a customer's portal login sees that customer's own jobs, quotes and invoices, a subcontractor sees the work they have been sent, and payroll details are limited to administrators and the person they belong to.

Outside Deployr, we use the service providers below, each for one job. They may only handle the information for that job and may not use it for their own purposes.

• Supabase

  Runs the database, sign-in, and file storage behind Deployr. Almost all of the information described above is held here.

  Stored in Sydney, Australia. The provider is a United States company and its support staff can access systems from there.

• Vercel

  Serves the Deployr web app and the deployr.tech website, and measures page views so we can see which parts of the product are used.

  United States, with a global content delivery network. Page-view measurement is cookieless and is not tied to your account.

• Stripe

  Takes the subscription payment for Deployr, and — where a contractor has switched on card payments — takes their customers' invoice payments into the contractor's own Stripe account. Card numbers are entered on Stripe's own pages and never reach Deployr's servers.

  United States, Ireland and Australia.

• Resend

  Delivers email: sign-in codes, invitations, reminders, and the quotes and invoices a contractor sends from Deployr.

  United States.

• Anthropic

  Powers the optional AI features — drafting a scope of works, reading a spreadsheet you are importing, pulling the lines out of a supplier document, and answering questions asked of Ask Deployr in the Help drawer. Only the content submitted to those features is sent; for a question, that is the question, the person's role and plan and the screen they are on, never the business's records. Under Anthropic's API terms it is not used to train its models.

  United States.

• DocRaptor

  Turns a quote, invoice or service report into a PDF. The document's contents are sent for rendering and returned as a file.

  United States.

• Addressfinder

  Suggests real Australian addresses as an address is typed into Deployr — a site, a business, a supplier, a home address on an onboarding form — and fills in the rest once one is picked. It receives only the characters typed into the address field and the suggestion picked, sent from our servers, so it never sees your IP address or who you are. It keeps them for up to 14 days.

  New Zealand company, with its servers in Sydney and Melbourne, Australia, and Auckland, New Zealand.

• Google Fonts

  Serves the typeface the app is set in. Loading it tells Google the IP address of the device viewing the page. No account information is sent.

  United States, with a global content delivery network.

• Xero

  Only where a contractor connects their own Xero organisation. Deployr then sends the customers, quotes, invoices, purchase orders and timesheets that the contractor chooses to sync.

  New Zealand, Australia and the United States, under the contractor's own agreement with Xero.

• Kelvin

  Only where a contractor pairs Deployr with Kelvin, our engineering calculations app. Job and equipment details are exchanged between the two.

  Tokyo, Japan. Kelvin is also a Sentoro Technologies product.

• Supplier and integration endpoints a contractor configures

  Where a contractor sets up a supplier gateway, an outgoing webhook or an API key, Deployr sends that system the records the contractor directs it to send. The contractor chooses the recipient; we don't.

  Wherever that supplier or system is. The contractor decides.

Each of these providers is bound, by the agreement under which we use it, to protect the information it receives to the same standard this policy sets out. We take reasonable steps before engaging one to satisfy ourselves that it will, and we remain answerable to you for what they do with information we give them.

We will also disclose personal information where the law requires it — for example, to a court, a regulator or a law enforcement agency acting under a warrant or a notice — and where it is necessary to prevent a serious threat to someone's life, health or safety.

If Sentoro Technologies is ever sold or merged, personal information may pass to the buyer as part of that business. We would tell you before that happened.

Deployr's database, files and sign-in records are stored in Sydney, Australia (Supabase, ap-southeast-2).

Some of the service providers listed above are based outside Australia, so your information is disclosed to overseas recipients. The countries in which they are likely to hold or access it are the United States, Ireland, New Zealand and Japan, as set out against each provider.

Before using a provider we take reasonable steps to check it is bound to handle personal information consistently with the Australian Privacy Principles, through its own contractual commitments. An overseas provider is not subject to the Privacy Act itself, and you may not be able to seek redress under Australian law against it directly — but you can always raise it with us.

• Every business's data is separated at the database level, so one business cannot read another's — the rule is enforced by the database itself, not just by the app.
• All traffic to Deployr is encrypted in transit, and data is encrypted at rest by our hosting provider.
• Passwords must be at least eight characters with upper and lower case, a digit and a symbol, and are checked against known breached passwords. We never see your password in readable form.
• Sensitive employment documents — licence photographs, identity documents — are kept in private storage that can only be opened through a short-lived link issued to someone entitled to see it.
• Payroll details are held in a separate table with its own access rules, so an ordinary staff account cannot read a colleague's tax or bank details.
• Access is logged. Sign-ins and record changes are recorded against the person who made them.

Tax file numbers. Where a business uses Deployr to onboard employees, we store the tax file numbers they provide solely so that business can meet its payroll obligations. We do not use a tax file number to identify anyone, we never disclose one except to that business and the systems it directs, and it is shown back only as the last three digits once saved. Tax file numbers are handled in accordance with the Privacy (Tax File Number) Rule 2015.

No system is perfectly secure. If a data breach happens that is likely to cause serious harm, we will follow the process in the Notifiable Data Breaches scheme: assess it promptly, tell the affected people and the businesses whose records are involved, and report it to the Office of the Australian Information Commissioner. We commit to that whether or not the scheme applies to a business of our size.

While an account is open we keep the information needed to run it. After that, we keep what Australian law requires us to keep — business and tax records generally for seven years — and delete the rest.

You can delete your Deployr account from inside the app, from the account menu, on the web and in the mobile app. What happens next depends on who you are:

• If you work for a business that uses Deployr, your login and your personal details are deleted. The business's own records — the jobs you worked on, the quotes you wrote, the history of who did what — stay with the business, because they are its records and it needs them.
• If you are a customer's portal contact or a subcontractor's login, your login is deleted and your access to that business's portal is revoked. The contractor keeps its own record of you as a contact of its business.
• If you are the only administrator of a business, deleting your account deletes the whole business. Because that cannot be undone, it is scheduled seven days ahead, every administrator is told, and any of them can stop it during that window. After it runs, the business's records are erased from our database, the photographs, signatures and documents uploaded to it are deleted from storage, and its subscription is cancelled.

The business you work with can also end your access. One of its administrators can suspend your login, which stops it working until they reactivate it and deletes nothing, or remove it, which deletes your login and personal details exactly as if you had deleted your account yourself, with the same records kept.

Questions asked of Ask Deployr are deleted after 180 days, and straight away with your account.

When only your own account is deleted, the photographs and documents you uploaded stay with the business they were uploaded to, as its records. If a particular file about you should go — a scan of your licence, say — ask that business, or email us and we will remove it. Backups are kept for a limited period and are overwritten in the ordinary course.

Withdrawing consent. You can untick marketing at any time from the unsubscribe link in any such email, or by emailing us. Consent to our handling your personal information at all is withdrawn by deleting your account, as above; we cannot keep running an account for you without holding the information that runs it.

We use no advertising or tracking cookies, and no third-party advertising networks.

Deployr stores a sign-in token in your browser so you stay signed in, and remembers small preferences such as light or dark mode. The field app also keeps a copy of your own assigned work on the device so it can be used in a plant room or a basement with no signal — that copy lives on the device and is cleared when you sign out.

Page views are counted by Vercel without cookies and without identifying you.

We only send product news and tips if you ticked the optional box asking for them. Every one of those emails has an unsubscribe link, and you can email us to opt out at any time.

Service email — sign-in codes, invitations, receipts, reminders about your account — is part of the service and is sent whether or not you have opted into marketing.

You can see and correct most of your own details inside Deployr, on your profile.

You can also ask us for a copy of the personal information we hold about you, or ask us to correct it. Email us and we will respond within 30 days. We will need to be satisfied of who you are before we hand anything over. There is no charge for asking; if a request takes substantial work we may charge a reasonable cost, and we will tell you before we do.

We can refuse access in the limited circumstances the Privacy Act allows — for example where giving it would unreasonably affect someone else's privacy. If we refuse, we will tell you why in writing and how to complain.

If the information is a business's own record about you — your details as its customer, its employee or its subcontractor — ask that business first. We hold it for them.

If you think we have mishandled your personal information, email us at deployr@sentorotech.com.au with "Privacy complaint" in the subject. We will acknowledge it within five business days and respond within 30 days.

If you are not satisfied with our response, you can take the complaint to the Office of the Australian Information Commissioner: oaic.gov.au/privacy/privacy-complaints, by phone on 1300 363 992, or by post to GPO Box 10071, Sydney NSW 2001.

Deployr is software for businesses and is not directed at children. Accounts cannot be created by anyone under 15, an age set because apprentices start young in the trades. If you believe a child's information has reached us in error, email us and we will remove it.

We update this policy when the product changes what it collects or who it shares with. The date at the top of this page is the date the current version took effect. If a change materially affects how we handle your information, we will tell account holders by email before it takes effect.

Sentoro Technologies Pty Ltd, Australia.

Email deployr@sentorotech.com.au.

We are happy to take a privacy question by email from anyone — you do not need a Deployr account to ask one, and you may ask anonymously or under a pseudonym. Deployr itself can't be used anonymously: it keeps records of work done for named businesses and named people, and a request for your own information can only be answered once we are satisfied who you are.