Privacy Policy
Who we are
Orbix ("we", "us") provides phone-based tools for heavy vehicle, manufacturing and construction businesses from Sydney, Australia. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What we collect
- Account holders (owners): company name, email address, subscription choices and billing status. Card details go straight to Stripe. We never see or store your full card number.
- People you add (drivers and users): the name and the email address or mobile number the owner enters, and whether they have opened their link.
- Records people submit: photos, PDFs, pre-start checks (including signatures, vehicle registrations and answers), runsheets, load restraint and mass records, and reports of defects, incidents and hazards, with the date and the person's name.
- NCRs and reports: non-conformance records created automatically from reported issues or added by our compliance manager, and weekly reports built from the records above.
- Causeway: the email used to sign in and the root cause analysis content users type or upload.
- Technical data: sign-in cookies, information saved on your device so a link keeps working, and basic server logs for security and fault finding.
How we use it
- To run the tools you subscribed to and file records by date and person.
- To send sign-in links, invitations, and reports by email.
- To take payment, manage subscriptions and answer support requests.
- To keep the service secure and to fix faults.
We do not sell personal information or use it for advertising.
Who can see your records
The account holder sees the records for their organisation. Our compliance manager can see records for the organisations they support, in order to prepare reports and keep NCR registers. If your organisation's compliance manager has switched it on, copies of files are also saved to a OneDrive folder managed by that compliance manager. Drivers and users see only what their own link or login opens.
Service providers that handle data for us
- Supabase: database and file storage (Sydney, Australia).
- Cloudflare: hosting and delivery of our websites and app.
- Stripe: payments and billing.
- Resend: sending email.
- Microsoft (OneDrive): only where file copying to OneDrive is switched on.
- An AI service: Causeway sends the text you enter to an AI service to produce its analysis.
Some of these providers process information outside Australia, including in the United States. We choose providers that protect information to a standard comparable to Australian law.
How long we keep it
We keep records while your subscription is active. If you cancel, we keep your history so you can come back or export it, and we delete it when you ask us to, unless the law requires us to keep it.
Security
Personal links are unique and cannot be guessed. Files are stored in private storage and shared only through time-limited links. Sign-in links to owner and admin areas expire quickly. No system is perfectly secure, but we take reasonable steps to protect information and we will tell affected people and the regulator if a serious breach happens.
Your rights
You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. Email [email protected] and we will reply within 30 days. If you are not happy with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Drivers and users
If your employer gave you an Orbix link, they are the account holder and decide what you are asked to submit. Questions about your own records are best asked of them first, and you can always contact us as well.
Changes
If we change this policy we will update the date at the top. For significant changes we will email account holders.