Wannon Digital · Legal

Privacy Policy

Last updated 25 September 2026 · Version 1

Wannon Digital Pty Ltd (ABN 45 123 456 789) of Warrnambool, Victoria ("Wannon Digital", "we", "us") runs the Wannon Digital Portal at wannon.app (the "Portal") and the website at wannondigital.com. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Two roles we play

•

For your organisation's records, such as rosters, tasks, documents, forms and incident reports, we look after the information on behalf of the organisation that uses the Portal. That organisation decides what is collected and who can see it.

•

For our own purposes, such as running accounts, billing, security and support, we are responsible for the information ourselves.

2. What we collect

•

Account details: name, preferred name, email address, organisation and role, and your sign-in and two-factor settings.

•

Content you and your organisation add: for example staff rosters, leave, tasks, documents, messages, forms, maps, photos and incident reports. Depending on how your organisation uses the Portal, this can include sensitive information such as health details in an incident report.

•

AI Assistant conversations: the messages you send, the assistant's replies, and a record of the actions it carried out with your approval.

•

Billing details: billing contacts and subscription history. Card details are collected and stored by Stripe, not by us.

•

Security and usage records: sign-in sessions (including IP address, browser and device), audit logs of important actions, and records of which versions of our terms you accepted.

•

Device information: a device token if you turn on push notifications.

•

Support requests: what you tell us, including any screenshots you attach.

3. How we use it

We use personal information to provide, secure and improve the Portal; to manage accounts and subscriptions; to send service messages such as invitations, password resets and notifications; to answer support requests; and to meet our legal obligations. We do not sell personal information and we do not use it for third-party advertising.

4. Who we share it with

We share information only as needed to run the Portal, with:

•

cloud hosting and storage providers that run our servers, database and file storage;

•

Stripe, for payments and invoices;

•

email delivery providers, for service emails;

•

AI model providers (such as Anthropic), when you use the AI Assistant. They receive your messages and the information the assistant reads to answer you. Documents marked Confidential or Restricted are only sent to models your administrator has approved for that level;

•

anyone else where the law requires or allows it.

5. Information held overseas

Some of these providers, including Stripe and our AI model providers, may store or process information outside Australia, including in the United States. We take reasonable steps to make sure they protect it consistently with the APPs.

6. Cookies

The Portal uses a small number of cookies that it needs to work: sign-in cookies that keep you securely signed in, and a cookie that remembers your light or dark theme. We do not use advertising or tracking cookies.

7. Security

We protect information with encryption in transit, encryption of stored secrets such as two-factor keys and integration credentials, strict separation between organisations, sign-in sessions that can be ended at any time, and audit logs of important actions. If a data breach is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

8. How long we keep it

We keep information while your account or your organisation's subscription is active, and afterwards only as long as needed for the purposes above or as the law requires. For example, financial records are kept for up to 7 years. Ended sign-in sessions are deleted after 30 days. When information is no longer needed, we delete or de-identify it.

9. Access, correction and deletion

You can view and update most of your details on your profile page. To request a copy of the personal information we hold about you, a correction, or deletion of your account, email support@wannondigital.com or use the account deletion request page. We will confirm your identity first and do not charge for requests. Information that belongs to your organisation's records may need to be requested through that organisation.

10. Complaints

If you have a concern about how we have handled your personal information, email support@wannondigital.com. We will respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au.

11. Changes to this policy

We may update this policy. The version number and date at the top of this page show which version is current.