Privacy Policy

Site Inspected is a web-based structural inspection and asset management platform operated by an individual developer based in Australia. We are committed to protecting the privacy of our users in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We also aim to meet reasonable expectations for users in New Zealand under the Privacy Act 2020 (NZ).

We collect the following categories of personal information:

• Account information: your name, email address, and organisation name when you register
• Inspection data: defect records, asset information, site details, and associated metadata that you enter into the platform
• Photos: images you upload as part of defect records or asset documentation
• Usage data: basic information about how you use the platform, including page visits and feature usage, used to improve the service

We do not collect payment information directly — payment processing (when applicable) is handled by third-party providers.

We use your information to:

• Provide and operate the Site Inspected platform
• Send account-related emails (invitations, notifications you have configured)
• Respond to support requests and upgrade enquiries
• Improve the platform based on usage patterns

We do not sell your personal information to third parties. We do not use your inspection data or photos for any purpose other than providing the service to you.

Your data is stored using Supabase, a database and storage platform that operates on Amazon Web Services (AWS) infrastructure. Data is stored in AWS regions in the United States. We have selected Supabase as our infrastructure provider based on its security standards and data handling practices.

If you require data to be stored in a specific geographic region, please contact us to discuss your requirements before registering.

When you use the site map feature, Site Inspecteduses the Google Maps JavaScript API to display satellite imagery. Google's own privacy policy applies to map tile requests made when you view a site map. We do not share your organisation's asset or defect data with Google.

We share data only with the infrastructure providers necessary to operate the platform (Supabase/AWS for database and storage, Google for mapping). We do not share your data with any other third parties except where required by law.

Within your organisation, data is accessible only to users you have explicitly invited and granted access to. Data from different organisations is strictly isolated and inaccessible between accounts.

We retain your data for as long as your account is active. If you request account deletion, we will delete your personal information and organisation data within 30 days, except where we are required to retain it by law.

Under Australian and New Zealand privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to any legal retention requirements)
• Make a complaint about our handling of your personal information

To exercise any of these rights, please contact us at contact@siteinspected.com.

We implement industry-standard security measures including encrypted data transmission (HTTPS), database-level row security policies to isolate organisational data, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We may update this privacy policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

For privacy enquiries or to exercise your rights, contact us at contact@siteinspected.com.