AxiomField.io Privacy Policy

1. Who this applies to

1.1 This policy applies to:

• visitors to axiomfield.io;
• people who request a trial;
• users of AxiomField, such as supervisors and technicians; and
• people whose information appears in data our customers enter, for example in photos or voice notes.

1.2 When we process data for a customer, the customer decides what is collected and why. In that case, the customer's own privacy policy also applies, and we act on their instructions.

2. What we collect

We don't intend to collect sensitive information, such as health information. Users are asked not to capture people or private details that aren't needed for the work.

3. How we collect it?

We collect information:

• directly from you, for example when you request a trial or sign in;
• from your employer or organization when they invite you; and
• automatically as you use AxiomField.

GPS location is collected only during a capture and only if you allow it on your device. You can still save a capture without location.

4. Why we use it?

We use personal information to:

• (a) provide, secure and support Axiom Field;
• (b) create evidence records, reports and exports for our customers;
• (c) respond to trial requests and communicate with you about Axiom Field;
• (d) maintain audit trails that our customers rely on for quality and compliance; and
• (e) improve Axiom Field using aggregated, de-identified information.

We don't sell personal information. We don't use customer field data to train AI models.

5. Who we share it with?

We share personal information only:

• with your organization and its authorized users, as part of the service;
• with the service providers listed in section 6, to run AxiomField.io;
• with professional advisers under confidentiality; or
• where required or authorized by law.

6. Service providers and overseas disclosure

Some of these providers may process information outside Australia, including in the United States, the European Union and India. We take reasonable steps to make sure they handle it consistently with the Australian Privacy Principles, for example through their contractual and security commitments. For field pilots, the Pilot Agreement sets out data location in more detail.

7. Security

7.1 We take reasonable technical and organizational steps to protect personal information, including:

• separation between customer workspaces;
• role-based access;
• encryption in transit;
• audit logging; and
• limiting staff access to production data.

7.2 When we no longer need personal information, we delete or de-identify it, consistent with APP 11 (OAIC).

8. How long do we keep it?

9. Your choices and rights

9.1 You can ask to access or correct your personal information by emailing privacy@axiomfield.io.

9.2 If your information is collected for one of our customers, we'll refer your request to them or help them respond.

9.3 You can unsubscribe from marketing emails at any time.

10. Data breaches

If a data breach is likely to cause serious harm, we will notify affected customers and individuals promptly. Where it applies, we will also notify the Office of the Australian Information Commissioner.

11. Complaints

11.1 Contact our privacy contact at privacy@axiomfield.io. We'll respond within 7 working days.

11.2 If you're not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

12. Changes

We may update this policy. We'll post the new version on axiomfield.io with its effective date, and inform users of material changes.