Privacy

This policy explains how Dwayne Charrington trading as Rangefront Labs (ABN 15 605 808 710) (“Rangefront”, “we”, “us”) handles personal information on rangefrontwaste.com.au and in Rangefront Waste (the “Service”). We follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Two roles

Rangefront Waste is used by businesses (“operators”), such as septic pumpers and inspectors. We handle personal information in two ways:

• Our own users and enquirers. For people who contact us or have an account with us, such as an operator’s staff, we decide how the information is used. This policy covers that fully.
• Operators’ customers. Operators enter information about their own customers, such as householders and property owners. The operator decides why and how it is used, and we hold and process it on the operator’s behalf. If you are an operator’s customer, contact the operator first about access, correction or deletion. We will help them respond and pass on requests sent to us.

This website

When you send the trial form, we collect your name, work email, business name, phone number if you give it, and what you tell us about your business. It is emailed to us so we can reply, and we keep it while we are in contact with you.

The website does not use cookies, analytics or advertising trackers. Our web server keeps standard access logs, including IP addresses, for security and fault finding, and rotates them within a few weeks.

What we collect in the Service

Account users (operators’ staff and technicians): name, email address, phone number, role and permissions, password (stored hashed), sign-in and session records, enrolled devices, and actions recorded in the audit log.

Operators’ customers and contacts, entered by the operator, by the customer through a booking form or portal, or by a technician:

• name, phone number and email address
• billing and service addresses
• property and wastewater system details, such as tank type, size, location and service history
• site photos and documents
• job, quote and invoice records, payment status and messages with the operator
• inspection results, defects and compliance reports, which may be sent to local councils
• for calls answered by the phone assistant: the caller’s number, a recording or transcript of the call, and a summary

Customer payment card details are handled by Stripe and are not stored by us.

Technician location. If the operator turns it on, the field app records a technician’s location while they work, for example when they arrive at or leave a job. The operator decides how it is used, such as dispatch, customer tracking links and attendance records. We keep location events for 90 days by default.

Device and diagnostic data. The field app and console collect device model, app version, operating system, sync status and error information, which we use to fix faults and keep the Service secure.

Local storage. The console and field app store a sign-in token, interface preferences and offline data on your device. We do not use advertising cookies.

Why we use it

• to provide, secure, support and improve the Service
• to reply to enquiries and set up trials
• to send service messages, such as sign-in codes, job notifications on an operator’s behalf, and notices about your account
• to bill operators
• to detect and prevent fraud and abuse
• to meet our legal obligations and handle complaints

We do not sell personal information. We do not use operators’ customer information for advertising or to train AI models.

Sensitive information

We do not seek sensitive information. Biometric unlock on a phone is handled by the phone’s operating system, and we do not receive the biometric data.

Marketing

We contact operators and enquirers with product information where they have agreed or the law allows it, and you can opt out at any time. We do not market to operators’ customers.

AI features

The Service has optional AI features: tidying job notes, drafting messages, quotes and report summaries, and a phone assistant that answers calls for an operator. They use Anthropic’s Claude. Each request sends only the text that feature needs to Anthropic in the United States. Our records of AI requests keep the time, user, feature and usage, not the text, other than call transcripts, which are part of the call record.

AI output is a draft that a person reviews before it is used. The phone assistant talks to callers and records booking requests and messages for office staff to confirm, and tells callers it is automated. It makes no decisions that significantly affect a person’s rights or interests. Operators can turn AI off for their business.

Where it is kept

Rangefront Waste and its database, files and backups are hosted in Australia.

Who we share it with

• the operator whose customer or user you are
• our service providers, listed below
• recipients the operator directs, such as councils receiving compliance reports, accounting software or payment providers
• professional advisers, insurers and auditors, under confidentiality
• a buyer of the business, with notice where required
• law enforcement and regulators where the law requires or allows it

Some providers handle information outside Australia:

• United States: Anthropic (AI features), Twilio (SMS and phone calls), Resend (email), Mapbox and Google (maps and routing), Expo (push notifications), Stripe (payments) and Cloudflare (bot checks on booking forms)
• Germany: OpenRouteService, for routing, if an operator chooses it

Before disclosing personal information overseas we take reasonable steps, usually through the provider’s contract terms, to make sure it is handled consistently with the Australian Privacy Principles.

Security

Each operator’s data is kept separate and checked on every request. Connections are encrypted, passwords are hashed, devices can be revoked, uploads are scanned and changes are recorded in an audit log. No system is perfectly secure.

How long we keep it

• Operators’ data is kept while their account is active. After it ends, operators can export it for 30 days, then it is deleted.
• After a free trial, the account is read-only for 60 days, then deleted unless the operator subscribes.
• Technician location events are kept for 90 days and field app sync records for 180 days by default.
• Backups are overwritten within the backup cycle.
• Invoices and tax records are kept as long as the law requires.

When we no longer need personal information, we delete or de-identify it.

Access and correction

You can ask for access to, or correction of, personal information we hold about you by emailing hello@rangefrontlabs.com.au. We respond within 30 days. If we refuse access where the Privacy Act allows it, we will tell you why.

Data breaches

If a data breach is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires. Where we hold information for an operator, we tell the operator without undue delay.

Complaints

Contact us first at hello@rangefrontlabs.com.au. We acknowledge complaints within 7 days and aim to resolve them within 30 days. If you are not satisfied, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.

Changes

We may update this policy. The date at the top shows the current version, and we tell operators about material changes.