Privacy policy

It covers waiste.ai and the workspaces waste businesses run on it. If you are a customer of a waste business that uses Waiste, that business decides what it collects about you and why, and its own privacy policy governs. Ask them, or ask us and we will tell you who they are.

In that situation Waiste holds your information on that business's behalf and acts on its instructions. We do not use it for our own purposes and we do not sell it.

When a waste business signs up we collect the business name and the name, email address and phone number of the people who use the software, along with the sign-in identifiers those people use.

We record what happens in a workspace: who signed in, what they changed, and when. That audit record is how an operator can answer a question about its own business later, and it is deliberately hard to alter.

We collect the billing details needed to charge the subscription. Card numbers go directly to our payment processor over an encrypted connection. We never see or store a full card number.

If you only read the public pages we collect what a web server records to serve them, and nothing you have to type.

We do not run advertising trackers on waiste.ai and we do not build a profile of you.

To create and run a workspace, to let the right people sign in, to charge the subscription, to answer support questions, to keep the service secure, and to meet obligations the law puts on us such as keeping tax records.

We do not use an operator's data, or its customers' data, to train models or to market to anyone.

Service providers that make the platform work: hosting and database providers, a payment processor, and email and SMS providers used to send what an operator asks us to send. Each is given only what its job needs.

Anyone we are legally required to give it to, and only what we are required to give.

Nobody else. We do not sell personal information and we do not disclose one operator's data to another operator.

The current list of service providers is available on request from support@waiste.ai.

Operator and workspace data is held in a managed database hosted in Australia. Some service providers process limited data outside Australia, for example when an email is delivered. Where that happens we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles.

For as long as the workspace is active, and then as set out in our terms: an export is available on request within 30 days of cancellation, after which the data is deleted or de-identified except records we must keep by law.

Audit and billing records are kept for the periods Australian tax and record keeping law requires.

Each operator's data sits in its own database schema and is served only on the web addresses registered to that operator, so one business's pages cannot show another's data.

Access is limited to the people who need it. Connections are encrypted. Sign-in is by password or by a one time link, and staff access is tied to a named person rather than a shared login.

No system is perfectly secure. If a data breach happens that is likely to cause serious harm we will notify the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

You can ask what personal information we hold about you and ask us to correct it. Email support@waiste.ai and we will respond within 30 days.

If you are a customer of a waste business that runs on Waiste, send that request to the business itself, because the information is theirs. If you do not know who to ask, ask us and we will point you at them.

If you are unhappy with how we handled a privacy matter, tell us first at support@waiste.ai. If you are still unhappy you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

This policy changes as the service changes. Each version is published at this address with its own version date, and the version in force is the one shown at the top of this page.