Privacy Policy

1. What we collect

Account information. When you sign in with Google we receive your email address, your name, your profile picture and a Google account identifier. We never receive or store your Google password.

Subscription and billing information.Your plan, billing interval, subscription status, trial expiry and renewal date, and identifiers linking your account to our payment provider. Card details are entered on Stripe's own pages. We do not receive, see or store them.

Project data.The profiles, levels, vehicle selections, drawing settings, export templates and project names you save. This is generally information about a site rather than about a person — but if you enter a client's name, a street address or other personal details into a project name or note, we hold that too. We recommend you do not.

Enquiries and support. Anything you send through our contact form, support form or newsletter sign-up — your name, email, company, message and any attachment. These are delivered to our inbox through Resend, an email provider in the United States, so everything you type into one of those forms passes through it.

Assistant conversations. Messages you type into the assistant on this website, and the replies generated.

Technical information. Standard server and application logs — IP address, browser type, pages requested, timestamps and error information — used to operate, secure and debug the service, and to enforce rate limits.

We do not collect sensitive information as defined in the Privacy Act (such as health, racial or political information), and you should not send it to us.

2. How we collect it

Mostly directly from you — when you sign in, save a project, subscribe, or send us a message. Some is collected automatically by our servers as you use the site. Some comes from Google (when you choose to sign in with it) and from Stripe (subscription status and payment outcomes). If someone else gives us your details — a colleague setting up a demo, for example — we will handle them under this policy.

You can browse this website without giving us personal information. You cannot use the application without an account, because the application is what keeps your saved projects separate from everyone else's.

3. Why we use it

• to create and authenticate your account, and keep your saved work separate and private to you;
• to provide the service — running calculations, saving profiles, generating drawings;
• to take payment, manage subscriptions and trials, and send receipts and billing notices;
• to answer your enquiries and provide support;
• to keep the service secure, prevent abuse, and diagnose faults;
• to send you service messages you cannot opt out of while you hold an account, such as billing and security notices;
• where you have opted in, to send product updates and educational content — with an unsubscribe link in every message; and
• to meet our legal, tax and record-keeping obligations.

What we do not do.We do not sell your personal information. We do not disclose it for another organisation's marketing. We do not use your saved project data to train artificial intelligence models, and we have not agreed to let any provider do so.

4. Who we disclose it to, and where they are

We use the service providers below to run DrivewayIQ. They may access personal information only to perform their function for us. Several are located outside Australia, and by using the service you consent to that disclosure.

Before disclosing personal information to an overseas recipient we take steps that are reasonable in the circumstances to ensure it is handled consistently with the APPs — which in practice means using established providers whose contractual terms and security practices we have reviewed. Once information is held overseas, Australian law may not apply to it and you may not be able to seek redress under the Privacy Act against that recipient.

We may also disclose personal information where we are required or authorised by law to do so, to enforce our Terms of Service, to protect someone's safety, or to a purchaser if the business is sold — in which case the information stays subject to a policy at least as protective as this one.

5. The website assistant

When you use the assistant on this website, the message you type is sent to Anthropic in the United States to generate a reply. Please do not enter personal information, client details or confidential project data into it. You never need to in order to get an answer, and there is no reason for that information to leave the country.

6. Cookies and analytics

Our use of cookies and similar technologies is described in our Cookie Policy.

7. Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include encrypted connections (HTTPS) throughout, authentication delegated to Google so we never handle passwords, payment handling delegated to Stripe so we never handle card numbers, access controls that keep each account's saved projects separate, and managed hosting with the provider applying platform security updates.

No system is completely secure. If a data breach occurs that is likely to result in serious harm, we will assess it promptly and notify affected individuals and, where the Notifiable Data Breaches scheme applies, the Office of the Australian Information Commissioner.

8. How long we keep it

• Account and project data — for as long as your account is open, and for up to 30 days after you close it or ask us to delete it, so an accidental deletion can be reversed.
• Backups — deleted data may persist in routine backups for a short period after that, and is deleted as those backups rotate.
• Billing and tax records — for as long as tax law requires, currently five years, even after your account is closed. We cannot delete these on request.
• Enquiries and support correspondence — up to two years, then deleted.
• Server logs — a short retention period set by our hosting provider, generally measured in days to weeks.

9. Access, correction and deletion

You can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that is inaccurate, out of date, incomplete or misleading; or
• delete your account and the personal information we hold, subject to the retention periods above.

Email Contact@drivewayiq.com.au from the address on your account. We will respond within 30 days and will not charge you for making the request. If we refuse access or correction we will tell you why in writing and how to complain about it.

10. Marketing and unsubscribing

We only send marketing email to people who asked for it. Every marketing message includes a working unsubscribe link and identifies us as the sender, as the Spam Act 2003 (Cth) requires. Unsubscribing takes effect within 5 business days and does not affect service messages about your account, billing or security, which you will keep receiving while your account is open.

11. Children

DrivewayIQ is a professional tool and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe we have, tell us and we will delete it.

12. Complaints

If you think we have mishandled your personal information, contact us at Contact@drivewayiq.com.au. We will acknowledge your complaint within 5 business days and give you a written response within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner — oaic.gov.au or 1300 363 992.

13. Changes to this policy

We may update this policy as the product changes. The date at the top records when it was last changed. Where a change materially affects how we handle information we already hold, we will tell account holders by email before it takes effect.

14. Contact

DrivewayIQ (ABN 49 582 946 332) — Contact@drivewayiq.com.au, or via our contact page.