Privacy Policy

Last updated: 8 September 2026

CraneIQ ("we", "us") is committed to handling personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth). This policy explains what we collect, why, and your choices.

What we collect

• Account details — name, email, company, phone, and password (stored as a secure hash, never in plain text).
• Workforce records your company enters — crew names, date of birth, phone, email and home address, licences and tickets, union membership number where your company records one, employment type, wage rates, timesheets, inductions and emergency contacts. Your company controls this data; we process it on your company's behalf.
• Operational records — jobs, fleet and gear details, clients, photos, signatures, and (where enabled on a device) crane GPS location during work.
• Usage and device information — app version, device type, and crash and performance reports collected through Google Firebase Crashlytics so we can find and fix faults. These reports are not linked to your account, are never used for advertising, and are not shared with anyone else. We also use Firebase Cloud Messaging to deliver push notifications, which assigns your installation an identifier.

Sensitive information

Union membership is sensitive information under the Privacy Act, which means it may only be collected with consent and only where it is reasonably necessary. CraneIQ provides a union membership field because enterprise agreements and site access sometimes require it; recording it is optional, and your company decides whether to use the field at all. Where your company does record it, your company is responsible for obtaining your consent. We use it only to operate the Service on your company's behalf. We never use it for advertising, never disclose it to third parties, and it is visible only to your company's administrators. If you would like it removed, ask your employer or email us at privacy@craneiq.com.au.

We do not collect health information, racial or ethnic origin, religious or political views, sexual orientation, criminal history, or biometric data. Face ID, where you enable it, is handled entirely by your device — CraneIQ never receives your fingerprint or face data.

Why we collect it

To provide and operate the Service (scheduling, compliance, payroll calculations, invoicing), to support you, to secure the platform, to send service emails such as verification and important notices, and to improve the product. We do not sell personal information, and we do not use your company's operational data for advertising.

Where it's stored

Data is stored with our cloud infrastructure providers, principally Supabase (database and authentication) and its underlying cloud hosting. Transactional email is delivered via Resend, and crash reporting and push notifications are handled by Google Firebase. Some infrastructure may be located outside Australia; where that occurs we take reasonable steps to ensure comparable protection. Data is encrypted in transit, and access within CraneIQ is isolated per company so one company can never see another's records.

Disclosure

We disclose personal information only: to the service providers above so the product can function; where you direct us to (for example exporting your timesheets); or where the law requires it. Within the app, information is visible according to role — for example, wage rates are visible to your company's administrators, not to the whole crew.

Security

We use industry-standard measures including encrypted connections, hashed passwords, row-level data isolation per company, and least-privilege access. No system is perfectly secure; if we become aware of a data breach likely to result in serious harm we will notify affected users and the OAIC as required by the Notifiable Data Breaches scheme.

Access, correction and deletion

You can access and correct most of your information directly in the app. For anything else — including a full export or deletion of your data — email privacy@craneiq.com.au and we will respond within 30 days. Note that records your employer entered about you as part of their workforce management are controlled by your employer; we will refer requests to them where appropriate.

Data retention

Active company data is retained while the subscription is active. Trial data is kept for at least 90 days after trial expiry. After account termination we retain data only as long as needed for legal and accounting obligations, then delete it.

Cookies and analytics

Our website uses only the cookies necessary to operate (for example, keeping you signed in). We do not run third-party advertising trackers.

We measure how the site is used with Cloudflare Web Analytics, which is cookieless: it does not set a cookie, does not fingerprint your device, and does not follow you to other websites. We also record, for the length of a single browser session only, which page you first arrived on and which site referred you, so that if you start a trial we know which page was useful. That record is deleted when you close the tab and is never shared.

Complaints

If you believe we have mishandled your personal information, contact privacy@craneiq.com.au. If you're not satisfied with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Contact

CraneIQ · Melbourne, Australia · privacy@craneiq.com.au