Legal
Privacy Policy
Effective 2 October 2026
1. About this policy
This Privacy Policy explains how YourPlan handles personal information in connection with the YourPlan website, business-management platform, customer portals, support and related services. The legal operator of YourPlan is the entity identified in the applicable Order Form or customer agreement.
2. Information we collect
Depending on how the service is used, we may handle names, business contact details, account and login information, job and customer records, calendar and scheduling information, quotes and invoices, staff records, timesheets, uploaded documents and photos, support communications, audit logs, device and technical information, and other information a customer chooses to enter into its portal. Customers should not use YourPlan to store payment-card numbers, banking passwords, tax file numbers, passport or driver-licence identity packs, health information or other highly sensitive information unless YourPlan has expressly agreed that the relevant feature is designed for that purpose.
3. How information is collected
Information may be provided directly by users, supplied by a customer organisation, generated through use of the platform, received through customer communications or integrations, or collected automatically as part of operating and securing the service.
4. Why we use information
We use information to provide and administer the service; authenticate users; operate customer portals; process jobs, scheduling and business workflows; provide support; send service communications; maintain security and audit records; prevent misuse; improve reliability and functionality; meet legal obligations; and manage subscriptions, billing and customer relationships.
5. Customer data and roles
A customer organisation controls the business information it enters into its portal and is responsible for ensuring it has authority to collect and use that information. YourPlan processes that information to provide the service, subject to the customer agreement and applicable law. YourPlan uses tenant controls intended to keep one customer's portal data separate from another customer's portal data.
6. Disclosure and service providers
Information may be disclosed to infrastructure, hosting, storage, communications, security, accounting, support and other service providers where reasonably necessary to operate YourPlan. Providers are only given access needed for the relevant service. Information may also be disclosed where required or authorised by law, to protect the security or integrity of the platform, or with the relevant customer's or individual's authority.
7. Overseas processing
YourPlan uses cloud and technology providers whose infrastructure or support personnel may be located outside Australia. Current production infrastructure may process or store information in the United States, and other providers may use additional locations as their infrastructure changes. Where Australian privacy law applies, YourPlan will take reasonable steps appropriate to the circumstances when using overseas providers and will update this policy where practicable as material processing locations change.
8. Security
YourPlan uses technical and organisational safeguards appropriate to a cloud SaaS platform, including access controls, tenant-scoped application logic, encrypted HTTPS connections, private database networking, password hashing, rate limiting, audit logging, restricted production secrets, automated dependency and secret scanning, and operational monitoring. No internet service can guarantee absolute security.
9. Retention and deletion
Information is retained for as long as reasonably required to provide the service, meet contractual and legal obligations, resolve disputes, maintain security records and legitimate business records, or as otherwise agreed with the customer. Where information is no longer required, reasonable steps will be taken to delete or de-identify it where required by applicable law.
10. Access and correction
Individuals may request access to or correction of personal information that YourPlan holds about them. Where the information is controlled by a YourPlan customer, the request may need to be directed to that customer first. Requests can be made through the YourPlan Contact page.
11. Complaints
Privacy questions or complaints can be submitted in writing through the Contact page. We will review the issue, may request information necessary to verify identity or understand the complaint, and aim to respond within 30 days where practicable. If Australian privacy law applies and a complaint is not resolved, an individual may also be able to contact the Office of the Australian Information Commissioner.
12. Data incidents
YourPlan maintains a data-breach response process. If a security incident affects customer or personal information, YourPlan will investigate, contain and remediate the incident and will make notifications where required by applicable law and the customer agreement.
13. Automated decisions
YourPlan does not currently use personal information to make solely automated decisions that we expect to significantly affect an individual's rights or interests. If the platform later introduces such decision-making, this policy will be updated to describe the kinds of personal information used and the kinds of decisions involved where required by applicable law.
14. Changes
We may update this Privacy Policy to reflect changes to the platform, providers, law or business practices. The current version will be published on this page.