Privacy policy

Who we are

SAF AUS Group Pty Ltd (we, us) provides workforce software for security companies and a companion app for guards. Our postal address is PO Box 354, Jesmond NSW 2299. Privacy questions go to admin@safausgroup.com or +61 2 4032 0770.

What we collect

What we hold depends on how you use the service.

• Website visitors: the pages you request, and the essential cookies described on the cookie notice. We do not set advertising or analytics cookies.
• Demo and contact forms: your name, email, company, phone if you give it, and the message you send.
• Company accounts: the organisation name, the admin’s name and email, and the people they invite, with the role they are given.
• Guards and applicants: name, email, phone, address, emergency contact, and the documents a company asks for (security licence, first aid, RSA, working with children check), including the file and its expiry.
• Work records: shifts, hours, sites, patrols, incidents and, when those features are used, a photo attached to an incident and a single location reading taken when a guard taps check-in or check-out.

We collect this from you, from the company that employs or engages you, or from a form you submit. We do not buy marketing lists.

Why we collect it

• To run the software: rostering, hours, documents, incidents and team access for the company you belong to.
• To answer a demo request or a message you send us.
• To keep the service reliable and to investigate a security incident.
• To meet a legal duty, including a request from a regulator where the law requires it.

Who can see it

A security company using SAF Group decides who on its team can see its guards, shifts and documents. Guards see their own shifts, hours, jobs and documents. We do not sell personal information.

We use a short list of providers to run the service. They only handle information so we can provide it: Amazon Web Services in Sydney (database, files, email and sign-in), Vercel (the website), Expo (push notifications, if you turn them on), and Sentry (crash reports with no account details attached). Calendly and OpenSign are used only if a company turns on booking or document signing.

Customer information is stored in Sydney, Australia. A provider may process a request from outside Australia. Where that happens we take reasonable steps so the handling stays consistent with the Australian Privacy Principles.

How long we keep it

These periods apply unless your company agrees a different period with us, or the law requires longer.

• A declined or withdrawn join request, and its files: 30 days, then deleted.
• Marketing enquiries: 24 months after the last contact, then deleted.
• Notifications: 12 months. A location reading on a shift: 12 months, then the coordinates are cleared and the times stay.
• Shifts, hours, invoices, contracts, incident records, certificates of a guard who has left, and the audit log: 7 years, because they are business records a company may need.
• If you delete your account, your name, email and phone are removed at once. The company keeps the work records, without your name. See Data deletion.

Your choices

• See and correct the details on your profile, and the documents you uploaded.
• Ask for a copy of the information we hold about you.
• Ask us to delete your account. We do that, or explain what we must keep, within 30 days.
• Location and camera access are asked by your phone. You can refuse them. The rest of the app still works for the tasks that do not need them.

If something goes wrong

If we have reason to believe a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

Complaints

Write to admin@safausgroup.com and we will reply. If you are not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

We will post a new version on this page and change the date at the top. A change that affects how the app uses your information will also be mentioned in the app.