Privacy Policy

1. About this policy

Masc Enterprises Pty Ltd (ABN 76 650 834 745), trading as MascSoftAI, is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you visit our website (mascsoftai.com.au) or use our products — Masc Inspect, Masc Orders, Masc Changeovers, and Masc Attendance.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information we collect

We may collect the following types of personal information:

Contact and enquiry information

When you submit our contact form, we collect your name, email address, and the content of your message. This is used solely to respond to your enquiry.

Account and subscription information

If you subscribe to one of our products, we collect your name, email address, organisation name, and billing details. Billing details are processed directly by Stripe — we do not store your full card number on our systems.

Product usage data

When you use Masc Inspect, Masc Orders, Masc Changeovers, or Masc Attendance, we collect data you input into the app — such as inspection records, site names, corrective actions, supply orders, changeover logs, and staff check-in/check-out records. This data belongs to your organisation and is used only to provide the service.

Technical data

We may collect standard web server logs including IP address, browser type, pages visited, and time of access. This information is used for security monitoring and to improve our services.

3. How we collect information

We collect personal information:

• Directly from you when you fill in a form or contact us
• When you create an account or subscribe to a product
• Through your use of our apps (data you enter)
• Automatically via web server logs when you visit our website

We do not collect personal information from third parties or use data brokers.

4. How we use your information

We use the information we collect to:

• Respond to your enquiries and provide customer support
• Set up and manage your product subscription
• Process payments via Stripe
• Deliver and improve our products and services
• Send transactional emails (e.g. subscription confirmations, receipts)
• Comply with our legal obligations

We do not use your personal information for unsolicited marketing without your consent. We do not sell or trade your personal information to third parties.

5. Disclosure of information

We may share your information with trusted third-party service providers who assist us in delivering our services, including:

• Supabase — our backend database and authentication provider. Data is stored on Supabase infrastructure. Supabase's privacy policy is available at supabase.com/privacy.
• Stripe — payment processing. When you subscribe to a product, your billing details are handled by Stripe. Stripe's privacy policy is available at stripe.com/au/privacy.
• Netlify — website hosting. Our website is served via Netlify infrastructure. Netlify's privacy policy is available at netlify.com/privacy.

These providers are only given access to information necessary to perform their services and are required to protect it.

We may also disclose your information if required to do so by law or in response to a valid legal request.

6. Data storage and security

Your data is stored on Supabase servers. Supabase operates on AWS infrastructure, with data centres in the United States. By using our services, you consent to your data being stored and processed outside Australia.

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, or disclosure. This includes:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Row-level security controls in our database
• Access controls limiting who can access production data

No method of transmission over the internet is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.

7. Cookies

Our website may use cookies or similar technologies for basic functionality (e.g. session management). We do not use tracking cookies or third-party advertising cookies. You can disable cookies in your browser settings, though this may affect how parts of the site function.

8. Your rights

Under the Australian Privacy Principles, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or out-of-date information
• Request deletion of your personal information, subject to our legal obligations
• Make a complaint about how we handle your personal information

To exercise any of these rights, contact us at admin@mascsoftai.com.au. We will respond within 30 days.

9. Complaints

If you believe we have breached the Australian Privacy Principles and your complaint is not resolved to your satisfaction, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available at mascsoftai.com.au/privacy. We encourage you to review it periodically.

11. Contact us

For any privacy-related questions or requests, please contact:

Masc Enterprises Pty Ltd (trading as MascSoftAI)
Email: admin@mascsoftai.com.au
Website: mascsoftai.com.au