Privacy Policy
PaintIQ is operated by Smith & Co Group Pty Ltd (ABN 55 867 351 534) ("we", "us", "our"). We respect your privacy and handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). This policy explains what we collect through the PaintIQ platform at paintiq.io, why we collect it, and how you can exercise your rights.
1. What we collect
- Account information — your name, email address, role, and company details when a workspace is created for you or you sign up.
- Project and business data — estimates, schedules, timesheets, claims, invoices, documents and related records that your company enters into its workspace. This data belongs to your company; we process it to provide the service.
- Worker and subcontractor records — where your company uses the Workers App or Subcontractor Portal: clock-in and clock-out times, GPS location at clock-in where enabled by your company, task progress, photos, timesheets, invoices and compliance documents.
- Connected services — if your company connects an email account (for example Gmail) to the Halo agent, we access messages solely to provide triage, drafting and reporting features inside your workspace, under the permissions you grant. You can disconnect at any time.
- Usage and device information — log data, browser type and pages visited, used to keep the service secure and improve it.
2. How we use it
- To provide, operate and support the platform for your company's workspace.
- To generate the reports, claims, schedules and other outputs your company asks the platform to produce, including outputs produced by AI features. AI features act on your data only within your workspace, and actions the Halo agent proposes require human approval before they are carried out.
- To communicate service information, such as onboarding, billing and security notices.
- To meet our legal obligations.
We do not sell personal information. We do not use your company's project data to train models for other customers.
3. Access inside a workspace
Access is scoped by role. Workers see their own tasks and timesheets, subcontractors see only the packages assigned to them through the portal, and company financial data is visible only to the roles your company administrator authorises.
4. Storage and security
Data is stored with reputable cloud infrastructure providers, which may host data outside Australia. We take reasonable steps, including encryption in transit, scoped authentication and access controls, to protect information from misuse, interference, loss and unauthorised access. No system is perfectly secure; if a data breach likely to result in serious harm occurs, we will notify affected users and the OAIC as required by law.
5. Disclosure
We disclose information only to service providers who help us run the platform (such as hosting, email delivery and document storage providers), to parties your company directs us to send documents to in the ordinary use of the platform (for example a builder receiving a progress claim), and where required by law.
6. Access, correction and deletion
You may request access to, correction of, or deletion of your personal information by contacting us. Where information forms part of a company workspace's business records (for example a signed timesheet), deletion may be subject to that company's retention obligations.
7. Cookies
The platform uses cookies and local storage strictly for sign-in sessions and product functionality. We do not run third-party advertising trackers on paintiq.io.
8. Contact and complaints
Privacy questions and complaints can be sent to brandon@smithandcogroup.co. We will respond within a reasonable period. If you are unsatisfied with our response, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).
9. Changes
We may update this policy from time to time. The date above reflects the current version, and material changes will be notified inside the platform.