Privacy Policy

1. Who we are

Vedential is provided by Vedential Pty Ltd. This policy explains what personal information we collect, why, and how we handle it. We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth) — we apply the APPs as a matter of policy even where an exemption might technically apply to a business of our size.

2. What we collect

• Account information — your name, email address, role and organisation, collected when you sign up or accept an invitation.
• Workspace content — the information your organisation enters into the service (programs, projects, tasks, registers, documents). This can include personal information about people your organisation records, such as team member and stakeholder names and email addresses. Your organisation controls that content; we process it to provide the service.
• Usage and log data — sign-in events, actions recorded in the audit log (so organisations can see who changed what), technical error logs, and standard web logs including IP address.
• Cookies — we use essential cookies only, to keep you signed in. We do not use advertising trackers.

3. How we use it

We use personal information to:

• provide and operate the service, including invitations and organisation membership;
• keep the service secure — authentication, access control, abuse and rate limiting, audit trails;
• fix problems, using error logs and support conversations;
• send service emails (invitations, sign-in links, important notices). Any marketing email is opt-in and has a working unsubscribe.

We do not sell personal information and we do not use your workspace content for advertising.

4. Who we share it with

We share personal information only with the service providers that run the platform — cloud hosting and database, email delivery, and (once paid plans launch) payment processing — under contracts that limit them to providing those services to us. Beyond that, we disclose personal information only if the law requires it or you ask us to.

5. Where it's stored

Our data is stored in Australia, with some processing by our providers in the United States and other countries where our providers operate. We take reasonable steps to ensure they handle personal information consistently with the APPs.

6. How we protect it

Data is encrypted in transit and at rest. Access is scoped to your organisation and enforced at the database layer (row-level security), so one organisation's users cannot read another's data — a control we test deliberately. Administrative access is limited and logged, and every change to workspace records is captured in an audit log.

7. How long we keep it

We keep personal information while your account or organisation is active. If your organisation's account is closed, its content is deleted from live systems within 30 days, with backup copies cycling out on a schedule after that. Audit history retains the name of the person who made each change (so organisational records stay meaningful) even after that person's account is deleted.

8. Access, correction and export

You can view and update your profile in the app, and organisations can export their data at any time with the built-in tools. For anything else — access, correction, or deletion requests — email support@vedential.com and we'll respond within a reasonable time (APP 12 and 13).

9. Data breaches

If a data breach occurs that is likely to result in serious harm, we will assess it promptly and notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

10. Complaints

If you have a privacy concern, contact us at support@vedential.com and we will investigate and respond. If you're not satisfied with our response, you can complain to the OAIC at oaic.gov.au.

11. Changes to this policy

We'll update this policy as the service evolves and note the effective date above. For material changes we'll tell you by email or in-app notice.

12. Contact

Privacy questions: support@vedential.com.