TrafWise is a scheduling and communication platform for Australian traffic control companies. This policy explains, in plain English, what personal information we collect, why we collect it, who we share it with and the choices you have. We handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and we apply GDPR‑style protections to anyone whose data reaches us from the EU or UK.
1. Who we are
TrafWise ("TrafWise", "we", "us", "our") operates the TrafWise web portal at trafwise.com and the TrafWise TC app for iPhone. TrafWise is operated by Brazaustra Pty Ltd (ABN 45 647 949 488). We are based in Queensland, Australia.
For anything privacy‑related, email our support form.
TrafWise is used by three kinds of people, and what we collect depends on your role:
- Operators — the traffic control company that subscribes to TrafWise and its owners or admins.
- Allocators — office staff an Operator invites to plan jobs and roster crews.
- Crew (traffic controllers) — field staff whose accounts are created by their employer (the Operator) and who use the TrafWise TC app.
Operators use TrafWise to manage their own workforce and clients. For Allocator and Crew information the Operator decides why it is collected, and we process it on the Operator's instructions. If you are Crew and have a question about how your employer uses your information, please ask them first; we will help where we can.
2. What we collect
Operators
- Name, work email address and phone number of the person who signs up.
- Company name, ABN, trading address and the regions you operate in.
- Billing details: plan, invoices and payment status. Card details are entered directly with our payment provider and are never stored on TrafWise servers.
- Login activity (time, IP address, browser/device type) for security.
Allocators and Crew
- Name, mobile number, email address and username, as entered by the Operator when the account is created.
- Login activity (time, IP address, device type and app version) for security and support.
- Device information needed to deliver push notifications (a device token) and to diagnose app problems (iOS version, app version, crash logs).
- Job and roster data: shifts offered, accepted or declined, timesheets, dockets, qualifications or ticket expiry dates that the Operator records.
Crew using the TrafWise TC app
- Precise location — only during a shift and only if you turn location sharing on. Location is used so your allocator can see that you are at the site and to help with safety. It stops when the shift ends or when you switch sharing off. We do not collect location in the background outside a shift.
- Photos you choose to attach to a site report, docket or incident note. We only receive photos you select or take within the app; we do not scan your photo library.
- Job status you set in the app (for example travelling, on site, set up, packed down).
Information from an Operator's clients
An Operator may publish a booking form so its clients (councils, civil contractors, event organisers) can request traffic control. The form collects the contact name, email, phone, company, site address and job details the client enters. That information belongs to the Operator; we store it on the Operator's behalf.
Information we do not collect
- We do not buy data about you from third parties.
- We do not collect contacts, browsing history or data from other apps on your device.
- We do not use advertising identifiers or advertising SDKs.
3. The TrafWise TC app
- We do not track you across other apps or websites, and we do not use your data for advertising.
- Location is collected only while you are on a shift, only with your consent, and only when location sharing is turned on. You can turn it off at any time in the app or in iOS Settings.
- You can delete your account from inside the app: account icon → Security → Delete my account. See section 10.
- Face ID is handled by iOS. Your face data never leaves your iPhone and TrafWise never receives it; the app only learns whether the scan passed.
Your TrafWise TC account is created by your employer. Your employer can see your roster, job status, timesheets, site photos and — while you have sharing on during a shift — your location. Your employer cannot see your location outside a shift because we do not collect it.
The app asks for iOS permissions (location, camera, photos, notifications) only when a feature needs them. Declining a permission limits that feature but does not stop you using the app for rosters and messages.
4. How we use information
- Running the service — creating accounts, planning jobs, rostering crews, sending shift offers and notifications, producing dockets and invoices, and showing operators where their crews are during a shift.
- Safety — helping allocators confirm crews have arrived at site, recording incidents and site conditions, and keeping an audit trail of who did what.
- Support — answering your questions, diagnosing problems and investigating misuse.
- Security — detecting suspicious logins, protecting accounts and keeping backups.
- Billing — charging Operators for their subscription and keeping tax records.
- Improving TrafWise — using aggregated, de‑identified usage statistics to understand which features are used.
- Legal — meeting our obligations under Australian law and responding to lawful requests.
We do not sell personal information, and we do not use it for third‑party advertising or profiling.
5. Legal bases
Under the Privacy Act we collect only what is reasonably necessary for our functions, and we tell you why at or before collection. Where GDPR or UK GDPR applies, our legal bases are:
| Purpose | Legal basis |
|---|---|
| Providing the service to Operators | Performance of a contract |
| Processing Allocator, Crew and client data for an Operator | Processing on the Operator's documented instructions (the Operator is the controller) |
| Shift location sharing | Consent — given in the app and withdrawable at any time |
| Security, fraud prevention, service improvement | Legitimate interests |
| Tax and accounting records | Legal obligation |
6. Who we share it with
We share personal information only with the providers we need to run TrafWise, and only for that purpose:
| Provider | What they do | Where |
|---|---|---|
| Google Cloud / Firebase | Database, authentication, file storage (including site photos) and push notifications | United States for the primary Firestore database; other services may process data in additional locations |
| Vercel | Hosting for the web portal and marketing site | Global edge network; origin in Australia/United States |
| Google Maps Platform | Address lookup, maps and directions shown in the portal and app | United States |
| Payment provider | Processing Operator subscription payments | Australia / United States |
| Email and SMS delivery | Sending invites, shift offers, password resets and receipts | Australia / United States |
We may also share information:
- With your Operator (employer) — this is how the service works.
- With an Operator's clients, where the Operator chooses to share job progress or completion reports with them.
- With professional advisers (lawyers, accountants) under confidentiality.
- When required by law, a court order or a regulator, or to protect someone's safety.
- With a buyer if TrafWise is sold or merged; you would be notified and this policy would continue to apply.
We never sell personal information and we never share it with advertisers or data brokers.
7. International transfers
Our primary Firestore database is currently hosted in the United States. The providers listed above may also process data in other countries, including across Vercel's global edge network. Contact us through the privacy support form for information about overseas processing and the protections used for your data.
8. How long we keep it
| Data | Retention |
|---|---|
| Operator account and company details | Trial expiry and subscription cancellation preserve company records. Owners can download business records from Subscription. Contact privacy support about retention or deletion requests. |
| Allocator and Crew accounts | Until the Operator removes the user or the user deletes their account, then erased within 30 days |
| Shift location history | Kept for 90 days after the shift for safety and dispute purposes, then deleted. Operators can shorten this in settings. |
| Site photos, dockets and job records | Retained by the Operator as part of its business records; deleted when the Operator deletes the job or its account |
| Invoices and tax records | 7 years, as required by Australian tax law |
| Login and security logs | 12 months |
| Backups | Daily database backups are retained for 35 days. Encrypted authentication and file recovery copies rotate after 35 days, with an additional seven-day provider soft-delete window. File version history and records retained for a lawful employer purpose can remain longer; privacy support reviews these separately. |
9. Security
We use encrypted cloud services, TLS connections, hashed passwords and company-scoped role checks. Crew access is bound to their own company account, and revoked sessions are checked on API requests. You can contact privacy support for details about security and recovery arrangements. No system is perfectly secure; if we become aware of a data breach likely to cause serious harm we will notify affected people and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires.
10. Deleting your account
Crew (TrafWise TC app)
Open the app, go to Profile → Delete my account and confirm. Your login is disabled immediately. A verified request enters the owner privacy queue for review and personal account erasure within 30 days. We record the lawful purpose and expiry of any business evidence that must be retained. Records your employer must keep for its own legal reasons (for example a signed docket showing which controllers attended a site) are retained by the Operator but no longer linked to a live account.
Operators and Allocators
Operators can manage Allocator and Crew access from the portal. To request closure or deletion of an Operator account, use our privacy support form from the company owner's email address. We confirm your identity, the scope of the request and the records to retain before processing it. Cancelling billing does not itself delete company records.
Anyone can also use our support form to request deletion. We complete verified deletion requests within 30 days.
11. Children
TrafWise is a workplace tool. It is not directed at, and must not be used by, anyone under 16. Operators must not create accounts for people under 16. If we learn we hold information about a child under 16 we will delete it.
12. Cookies
Essential cookies and local storage support sign-in, security, offline work and preferences. Optional Google Ads measurement is prepared but remains inactive until configured. When enabled, it loads only after you choose to allow advertising measurement. Conversions describe verified operator registrations, trials with a crew member and shift, and subscriptions with a confirmed paid invoice; app-download clicks and anonymous email submissions are not treated as conversions. Conversion payloads do not include names, emails, crew records or document contents. Google may process advertising identifiers and conversion data overseas. You can choose Essential only or change your choice using measurement preferences. Declining measurement does not block the service. Consent preferences are local to each browser and site origin. The crew app does not load this advertising measurement.
13. Your rights
You can ask us to:
- Access the personal information we hold about you and receive a copy.
- Correct information that is inaccurate or out of date. Crew can update their own contact details in the app; Operators can update company details in the portal.
- Delete your information (see section 10).
- Withdraw consent to location sharing at any time by turning it off in the app.
- Object to or restrict certain processing, or ask for a portable copy of your data, where GDPR applies.
Email our support form. We will verify your identity, respond within 30 days and not charge you for a reasonable request. If your information was entered by an Operator we may refer your request to them or ask them to confirm it.
Complaints. If you think we have mishandled your information, contact us first and we will investigate and respond in writing. If you are not satisfied you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. EU/UK residents may also contact their local data protection authority.
14. Changes to this policy
We update this policy when the service or the law changes. The "last updated" date at the top tells you the current version. For significant changes we will notify Operators by email and show a notice in the portal and app before the change takes effect. Continuing to use TrafWise after that date means you accept the updated policy.
15. Contact us
Privacy Officer, TrafWise
Use our support form (topic: Privacy / delete my data) and we'll reply by email.
Australia