TrafWise is a scheduling and communication platform for Australian traffic control companies. This policy explains, in plain English, what personal information we collect, why we collect it, who we share it with and the choices you have. We handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and we apply GDPR‑style protections to anyone whose data reaches us from the EU or UK.
1. Who we are
TrafWise ("TrafWise", "we", "us", "our") operates the TrafWise web portal at trafwise.com and the TrafWise TC app for iPhone. We are based in Queensland, Australia.
For anything privacy‑related, email our support form.
TrafWise is used by three kinds of people, and what we collect depends on your role:
- Operators — the traffic control company that subscribes to TrafWise and its owners or admins.
- Allocators — office staff an Operator invites to plan jobs and roster crews.
- Crew (traffic controllers) — field staff whose accounts are created by their employer (the Operator) and who use the TrafWise TC app.
Operators use TrafWise to manage their own workforce and clients. For Allocator and Crew information the Operator decides why it is collected, and we process it on the Operator's instructions. If you are Crew and have a question about how your employer uses your information, please ask them first; we will help where we can.
2. What we collect
Operators
- Name, work email address and phone number of the person who signs up.
- Company name, ABN, trading address and the regions you operate in.
- Billing details: plan, invoices and payment status. Card details are entered directly with our payment provider and are never stored on TrafWise servers.
- Login activity (time, IP address, browser/device type) for security.
Allocators and Crew
- Name, mobile number, email address and username, as entered by the Operator when the account is created.
- Login activity (time, IP address, device type and app version) for security and support.
- Device information needed to deliver push notifications (a device token) and to diagnose app problems (iOS version, app version, crash logs).
- Job and roster data: shifts offered, accepted or declined, timesheets, dockets, qualifications or ticket expiry dates that the Operator records.
Crew using the TrafWise TC app
- Precise location — only during a shift and only if you turn location sharing on. Location is used so your allocator can see that you are at the site and to help with safety. It stops when the shift ends or when you switch sharing off. We do not collect location in the background outside a shift.
- Photos you choose to attach to a site report, docket or incident note. We only receive photos you select or take within the app; we do not scan your photo library.
- Job status you set in the app (for example travelling, on site, set up, packed down).
Information from an Operator's clients
An Operator may publish a booking form so its clients (councils, civil contractors, event organisers) can request traffic control. The form collects the contact name, email, phone, company, site address and job details the client enters. That information belongs to the Operator; we store it on the Operator's behalf.
Information we do not collect
- We do not buy data about you from third parties.
- We do not collect contacts, browsing history or data from other apps on your device.
- We do not use advertising identifiers or advertising SDKs.
3. The TrafWise TC app
- We do not track you across other apps or websites, and we do not use your data for advertising.
- Location is collected only while you are on a shift, only with your consent, and only when location sharing is turned on. You can turn it off at any time in the app or in iOS Settings.
- You can delete your account from inside the app: account icon → Security → Delete my account. See section 10.
- Face ID is handled by iOS. Your face data never leaves your iPhone and TrafWise never receives it; the app only learns whether the scan passed.
Your TrafWise TC account is created by your employer. Your employer can see your roster, job status, timesheets, site photos and — while you have sharing on during a shift — your location. Your employer cannot see your location outside a shift because we do not collect it.
The app asks for iOS permissions (location, camera, photos, notifications) only when a feature needs them. Declining a permission limits that feature but does not stop you using the app for rosters and messages.
4. How we use information
- Running the service — creating accounts, planning jobs, rostering crews, sending shift offers and notifications, producing dockets and invoices, and showing operators where their crews are during a shift.
- Safety — helping allocators confirm crews have arrived at site, recording incidents and site conditions, and keeping an audit trail of who did what.
- Support — answering your questions, diagnosing problems and investigating misuse.
- Security — detecting suspicious logins, protecting accounts and keeping backups.
- Billing — charging Operators for their subscription and keeping tax records.
- Improving TrafWise — using aggregated, de‑identified usage statistics to understand which features are used.
- Legal — meeting our obligations under Australian law and responding to lawful requests.
We do not sell personal information, and we do not use it for third‑party advertising or profiling.
5. Legal bases
Under the Privacy Act we collect only what is reasonably necessary for our functions, and we tell you why at or before collection. Where GDPR or UK GDPR applies, our legal bases are:
| Purpose | Legal basis |
|---|---|
| Providing the service to Operators | Performance of a contract |
| Processing Allocator, Crew and client data for an Operator | Processing on the Operator's documented instructions (the Operator is the controller) |
| Shift location sharing | Consent — given in the app and withdrawable at any time |
| Security, fraud prevention, service improvement | Legitimate interests |
| Tax and accounting records | Legal obligation |
6. Who we share it with
We share personal information only with the providers we need to run TrafWise, and only for that purpose:
| Provider | What they do | Where |
|---|---|---|
| Google Cloud / Firebase | Hosting, database, authentication, file storage (including site photos), push notifications and crash reporting | Australia (primary) and United States |
| Vercel | Hosting for the web portal and marketing site | Global edge network; origin in Australia/United States |
| Google Maps Platform | Address lookup, maps and directions shown in the portal and app | United States |
| Payment provider | Processing Operator subscription payments | Australia / United States |
| Email and SMS delivery | Sending invites, shift offers, password resets and receipts | Australia / United States |
We may also share information:
- With your Operator (employer) — this is how the service works.
- With an Operator's clients, where the Operator chooses to share job progress or completion reports with them.
- With professional advisers (lawyers, accountants) under confidentiality.
- When required by law, a court order or a regulator, or to protect someone's safety.
- With a buyer if TrafWise is sold or merged; you would be notified and this policy would continue to apply.
We never sell personal information and we never share it with advertisers or data brokers.
7. International transfers
Our primary data location is Australia. Some providers listed above process or back up data in the United States or, for Vercel's edge network, in other countries. Before disclosing information overseas we take reasonable steps under APP 8 to make sure the recipient protects it to a standard comparable to Australian law, including contractual data‑processing terms and, for EU/UK data, Standard Contractual Clauses.
8. How long we keep it
| Data | Retention |
|---|---|
| Operator account and company details | While the subscription is active, then up to 90 days after cancellation so the Operator can export data, then deleted |
| Allocator and Crew accounts | Until the Operator removes the user or the user deletes their account, then erased within 30 days |
| Shift location history | Kept for 90 days after the shift for safety and dispute purposes, then deleted. Operators can shorten this in settings. |
| Site photos, dockets and job records | Retained by the Operator as part of its business records; deleted when the Operator deletes the job or its account |
| Invoices and tax records | 7 years, as required by Australian tax law |
| Login and security logs | 12 months |
| Backups | Rolled over within 35 days of the live data being deleted |
9. Security
We protect information with encryption in transit (TLS) and at rest, role‑based access so Crew see only their own jobs and Operators see only their own company, hashed passwords, multi‑factor authentication for TrafWise staff, least‑privilege access to production systems, and regular backups. No system is perfectly secure; if we become aware of a data breach likely to cause serious harm we will notify affected people and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires.
10. Deleting your account
Crew (TrafWise TC app)
Open the app, go to Profile → Delete my account and confirm. Your login is disabled immediately and your personal information is erased within 30 days. Your employer will be told the account was deleted. Records your employer must keep for its own legal reasons (for example a signed docket showing which controllers attended a site) are retained by the Operator but no longer linked to a live account.
Operators and Allocators
Operators can remove Allocator and Crew users from the portal at any time. To close an Operator account, request it from Settings → Account in the portal or email our support form from an admin address. We confirm the request, give you 30 days to export your data, and then erase it (other than tax records we must keep).
Anyone can also email our support form to request deletion. We complete verified deletion requests within 30 days.
11. Children
TrafWise is a workplace tool. It is not directed at, and must not be used by, anyone under 16. Operators must not create accounts for people under 16. If we learn we hold information about a child under 16 we will delete it.
12. Cookies
The web portal uses only the cookies and local storage needed to run: a session cookie that keeps you logged in, a security token that protects forms, and a preference for things like "keep me logged in". We do not use advertising cookies, cross‑site tracking or third‑party analytics cookies. Because these cookies are essential, there is no cookie banner to accept; blocking them in your browser will stop you logging in. The TrafWise TC app does not use cookies.
13. Your rights
You can ask us to:
- Access the personal information we hold about you and receive a copy.
- Correct information that is inaccurate or out of date. Crew can update their own contact details in the app; Operators can update company details in the portal.
- Delete your information (see section 10).
- Withdraw consent to location sharing at any time by turning it off in the app.
- Object to or restrict certain processing, or ask for a portable copy of your data, where GDPR applies.
Email our support form. We will verify your identity, respond within 30 days and not charge you for a reasonable request. If your information was entered by an Operator we may refer your request to them or ask them to confirm it.
Complaints. If you think we have mishandled your information, contact us first and we will investigate and respond in writing. If you are not satisfied you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. EU/UK residents may also contact their local data protection authority.
14. Changes to this policy
We update this policy when the service or the law changes. The "last updated" date at the top tells you the current version. For significant changes we will notify Operators by email and show a notice in the portal and app before the change takes effect. Continuing to use TrafWise after that date means you accept the updated policy.
15. Contact us
Privacy Officer, TrafWise
Use our support form (topic: Privacy / delete my data) and we'll reply by email.
Australia