Privacy Policy
Version: draft-2026-11 ยท Last updated: 1 November 2026
In short
We collect only the personal information needed to run HydroNote (mainly user names, usernames, emails and login records) and demo request details. We handle it in line with the Australian Privacy Act 1988 and the Australian Privacy Principles, and the New Zealand Privacy Act 2020 for NZ customers.
1. Who this applies to
This policy explains how [HydroNote Pty Ltd, ABN to be added] handles personal information about Users of HydroNote, people who contact us through the website, and people named in customer data.
2. What we collect
- User details: full name, username, role, password (stored only as a scrambled hash), default plant preference.
- Activity records: login times, failed logins, IP address of failed or blocked logins, and the audit trail of actions in HydroNote.
- Demo requests: name, organisation, role, email, phone, number of plants, message and IP address.
- Customer operational data, which may include operator names attached to readings.
3. Why we collect it
To provide and secure the service, show who entered and approved data, keep the audit trail, respond to demo requests, provide support, and meet legal obligations. We do not sell personal information and do not use Customer Data to train artificial intelligence models.
4. Storage and overseas disclosure
HydroNote is hosted on Cloudflare, with the database placed in Cloudflare's Oceania region. Cloudflare is a United States company and may process data in other countries to deliver and protect the service. We take reasonable steps to ensure our service providers protect personal information consistent with the Australian Privacy Principles (APP 8).
5. Service providers (sub-processors)
- Cloudflare, Inc.: hosting, database, network security.
- GitHub, Inc.: storage of HydroNote program code (no customer data).
We will update this list before adding a new provider that handles personal information.
6. Cookies
HydroNote uses one essential cookie to keep you logged in. See the Cookie Policy.
7. Security
We protect personal information with the measures described in the Security summary.
8. Access and correction
Users can update their name in My profile. To access or correct other personal information, contact your organisation's HydroNote administrator or us at [contact email].
9. Data breaches
If a data breach is likely to cause serious harm, we will notify affected customers promptly and, where required, the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.
10. Retention
We keep personal information while a customer subscription is active and as long as needed for audit and legal purposes, then delete or de-identify it.
11. Complaints
Contact us at [contact email]. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au) or, in New Zealand, the Office of the Privacy Commissioner (privacy.org.nz).