Privacy Policy
AutoForce Digital ("we", "us", "our") operates the website https://www.autoforce.io, associated apps (iOS/Android), and platforms including ServiceCAM, SalesCAM, Reviews, SMS Conversations, and related services (collectively, the "Services"). We are committed to protecting personal information in compliance with Australia's Privacy Act 1988 (Cth) (including the Australian Privacy Principles – APPs) and New Zealand's Privacy Act 2020 (including the Information Privacy Principles – IPPs). This Privacy Policy explains how we collect, hold, use, disclose, retain, and secure personal information.
This Policy applies to personal information we collect directly from individuals (e.g., website visitors, account holders) and personal information our clients upload or provide about their customers (e.g., contact lists for SMS notifications or repair orders). We act as a data processor for client-uploaded customer data and process it per client instructions and this Policy.
1. Types of Personal Information We Collect and Hold
We collect and hold the following kinds of personal information:
-
From website visitors and account sign-ups: Name, email address, phone number, business details, IP address, browser/device information, usage data (via tools like Google Analytics), and any information provided in forms or inquiries.
-
From clients using our Services: Client account details (e.g., name, email, contact number, billing info).
-
Client-uploaded customer data (for repair orders, SMS messaging, etc.): First and last name, mobile number, vehicle registration number, optional email address/surname, repair order details, message logs, feedback, and related vehicle/service information.
-
Other: Aggregated/anonymized analytics data (not personally identifiable).
We minimise collection to what is reasonably necessary for our functions and activities (APP 3 / IPP 1).
2. How We Collect Personal Information
-
Directly: When you visit our website, sign up for an account, contact us, or use our apps/Services.
-
Automatically: Via cookies, logs, Google Analytics (anonymized visitor stats), and similar technologies.
-
From clients: When clients upload customer lists or integrate with Dealer Management Systems (DMS)/CRM (only if explicitly integrated).
-
Unsolicited: If received, we assess if it could have been lawfully collected; if not needed, we destroy or de-identify it promptly (APP 4).
3. Purposes for Collecting, Holding, Using, and Disclosing Personal Information
We collect, hold, use, and disclose personal information for:
-
Providing and improving the Services (e.g., generating repair orders for service videos, sending SMS notifications with links to service and sales videos, and review landing pages, managing reviews/feedback).
-
Account management, notifications, support, and communication.
-
Analytics, security, and platform enhancement (anonymised where possible).
-
Compliance with legal obligations, dispute resolution, or fraud prevention.
-
Marketing our Services (with opt-out available).
We do not use or disclose for unrelated purposes without consent or another lawful basis (APP 6 / IPP 10). We do not sell, rent, or trade personal information.
4. Retention of Personal Information
We retain personal information only as long as necessary for the purposes for which it was collected or as required by law (APP 11.2 / IPP 9). We then take reasonable steps to destroy or de-identify it securely.
Examples of retention periods (based on purpose and common legal requirements):
-
Active client/customer data (e.g., for ongoing Services): Retained while the account is active and for a reasonable period after termination (e.g., up to 12 months for backups/support).
-
Tax, audit, or financial records: Up to 7 years (per Australian Taxation Office/IRD requirements).
-
Inactive or post-service data: Deleted or de-identified after 2 years.
-
Analytics/logs: Retained for as long as the account is active and for a reasonable period after termination (e.g., up to 12 months for backups/support)..
We maintain a retention schedule and automate deletion where feasible.
5. Disclosure of Personal Information
We may disclose personal information to:
-
Service providers/subprocessors (e.g., AWS for secure storage, Wix (or similar channel) for newsletters, Google Analytics – see their policies).
-
Clients (for their uploaded data).
-
Legal authorities if required by law.
-
In business transfers (with notice where possible).
No disclosure occurs without consent unless permitted by law.
6. Overseas Disclosure
Personal information (including client-uploaded data) may be stored or processed overseas, primarily in the United States (via AWS servers) or other countries where our providers operate. We take reasonable steps to ensure recipients provide comparable protections (e.g., contractual safeguards). Risks include foreign laws allowing government access. By using our Services, you consent to such transfers (APP 8 / IPP 12 considerations).
7. Security of Personal Information
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorized access, modification, or disclosure (APP 11 / IPP 5), including:
-
SSL/TLS encryption for transmissions.
-
Access controls (e.g., user tokens/API authentication).
-
Secure AWS hosting.
-
Minimal collection and standalone platform design.
We cannot guarantee absolute security; report suspected breaches to us immediately.
8. Data Breaches
If a breach occurs likely to cause serious harm, we will notify affected individuals and relevant regulators (e.g., OAIC in Australia, Privacy Commissioner in New Zealand) as required by law.
9. Access, Correction, and Complaints
You have rights to:
-
Access your personal information we hold (subject to exceptions).
-
Request correction if inaccurate.
-
Complain about breaches of this Policy or privacy laws.
To exercise rights or complain:
-
Email our Data Protection Officer at info@autoforce.io.
-
Provide details; we respond within 30 days (or sooner where possible).
If unsatisfied, contact:
-
Office of the Australian Information Commissioner (oaic.gov.au).
-
Office of the Privacy Commissioner (New Zealand) (privacy.org.nz).
10. Anonymity and Pseudonymity
Where lawful and practicable, you may interact anonymously or pseudonymously (APP 2 / IPP equivalent).
11. Children
Our Services are not directed at children under 16. We do not knowingly collect their data without parental consent.
12. Changes to This Policy
We review this Policy annually (or sooner). Updates will be posted here with the effective date. Continued use constitutes acceptance.13. Contact Us
For questions, contact:
Data Protection Officer
Email: info@autoforce.io
Phone: +61 7 5372 9001
Thank you for trusting AutoForce Digital with your privacy.

