Privacy Policy

Who we are

Ropr is job management software for rope access, height safety and facade maintenance businesses. It is run by The Trustee for Abseil.Pro Trust (ABN 99 422 738 977), trading as Ropr, PO Box 7757 East Brisbane QLD 4169. In this policy, "Ropr", "we" and "us" mean that operator.

This policy covers the Ropr website at ropr.app and the Ropr app. It explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Questions about it go to privacy@ropr.app.

What we collect

Enquiries. When you contact us, your name, email address, company, phone number (if you give it), team size and your message.
Account details. For each person who uses the app: name, email address, phone number, role, password (stored only as a secure hash) and, if they allow it, a device token for push notifications.
What each customer company enters. A company that uses Ropr enters its own records: clients and their contacts, site addresses, quotes, jobs, schedules, timesheets, daily reports, photos, inspection reports, certificates, safety documents and invoices. Some of this is personal information about the company's staff, clients and building residents. The company decides what goes in and is responsible for having the right to collect it. We hold and process it for them.
Connections. If a company connects Xero or Google Drive, the details needed to keep that connection working. The Google user data section below covers Google Drive in full.
Technical information. Server logs of requests to the app (such as IP address, browser and time), kept to run and secure the service.

We collect information from you directly, or from the company that gave you access to Ropr.

Why we collect it

To provide the app: sign you in, store and show your company's records, and send the emails and notifications you ask for.
To reply to enquiries and support requests.
To bill for subscriptions.
To keep the service secure, fix faults and work out how to improve it.
To meet our legal obligations.

We don't sell personal information, and we don't use the records a company enters for anything other than providing Ropr to that company.

Where your information is stored

The app's database and files are stored with Amazon Web Services in its Sydney region (ap-southeast-2), in Australia. Access is limited to the people who need it to run and support the service, and data is encrypted in transit.

We keep a company's records while it has a Ropr account. When an account closes, we delete its records within a reasonable time, unless the law requires us to keep them longer.

Service providers

We use these providers to run Ropr. Each receives only what it needs for its part.

Amazon Web Services: hosting, database and file storage (Sydney).
Xero: accounting, when a company connects it. Invoices, contacts and timesheets are sent to the company's own Xero organisation.
Google: Google Drive sync, when a company connects it (see below).
Firebase (Google): push notifications to your phone or browser.
Google Maps: looking up and showing job site addresses.
Cloudflare: hosting this website and visitor analytics that set no cookies.
Resend: sending email, including website enquiries.

Overseas disclosure

Our main data stays in Australia, but some providers above process information overseas. Xero, Google, Firebase, Google Maps, Cloudflare and Resend may handle it in the United States and other countries where they operate. We choose providers with strong privacy and security practices, and we take reasonable steps so they handle personal information in line with the Australian Privacy Principles.

Google user data

Ropr's Google Drive sync copies a company's job photos and uploaded documents into a Google Drive folder the company picks. This section explains exactly what Google data Ropr uses.

What we access

Ropr asks Google only for the drive.file permission. With it, Ropr can see and change only the files and folders Ropr itself created. It can't see, open or change anything else in your Drive.
We store the email address of the connected Google account, the folder you pick, the IDs of the files and folders Ropr creates, and the access tokens Google issues for the connection. Tokens are stored encrypted.

How we use it

Sync is one way. Ropr creates folders and copies files into the folder your company picked. It doesn't read files you add to that folder yourself.
We use Google user data only to provide and fix the Drive sync feature for your company.

What we never do

Google user data is never sold.
It is never used for advertising.
It is never used to train AI or machine learning models.
It is shared only as needed to provide the feature (with Amazon Web Services, which hosts Ropr), or when the law requires it.

Ropr's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting and removing your data

A company owner can disconnect Google Drive at any time in the app's Google Drive settings. Ropr then revokes its access at Google and deletes the stored tokens and folder details.
You can also remove Ropr from your Google account's third-party connections at myaccount.google.com/connections.
Files already copied to your Drive are yours and stay there. Ropr doesn't delete them.
After a disconnect we keep a note of which Google account the earlier copy was made with, so a later reconnect doesn't duplicate files. To have that and any other Google data removed, email privacy@ropr.app and we'll delete it within 30 days.

This website

ropr.app uses Cloudflare Web Analytics to count visits. It sets no cookies and doesn't track you across other sites, so there's no cookie banner. Enquiries sent through the website are emailed to our team so we can reply.

Access and correction

You can ask for the personal information we hold about you, and ask us to correct it if it's wrong, out of date or incomplete. Email privacy@ropr.app. We'll reply within 30 days. If your information sits in a customer company's records, we may refer you to that company, as it controls those records.

Complaints

If you think we've mishandled your personal information, email privacy@ropr.app with the details. We'll look into it and reply within 30 days.

If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

Changes to this policy

We'll update this page when how we handle personal information changes, and change the date at the top. For a significant change, we'll also tell customer companies by email.

The Trustee for Abseil.Pro Trust (ABN 99 422 738 977), trading as Ropr, PO Box 7757 East Brisbane QLD 4169. privacy@ropr.app