Privacy Policy
Effective: 14 May 2026
1. Who we are
RestoreAssist is a property restoration management platform operated by Unite-Group Nexus Pty Ltd ABN 95 691 477 844, trading as Restore Assist (“we”, “us”, “our”). This policy applies to the RestoreAssist web application, the RestoreAssist field iOS and Android application (com.restoreassist.app), and the RestoreAssist CET kiosk application (com.restoreassist.cet).
Contact: privacy@restoreassist.app
2. Information we collect
2.1 Account and business information
When you create a RestoreAssist account we collect your name, email address, business name, ABN, and business address. This information is used to provision your account, generate reports, and comply with applicable law.
2.2 Inspection and report data
We collect data you enter during property inspections including moisture readings, photographs, floor plans, scope of works, and property addresses. This data belongs to you and is used solely to generate inspection reports and to power the RestoreAssist platform features you use.
2.3 Photographs and files
Photographs uploaded to RestoreAssist are stored on Cloudinary’s content delivery network and are accessible only to authorised users of your account.
2.4 Video viewing data (CET app)
The RestoreAssist CET application records anonymous video viewing events including a random session identifier (no personally identifiable information), video completion percentage, and device type (iPad, Android tablet). This data is used for analytics purposes to help restoration companies understand which educational videos clients watch. No names, email addresses, or personal details are collected from clients using the CET app.
2.5 Usage and technical data
We collect standard web server logs including IP addresses, browser type, and pages visited. This information is used for security monitoring and service improvement.
3. How we use your information
- To provide and improve the RestoreAssist platform
- To generate inspection reports and scope-of-works documents
- To process payments via Stripe
- To communicate with you about your account and service updates
- To comply with our legal obligations under Australian law
- To provide analytics reports to restoration company administrators (CET video views)
We do not sell your personal information to third parties. We do not use your data to train AI models without your explicit consent.
4. Third-party services
RestoreAssist uses the following third-party services to deliver the platform:
- Cloudinary — Photo and video storage and delivery (cloudinary.com)
- Stripe — Payment processing (stripe.com)
- Anthropic / OpenAI / Google— Optional AI-powered report analysis features, used only when you supply your own API key (“Bring Your Own Key”) or when you explicitly invoke an AI feature. Report content is not retained by AI providers for training.
- ElevenLabs — Text-to-speech narration for CET educational videos
- Amazon Web Services — Video rendering infrastructure (Remotion Lambda)
- Vercel — Application hosting infrastructure
5. Data storage, security, and retention
Data is stored on servers located in Australia or the United States. We implement industry-standard security measures including encrypted connections (HTTPS), encrypted data at rest, and access controls. Passwords are never stored in plaintext.
Retention periods vary by data class to honour the longest applicable statute. A blanket 7-year policy was updated on 18 April 2026 to reflect obligations under state building-defect and dust-disease regimes that exceed that window.
| Data class | Minimum retention | Statutory authority |
|---|---|---|
| Tax invoices & BAS working papers | 7 years | Taxation Administration Act s.262A |
| Payroll & superannuation records | 7 years | Fair Work Act s.535 |
| General contractual records | 6 years | Competition and Consumer Act s.236 |
| QLD structural-defect records | 6 years 6 months from practical completion | QBCC Act s.67AQ |
| NSW building statutory warranty | 6 years (major) / 2 years (minor) | Home Building Act 1989 s.18E |
| VIC domestic building | 10 years | Building Act 1993 s.134 |
| Dust-disease exposure records (asbestos, silica) | Indefinite | Dust Diseases Act 1942 (NSW) & state analogues |
| WHS incident records | 5 years min (30+ years for exposure records) | WHS Act 2011 & state variants |
| General personal information | Until purpose satisfied or retention obligation expires | Privacy Act APP 11.2 |
On request (see section 7), we will destroy personal information once the longest applicable retention period has expired. Building and dust-disease records may outlive account closure.
6. Camera and device permissions
The RestoreAssist field app (com.restoreassist.app) and the CET app (com.restoreassist.cet) may request access to your device camera to photograph meters, damage, and site conditions. Camera access is used only when you explicitly initiate a photo capture within the app. Photos are not accessed, uploaded, or transmitted without your action.
The field app may request Bluetooth access to connect to moisture meters and environmental sensors. Bluetooth is used only to receive meter readings and is not used to track your location.
The field app may request precise and approximate location access while in use, exclusively to stamp GPS coordinates onto inspection photographs and moisture readings. This is required for the chain-of-custody manifest that backs each photo (C2PA-style: SHA-256 + UTC + GPS + device + user hash). Location data is not collected when no photo or reading is being captured and is never tracked in the background.
6a. Photo metadata (EXIF, GPS, device fingerprint)
Every photograph captured through the RestoreAssist field app is stored together with its EXIF header (camera model, capture timestamp, exposure settings) and, where you have granted location permission, the GPS coordinates at the moment of capture. This metadata is required by IICRC S500:2025 §10.5 for admissible chain-of-custody and is signed by a per-device Ed25519 key so the photograph cannot be silently altered after capture.
EXIF and GPS metadata are not shared with third parties beyond the storage providers listed in section 4. They remain accessible only to authorised users on your account.
6b. International data transfers
RestoreAssist operates on a mixed-geography stack. Personal information may be processed in the following jurisdictions:
- Australia — primary database (Supabase Postgres, AWS Sydney region) and file storage (Cloudinary ap-southeast-2)
- United States — application hosting (Vercel), payment processing (Stripe)
- Global — optional AI inference (Anthropic, OpenAI, Google), used only when you invoke an AI feature or supply your own API key
By using RestoreAssist you consent to your personal information being transferred to and processed in these jurisdictions. We take reasonable steps (vendor due-diligence, contractual data processing addenda, encryption in transit and at rest) to ensure your information receives an equivalent standard of protection to that required by Australian Privacy Principle 8.
6c. Children
RestoreAssist is an occupational tool for licenced restoration technicians, insurance assessors, and business operators. The service is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information to us, please contact privacy@restoreassist.app and we will delete the information.
6d. Account deletion
You can delete your RestoreAssist account at any time from Settings → Account → Delete account inside the app, or by emailing privacy@restoreassist.app with the subject line “Account deletion request”. Deletion requests submitted by email are completed within 30 days. Records that we are legally required to retain (see section 5) will be quarantined from active access and destroyed once their statutory retention period expires.
7. Your rights under Australian privacy law
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and associated data
- Make a complaint about how we handle your information
To exercise any of these rights, contact privacy@restoreassist.app. We will respond within 30 days.
8. Cookies
We use essential cookies to maintain your login session and application preferences. We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, though this may affect the functionality of the web application.
9. Changes to this policy
We may update this policy from time to time. We will notify you of material changes via email or a prominent notice in the application. Continued use of RestoreAssist after the effective date of a revised policy constitutes your acceptance of the changes.
10. Contact
For privacy enquiries or complaints: privacy@restoreassist.app
Restore Assist by Unite-Group Nexus Pty Ltd | Australia | ABN 95 691 477 844
Postal address: Unite-Group Nexus Pty Ltd, Brisbane, Queensland 4000, Australia