XVRYTHING — Privacy Policy
Version 1.1 | Effective Date: 18 June 2026
XVRYTHNG Pty Ltd (ACN 695 445 795 | ABN 37 695 445 795)
Website: xvrythng.com.au
1. Introduction
XVRYTHNG Pty Ltd ("XVRYTHNG", "we", "us", "our") operates the XVRYTHING mobile application ("App") as part of the XVRYTHNG solar CRM and project management platform.
This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you use the App on iOS or Android. It is prepared in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This Policy applies to:
1. Platform Users — employees, contractors, and authorised staff of tenant organisations who use the App
2. Customer-related data — personal information about end customers that Users enter or manage through the App on behalf of their organisation
The App is for business use by authorised users only. It is not intended for children under 18.
2. Information We Collect
2.1 Account and Profile Information
- Full name, email address, phone number
- Role, department, company/tenant association
- Profile photo (where provided)
- Employment details entered by your organisation
- Authentication credentials (passwords stored as one-way hashes)
- Optional app PIN and recovery details (where configured)
2.2 Workforce and Operational Data
- Attendance check-in/check-out times, notes, and location at time of check-in/out
- Expense and reimbursement records
- Tasks, calendar events, leave, and project assignments
- Internal messages and chat content
- Support ticket submissions and attachments
2.3 Customer and Project Data
Users may enter customer contact details, addresses, property/electrical/energy data (including NMI and meter numbers), solar system specifications, site inspection records, compliance documents, and project notes.
2.4 Photos, Videos, and Files
With your permission, the App may access your camera, photo library, microphone, and files to capture or attach media for leads, site inspections, jobs, expenses, and support requests.
2.5 Device and Technical Information
- Device type, OS, app version
- IP address and API access logs
- Push notification device token
- Secure session tokens stored on your device
- Error and diagnostic logs
We do not use the App for advertising, cross-app tracking, or behavioural profiling.
3. How We Collect Information
- Directly from you when you sign in, complete forms, upload media, check in, or send messages
- From your employer/administrator when they create or manage your account
- Automatically through App and server logs
- From third-party integrations configured by your organisation (e.g. lead sources)
4. How We Use Information
We use information to:
- Authenticate users and enforce role-based access
- Provide CRM, project management, attendance, messaging, and support features
- Verify attendance at job sites using location submitted at check-in/out
- Store and manage project, customer, and compliance records
- Send work-related push notifications (where enabled)
- Maintain security and comply with legal obligations
We do not sell personal information.
5. App Permissions
| Permission | Purpose |
|---|---|
| Location | Verify attendance check-in/out at job sites |
| Camera | Capture photos/videos for business records |
| Microphone | Record video with sound during inspections |
| Photo Library | Select/upload media; optionally save captured media |
| Notifications | Deliver work-related alerts (messages, assignments) |
You can revoke permissions in Settings at any time. Some features may not work without them.
6. Security
We use TLS/HTTPS encryption, secure on-device token storage, password hashing, role-based access controls, and tenant data isolation. No system is completely secure.
7. Disclosure
- Within your organisation — according to user roles and permissions
- Service providers — cloud hosting/storage (e.g. Cloudflare), push delivery (Firebase/APNs)
- Legal requirements — where required by law
- Cross-border processing — data may be processed outside Australia (including the US)
8. Data Retention
- User/workforce records: duration of engagement + up to 7 years where required
- Customer/project records: project lifecycle + regulatory retention periods
- Technical logs: typically up to 90 days
Contact us for specific retention questions.
9. Your Rights
You may request access or correction of your personal information by emailing liam@xvrythng.com.au. We aim to respond within 30 days.
Complaints may be lodged with the Office of the Australian Information Commissioner (OAIC):
www.oaic.gov.au | 1300 363 992
10. Push Notifications
If enabled, we store a device push token linked to your account to deliver work-related alerts. You can disable notifications in device settings at any time.
11. Changes to This Policy
We may update this Policy and will notify users of material changes via the App or email. Continued use after the effective date constitutes acceptance.
12. Contact Us
XVRYTHNG Pty Ltd
ACN: 695 445 795 | ABN: 37 695 445 795
Email: liam@xvrythng.com.au
Website: xvrythng.com.au
Effective Date: 18 June 2026