Privacy Policy

Effective October 2026 · Version 1.0

1.About this policy

1. iPour is provided by iPour.App (“iPour”, “we”, “us”). This policy explains how we handle personal information when you use the iPour website and app at https://ipour.app (the “Service”).
2. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
3. This policy should be read together with our Terms and Conditions. Words defined there have the same meaning here.

2.What we collect

We don’t intentionally collect sensitive information, such as health information. Please don’t upload it to iPour.

3.How we collect it

1. From you: when you sign up, accept an invitation, fill in forms, upload files, or contact us.
2. From your company owner: when they invite you, we receive your name, email and job title.
3. From Stripe: subscription and payment status for Pro.
4. Automatically: technical information and cookies when you use the Service (see section 7).
5. Photos taken in the app: before upload, your browser usually shrinks camera photos and large images. This also removes hidden photo data (EXIF), including where the photo was taken. Other files, such as PDFs, are uploaded as they are.

4.How we use it

We use personal information to:

• create and manage accounts, companies and team access;
• provide the Service, including storing records, generating reports and exports, and showing your company’s information to its members;
• process Pro subscriptions and manage plan limits;
• send service emails, such as invitations, password resets, and notices about billing or changes to our terms;
• respond to feedback, questions and support requests;
• keep the Service secure, prevent misuse, and investigate problems;
• understand how the Service is used and how people find it, so we can improve it and measure our advertising;
• meet our legal obligations, such as tax and record-keeping.

We don’t sell personal information. We don’t use your company’s records for advertising.

5.Who we share it with

1. People in your company. Everything in a company account is visible to that company’s owner and team members. Team members can see each other’s names and job titles, but not their email addresses.
2. Service providers who help us run iPour, only as needed for that purpose:
   • Hosting provider: hosts the Service, its database and uploaded files;
   • Stripe: payment processing and the billing portal;
   • Google: analytics and advertising measurement (see section 7).
3. When the law requires, or to protect people’s safety or our legal rights.
4. If our business is sold or restructured, to the new owner, who must handle it in line with this policy.

6.Overseas disclosure

1. Some of our service providers store or process information outside Australia. These include Stripe and Google, which may process information in the United States and other countries. Our hosting provider stores the Service’s data in the United States, Australia and other jurisdictions from time to time.
2. We take reasonable steps to make sure these providers protect personal information in a way that is consistent with the Australian Privacy Principles.

7.Cookies and analytics

1. Google’s handling of this information is described at How Google uses information from sites that use its services.
2. You can opt out of Google Analytics with Google’s browser add-on, and change ad personalisation at Google’s ad settings. You can also block or delete cookies in your browser. Blocking the ipour_sid cookie will stop you signing in.

8.Information in your company’s records

1. Your company decides what goes into its records, such as names of site staff, drivers and suppliers on dockets and reports. For that information, we hold and process it on your company’s behalf to provide the Service.
2. Your company is responsible for collecting and sharing that information lawfully, including letting people know their information is recorded where required.
3. If you want to access or correct information about you in a company’s records, please contact that company first. We’ll help where we can.

9.How we protect it

• All traffic to iPour is encrypted (HTTPS).
• Passwords are stored only as secure hashes, and accounts lock temporarily after repeated failed sign-ins.
• Each company’s records, files and reports can only be opened by that company’s members. Uploaded files are stored outside the public website under random names.
• Access to our systems is limited to people who need it to run the Service.

No system is perfectly secure, but we take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, change or disclosure.

10.How long we keep it

1. We keep account and company information while the account is open.
2. When a company account is closed, we delete its records and files within 30 days, and they are removed from backups within 90 days.
3. When a team member is removed from a company, their login is deleted straight away. Their name may remain in activity history and in records the company created.
4. We keep billing and tax records for as long as Australian law requires, usually 5 years.
5. Security records, such as sign-in attempt counts, are kept only for short periods.

11.Access and correction

1. You can view and update your name and job title at any time in Settings → My profile. Company owners can update company details in Settings.
2. You can ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing daniel@ipour.app. We’ll respond within 30 days and won’t charge you for making the request.
3. If we refuse a request, we’ll explain why in writing, as the law allows.

12.Emails and marketing

1. We send service emails you need to use iPour, such as invitations, password resets, and notices about billing or our terms. These aren’t marketing.
2. We’ll only send you marketing emails if you’ve agreed to receive them, and every one will include an easy way to unsubscribe.

13.Anonymity

You can browse our public pages without telling us who you are. To use the app itself, we need your name and email so we can create and secure your account and connect you to your company.

14.Data breaches

If a data breach is likely to cause serious harm, we’ll notify the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

15.Questions and complaints

1. If you have a question or a complaint about how we’ve handled your personal information, email our privacy contact at daniel@ipour.app. We’ll acknowledge it within 7 days and aim to resolve it within 30 days.
2. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

16.Changes to this policy

We may update this policy, for example when we add features or service providers. We’ll show the new effective date at the top of this page. If a change significantly affects how we handle your information, we’ll email company owners before it takes effect.

17.Contact us

iPour.App trading as iPour
Privacy contact: Administrator · daniel@ipour.app