Privacy Policy

For most information in KTPV5 — operational records, sales and invoicing data, and any details about a business's own customers or members — KORTOAUS acts as a service provider (a processor) on behalf of the business that engaged us. That business decides what is collected and why, and is responsible as the controller. If you are a staff member, or a customer of one of these businesses, please direct privacy requests to that business in the first instance.

For the information we need to run the apps themselves — your KTPV5 account and the technical data your device sends us — KORTOAUS is the controller. This policy focuses on that information and explains the rest for transparency.

Account and identity information:

Some tasks let you take a photo as operational evidence — for example a photo of an invoice, a dispatch note, or goods being received. These images are captured for your employer's records; KORTOAUS does not use them for its own purposes. The camera is only used when you choose to take a photo. You can decline the camera permission, though some features will not work without it.

KTPV5 does not collect or track your device's GPS or live location. Delivery stops have latitude and longitude coordinates that are saved in advance and used only to plan routes with Google Maps — they are part of the business customer's own delivery data, which we process on its behalf, and are not processed in real time. Such locations are usually business premises and are not personal information; where one relates to an individual, we handle it as the business customer's data under our contract.

When a delivery is completed, the recipient may sign on screen. The signature is stored as a vector (SVG) path and an image, as proof of delivery, and is processed on behalf of the business.

When a business uses KTPV5, we process the operational data it enters or generates — items, stock, pricing, orders, invoices, deliveries and reports. Where the business uses POS or CRM features, this can include details about its own customers or members, such as a mobile number used for loyalty or one-time-password verification. We process this data on the business's behalf under our contract with it.

We use personal information to:

We do not use personal information for advertising, and we do not sell personal information.

We use a small number of trusted service providers to run KTPV5, and share personal information with them only as needed to provide the service:

KTPV5 data is hosted in Australia: our application servers are self-hosted and our database runs on Amazon Web Services (AWS), both in Sydney. Some service providers process data overseas — in particular Twilio (United States) for SMS verification — and global providers such as Google, Apple and Cloudflare may process data in other countries as part of their services. Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

How long information is kept depends on its type:

For exactly what is deleted and what is retained when a staff account is removed, see our Data Deletion page.

We protect personal information with measures including encryption of data in transit, secure storage of authentication tokens on your device, and role-based access controls. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

KTPV5 is a workplace tool. Its users are the staff of our business customers, who decide — as the controllers — who they authorise to use it, and are responsible for complying with Australian employment law, including minimum working-age requirements. KTPV5 is not directed at or intended for children, and we do not knowingly collect information from children.

Subject to the Australian Privacy Act, you may ask to access or correct the personal information we hold about you. For data we process on behalf of a business — your employer, or a business whose customer you are — please make your request to that business, and we will assist them as needed. For your KTPV5 account information, contact us using the details below.

If you have a privacy concern, please contact us first and we will try to resolve it. You may also complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy from time to time. We will post the updated version here and change the "last updated" date shown above.

For any privacy question, or to make a request, contact us at dev@kortoaus.com.au.