Privacy Policy

Overview

Vector ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit getvector.com.au (our website) or use the Vector application at app.getvector.com.au (our app), collectively referred to as "the Services".

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in that Act. By using our Services, you consent to the practices described in this policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

1. Who This Policy Applies To

This policy applies to:

Visitors to our marketing website (getvector.com.au)
Registered users of the Vector app (contractors, project managers, subcontractors, and their teams)
Individuals whose information is submitted to Vector by an account holder (e.g. team members, approvers, subcontractors)
Prospective customers who contact us or sign up for a free trial

2. Information We Collect

2.1 Information You Provide Directly

When you create an account, use the app, or contact us, we may collect:

Account information: full name, email address, phone number, job title, company name, ABN, and password
Business information: company address, company registration details, industry type, and team size
Project data: project names, contract values, budget figures, variation details, purchase orders, progress claims, and associated documents
Financial data: invoice amounts, payment schedules, budget line items, and cost codes
Documents: files you upload including contracts, invoices, photos, and correspondence
Communications: messages you send to our support team or through in-app messaging
Payment information: billing address and payment method details (processed securely via our payment provider — we do not store full card numbers)

2.2 Information Collected Automatically

When you access our Services, we automatically collect certain technical information:

Device and browser data: IP address, browser type and version, operating system, device identifiers
Usage data: pages visited, features used, time spent, click patterns, and navigation paths
Log data: access logs, error logs, and API request logs
Cookies and similar technologies: session cookies, persistent cookies, and local storage (see Section 8)

2.3 Information from Third Parties

We may receive information about you from:

Other users who add you to their Vector account (e.g. as a team member or approval contact)
Payment processors (e.g. Stripe) regarding transaction status
Analytics and advertising partners
Publicly available sources such as the ABN Lookup register

2.4 Vector AI Data

Our Vector AI feature processes your project data — including variation descriptions, budget figures, claim histories, and uploaded documents — to generate insights, summaries, and recommendations. Data submitted to Vector AI is processed in accordance with this policy and is not used to train AI models for purposes outside your account without your explicit consent.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and improve the Vector app and website
Create and manage your account and subscription
Process transactions and send related billing communications
Enable collaboration features such as approval workflows and team notifications
Power Vector AI analysis and recommendations within your account
Send transactional emails (e.g. account verification, approval requests, payment receipts)
Send product updates, feature announcements, and promotional communications (you may opt out at any time)
Respond to support requests and provide customer service
Monitor usage patterns to detect abuse, fraud, or security threats
Comply with legal obligations and enforce our Terms of Service
Conduct analytics to understand how our Services are used and to improve them

4. Legal Basis for Processing

We process your personal information on the following grounds:

Contractual necessity: to provide you with the Services you have signed up for
Legitimate interests: to improve our Services, prevent fraud, and communicate about relevant features
Legal obligation: to comply with Australian laws including the Privacy Act 1988, tax laws, and applicable industry regulations
Consent: where you have provided explicit consent, such as for marketing communications

5. Disclosure of Your Information

5.1 Service Providers

We share information with trusted third-party service providers who assist us in operating the Services. These include:

Cloud infrastructure: AWS or equivalent (data hosting and storage)
Payment processing: Stripe (billing and subscription management)
Email delivery: transactional email providers (e.g. SendGrid, Postmark)
Analytics: usage analytics platforms (e.g. Mixpanel, PostHog)
AI processing: LLM providers (used for Vector AI features, subject to data processing agreements)
Customer support: helpdesk platforms
Error monitoring: application monitoring tools (e.g. Sentry)

All service providers are contractually required to handle your data in accordance with applicable privacy laws and are prohibited from using your data for their own purposes.

5.2 Within Your Organisation

If you are a team member added to a Vector account by an account owner, certain information (including your name, email, activity within the platform, and project data) is visible to the account owner and other authorised members of that account. Account owners are responsible for managing access permissions within their organisation.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

5.4 Legal Requirements

We may disclose your information where required by law, court order, or government authority, or where we believe disclosure is necessary to protect our legal rights, prevent fraud, or protect the safety of our users or the public.

5.5 No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Storage and Security

Your data is stored on secure servers, primarily located in Australia or other jurisdictions with adequate data protection standards. We implement industry-standard technical and organisational measures to protect your information, including:

Encryption in transit (TLS 1.2 or higher) and at rest (AES-256)
Role-based access controls limiting employee access to personal data
Regular security audits and vulnerability assessments
Multi-factor authentication for internal system access
Automated backups with point-in-time recovery

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. If you suspect a security breach affecting your account, please contact us immediately at support@getvector.com.au.

7. Data Retention

We retain your personal information for as long as your account is active, or as needed to provide you with the Services. Upon account termination:

Active account data is retained for 30 days post-cancellation to allow for account recovery
Project and financial data is retained for 7 years to comply with Australian tax and accounting obligations
Backup data may persist for up to 90 days after deletion requests are processed
Anonymised, aggregated data (from which you cannot be identified) may be retained indefinitely for analytics purposes

You may request earlier deletion of your data by contacting us at support@getvector.com.au, subject to our legal retention obligations.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Maintain your login session and remember your preferences
Understand how users navigate our website and app
Measure the effectiveness of our marketing campaigns
Provide personalised content and features

Types of cookies we use:

Strictly necessary: required for core functionality such as authentication and session management
Analytics: help us understand usage patterns (e.g. Google Analytics, PostHog)
Marketing: used to track conversions from advertising campaigns

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Services. For more information on managing cookies, visit www.oaic.gov.au.

9. Your Privacy Rights

Under the Australian Privacy Principles, you have the right to:

Access: request a copy of the personal information we hold about you
Correction: request that we correct inaccurate or outdated personal information
Deletion: request deletion of your personal information (subject to legal retention requirements)
Portability: request an export of your data in a machine-readable format
Opt-out: unsubscribe from marketing communications at any time via the unsubscribe link in any email or by contacting us
Complaint: lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au

To exercise any of these rights, contact us at support@getvector.com.au. We will respond to your request within 30 days.

10. Children's Privacy

Our Services are intended for business use by adults. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected personal information from a minor without appropriate consent, we will take steps to delete that information promptly.

11. International Data Transfers

Some of our service providers are located outside Australia. Where we transfer your personal information overseas, we take reasonable steps to ensure the recipient handles your data in a manner consistent with the Australian Privacy Principles, including through contractual data processing agreements. Key jurisdictions may include the United States and the European Union.

12. Third-Party Links

Our website and app may contain links to third-party websites or integrations. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice within the app at least 14 days before taking effect. Continued use of the Services after changes take effect constitutes your acceptance of the updated policy. We will update the "Last updated" date at the top of this page with each revision.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: support@getvector.com.au

We aim to respond to all privacy-related enquiries within 5 business days.