Privacy policy

• Your account: your first name, last name and email address, and your password, which we store only in scrambled (hashed) form.
• Your SWMS: everything you enter, such as site addresses, principal contractors, tasks, hazards, controls, people's names and contact details, and signatures. We keep each finished SWMS so you can view, download, reuse and share it later.
• Payments: if you subscribe, Stripe handles your card details. We never see or store your card number. We keep your plan and subscription status.
• How you use the site: through Google Analytics and the Meta Pixel we collect pages visited, device and browser type, approximate location (city level), how you arrived (for example from a Google search or an ad), and actions such as signing up or downloading a SWMS.

• A sign-in cookie keeps you logged in.
• Google Analytics sets cookies to count visits and tell new visitors from returning ones.
• The Meta Pixel (Facebook and Instagram) sets cookies so Meta can measure our ads, for example whether someone who saw an ad later signed up or subscribed.
• While you fill in a SWMS, a copy is saved in your browser so you don't lose work without signal. It's removed once the SWMS is finished.

You can block or clear cookies in your browser settings, or install Google's Analytics opt-out add-on. To control how Meta uses this for ads, see your Facebook ad preferences. Blocking the sign-in cookie stops you signing in.

• To run your account and create, store and send you your SWMS.
• To take payments and manage your subscription.
• To send account emails, such as password resets.
• To understand how people find and use the site, so we can improve it.

We don't sell your personal information.

We use these services to run the app. Each one only gets what it needs for its job:

• Vercel hosts the website.
• Fly.io creates the PDF of your SWMS, on servers in Sydney.
• Our database provider stores your account and SWMS.
• Stripe processes payments.
• Google provides Google Analytics.
• Meta (Facebook and Instagram) provides the Meta Pixel, which measures our ads.
• Our email provider sends account emails.

Some of these companies are based overseas, mainly in the United States, and may store or process information outside Australia.

When you share a SWMS with your crew, the person you send the link to sees its site details and tasks. People's names, email addresses, phone numbers, dates and signatures are left out. Share links stop working after 7 days.

We may also disclose information if the law requires it.

Your information is sent over encrypted connections and is only available to you once you sign in.

If you close your account you can no longer sign in, but your SWMS records are kept. To have your account and records deleted, email contact@swms-au.com.

You can update your name in Settings.

If you're unhappy with how we've handled your information, email contact@swms-au.com and we'll reply within 30 days.

If we change this policy we'll update it here and change the date at the top.