Gromex Pty Ltd (ABN 99 691 097 588) ("Gromex", "we", "us") respects your privacy. This policy explains how we handle your personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
What we collect
We collect personal information you provide directly:
- Account details: name, work email, company, phone (optional), password (stored as a hash).
- Content you upload: Documents, conditions, comments, file attachments. Some of this may include personal information about third parties you list (e.g. a project manager).
- Marketing form submissions: name, email, company, role and any message you send via our waitlist or careers forms.
We also collect information automatically when you use our products:
- IP address, device and browser type, pages visited, time stamps.
- How you use our products, such as the screens you visit, the buttons you select and recordings of your sessions. Text you type into fields is hidden in these recordings.
- Information from cookies and similar technologies.
How we use it
- To provide and operate Track and Tender, including your account, workspace and notifications.
- To respond to enquiries and process job applications.
- To send transactional email (sign-in, billing, condition reminders) and occasional product updates you can opt out of.
- To detect abuse and keep our services secure.
- To meet our legal obligations (tax, compliance, court orders).
We do not sell personal information.
Automated decisions
Gromex adopts AI technologies to automate and augment your workflows. These still require human review, they are not the sole basis for any decision that significantly affects you. We will update this policy if that changes.
Disclosure
We share personal information only with:
- Service providers who help us run the platform (cloud hosting, email delivery, payment processing, error monitoring, product analytics). They are contractually bound to use it only to provide their service to us.
- Other users in the same workspace, where you've shared content with them.
- Authorities, where required by Australian law.
Storage and security
We use AWS data centres in Australia and apply technical and organisational controls including encrypted transport (TLS 1.2+), encryption at rest, role-based access, and audit logging. No method of transmission over the internet is 100% secure; if we suspect a breach that's likely to result in serious harm, we will notify you and the OAIC in line with the Notifiable Data Breaches scheme.
Our product analytics provider stores usage data in the United States.
Access, correction and deletion
You can access or correct your information at any time from your account settings, or by emailing privacy@gromex.com.au. We respond to requests within 30 days. We retain account data for as long as the account is active and for a reasonable period afterwards (typically 7 years for billing records, then deletion or anonymisation).
Cookies
We use cookies needed to sign you in and operate your Gromex applications, and analytics cookies that help us understand how our products are used so we can improve them. We don't use third-party advertising cookies.
Complaints
If you think we've mishandled your information, contact privacy@gromex.com.au. If you're not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
We may update this policy from time to time. The "Last updated" date above shows the current version. Material changes will be flagged in the app.
Email: support@gromex.com.au