Privacy Policy
Effective 20 March 2026
1. Who We Are
This Privacy Policy applies to the Investigation Tool platform, which is owned and managed by HSES Industry Partners and operated by the legal entity listed below.
Legal Entity: AL & JP Pty Ltd. Trading As: HSES Industry Partners. ABN: 27 617 956 215. Location: Gidgegannup, Western Australia 6083, Australia. Contact: support@investigationtool.com.au.
We provide an online platform that allows users to visually map investigation information, including timelines, contributing factors, and findings.
2. What This Policy Covers
This Privacy Policy explains how we collect, use, store, and protect your information when you use our investigation tool service.
It applies to all users globally.
3. Information We Collect
When you create an account, we collect your name, email address, and password. Passwords are securely stored and encrypted. You must verify your email address before accessing the service.
You may choose to upload or create content within the platform, including investigation notes and written statements, images and uploaded files, reports or supporting documentation, and visual investigation mapping data such as timelines, factors, and findings. This content is entirely controlled by you.
All payments are processed securely via Stripe. We do not collect or store credit card details or billing card information. Stripe manages payment processing, subscription management, and billing details.
We may collect limited technical data required for system operation, such as login activity and basic usage data needed for functionality and performance. We do not use third-party analytics platforms such as Google Analytics.
4. Sensitive Information Disclaimer
This platform is not intended to store personal identifying information about individuals involved in incidents, health or injury information, or sensitive personal data. However, users may choose to enter such information at their own discretion.
By using the service, you acknowledge that you are responsible for the content you upload, you must ensure compliance with applicable privacy and workplace laws, and you should avoid entering sensitive personal data unless necessary and appropriately managed.
5. How We Use Your Information
We use your information strictly to provide and operate the service, authenticate users and manage accounts, enable investigation data creation and storage, process subscriptions and manage access, and send account-related communications.
We do not sell your data, use your data for advertising, or send marketing emails.
6. Emails & Communications
We send only essential service-related emails.
We do not send marketing communications.
- Account verification
- Password resets
- Subscription confirmations
- Payment status notifications
- Access expiry or renewal notices
7. Data Storage & Infrastructure
We use trusted third-party providers to operate the service.
Your data may be stored and processed in countries outside Australia. By using the service, you consent to this international data transfer.
- Database and storage: Supabase (hosted in Seoul, South Korea)
- Hosting and deployment: Vercel
- Code repository: GitHub
- Email delivery: Resend
- Payments: Stripe
8. Data Security
We implement reasonable technical and organisational measures to protect your data.
While we take security seriously, no system is completely immune to risk.
- Encrypted data transmission (HTTPS)
- Secure authentication processes
- Platform-level security provided by our infrastructure providers
9. Data Sharing
We do not sell, rent, or trade your data.
We only share data with our service providers listed in this policy strictly to operate the platform, process payments, and deliver system functionality. These providers are contractually required to handle data securely.
10. Data Retention & Deletion
You have full control over your data.
You may delete your account at any time. When you do, your account is permanently deleted, all associated data is permanently removed, and the action is immediate and cannot be reversed.
You may delete investigation records individually at any time. Deleted data is permanently removed from our system, is not recoverable, and we do not retain backup copies for user recovery purposes.
11. Cookies
We do not use advanced tracking or advertising cookies.
Only minimal cookies may be used where required for authentication and basic platform functionality.
12. Your Rights
Depending on your location, you may have rights to access your personal data, correct inaccurate information, delete your data, and restrict or object to processing.
Because our system is user-controlled, most of these rights can be exercised directly within the platform.
For additional requests, contact support@investigationtool.com.au.
13. International Users
This service is available globally.
By using the platform, you acknowledge that your data may be transferred to and processed in countries outside your own, including South Korea.
14. Children
This service is not intended for individuals under 18.
We do not knowingly collect data from children. If you believe a minor has created an account, please contact us and we will remove the data.
15. Changes To This Policy
We may update this Privacy Policy from time to time.
When we do, the updated version will be posted on this page and the Last Updated date will be revised.
16. Contact Us
For any privacy-related questions or requests:
Email: support@investigationtool.com.au