RestoreAssist — Privacy Policy

1. Overview

RestoreAssist is a field operations application developed by Unite-Group NEXUS Pty Ltd (ABN 95 691 477 844) ("we", "our", "us") for use by verified disaster restoration contractors. This policy describes how RestoreAssist collects, uses, stores, and protects your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. Information Collected

RestoreAssist collects the following categories of data when you use the app:

• Account information: Name, email address, mobile number, and contractor licence / ABN provided during registration.
• Location data: Precise GPS location is collected while the app is in use to assist with job-site navigation and attendance verification. Location is not collected in the background.
• Photos and media: Images and videos captured within the app for job documentation purposes (before/after records, damage evidence).
• Job and work-order data: Details of assigned jobs, customer property addresses, scope notes, and completion records.
• Device information: Device model, operating system version, and app version for diagnostic purposes.
• Usage data: App activity logs used to improve reliability and detect errors.

3. How Information Is Used

• To authenticate and manage your contractor account
• To assign and track restoration job orders
• To enable real-time communication between contractors and coordinators
• To generate job completion reports shared with property owners and insurers
• To comply with regulatory and licensing obligations
• To improve the reliability and performance of the application

4. Information Sharing

Data collected in RestoreAssist is shared only as necessary to provide the service:

• Disaster Recovery platform: Job records and documentation are shared with the coordinating platform operated by Unite-Group NEXUS Pty Ltd.
• Property owners and insurers: Job completion reports (including photos) may be shared with the relevant property owner or their insurer.
• Infrastructure providers: Data is stored on Supabase (cloud database) and AWS S3-compatible storage, subject to their privacy and security commitments.

Data is never sold to third parties and is never used for advertising.

5. Data Retention

Account data is retained for the duration of your contractor engagement and for up to 7 years thereafter to satisfy Australian tax and regulatory obligations. Job documentation is retained for a minimum of 7 years. You may request deletion of your account at any time (see Section 7).

6. Security

All data in transit is encrypted via TLS 1.3. Data at rest is encrypted using AES-256. Access to production systems is restricted by role-based access controls and multi-factor authentication. We conduct regular security reviews.

7. Account Deletion

Contractors may request deletion of their RestoreAssist account and associated personal data at any time. Submit a deletion request at:

https://disasterrecovery.com.au/restoreassist/delete-account

Requests are processed within 30 days. Certain records may be retained for legal compliance as noted in Section 5.

8. Your Rights

Under the Australian Privacy Principles you have the right to:

• Access the personal information held about you
• Request correction of inaccurate information
• Request deletion of your account and data (subject to legal retention obligations)
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

9. Contact

For privacy enquiries, contact our Privacy Officer via the contact form at disasterrecovery.com.au/contact.

Unite-Group NEXUS Pty Ltd
ABN 95 691 477 844

10. Changes to This Policy

Material changes to this policy will be communicated via in-app notification at least 14 days before they take effect. Continued use of RestoreAssist following the effective date constitutes acceptance of the updated policy.