Privacy Policy

Introduction

Your privacy is important to us. This Privacy Policy explains what information we collect when you use SteadyOn, how we use it, and your rights regarding your personal data.

Urgnt Limited is based in New Zealand and complies with the New Zealand Privacy Act 2020. We also comply with applicable privacy laws in the other countries where our users are located, including the Australian Privacy Act 1988 (and the Australian Privacy Principles), the UK GDPR and Data Protection Act 2018, and the EU GDPR.

1. Information We Collect

1.1 Information You Give Us

When you create an account or use SteadyOn, you provide us with:

• Account information: Your name and email address
• Profile information: Optional details like your profile picture
• Organisational data: Hazards, incidents, actions, inspection records, training records, and documents you enter
• Communications: Messages you send us
• Payment information: If you subscribe to a paid plan (processed securely by our payment provider)

1.2 Information We Collect Automatically

When you use SteadyOn, we automatically collect:

• Usage data: How you interact with the platform (pages visited, features used, time spent)
• Device information: Browser type, operating system, device identifiers
• Log data: IP address, access times, error logs
• Cookies and similar technologies: Used to keep you signed in, remember your preferences, and understand how the platform is used. You can control cookies through your browser settings.

2. How We Use Your Information

We use your information to:

• Provide the service: Create and manage your account, save your data, and enable features
• Improve SteadyOn: Understand how people use the platform and make it better
• Communicate with you: Send important updates, respond to your questions, and share relevant information
• Process payments: Handle subscriptions and billing (through secure payment processors)
• Ensure security: Protect against fraud, abuse, and security threats
• Comply with legal obligations: Meet our legal and regulatory requirements

We will not sell your personal information to third parties. We only share your data as described in this policy or with your explicit consent.

3. How We Share Your Information

3.1 Within Your Organisation

Data you enter into SteadyOn is shared with other members of your organisation according to the roles and permissions configured by your organisation administrator.

3.2 Service Providers

We work with trusted service providers who help us run SteadyOn:

• Authentication: WorkOS (for secure user authentication and organisation management)
• Database and hosting: Convex and Vercel (hosting providers)
• Email: Resend (for sending service emails)

These providers are carefully selected and only have access to the information they need to perform their services. They are required to protect your data and use it only for the purposes we specify.

3.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we reasonably believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. International Data Transfers

SteadyOn is based in New Zealand, but we serve users around the world. Your information may be stored and processed in New Zealand, Australia, the United States, the United Kingdom, the European Union, or other countries where our service providers operate. When we transfer data internationally — including out of Australia, the UK, or the EU — we ensure appropriate safeguards are in place, such as standard contractual clauses (or the UK International Data Transfer Agreement), to protect your information in accordance with this Privacy Policy and applicable laws.

5. How Long We Keep Your Information

We keep your information for as long as you have an account with us. When you delete your account:

• Your personal information is permanently deleted with immediate effect
• Your organisation’s data is removed from the platform
• Some information may be retained for longer if required by law (such as payment records for tax purposes)

We may also keep aggregated, anonymised data for analytics purposes, which cannot be used to identify you.

6. Your Privacy Rights

You have several rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct your information if it’s inaccurate
• Deletion: Delete your account and personal information at any time
• Export: Download your data in a portable format
• Object: Object to certain uses of your information
• Withdraw consent: Where we rely on your consent, you can withdraw it at any time

To exercise these rights, you can use your account settings or contact us at nathan@steadyon.biz.

You also have the right to lodge a complaint with your local data protection authority. In New Zealand, you can contact the Office of the Privacy Commissioner; in Australia, the Office of the Australian Information Commissioner (OAIC); in the United Kingdom, the Information Commissioner’s Office (ICO); and in the European Union, your local data protection authority.

7. Security

We take security seriously and use industry-standard measures to protect your information:

• Encryption of data in transit and at rest
• Secure authentication through WorkOS
• Regular security assessments
• Limited access to personal data by our team
• Secure cloud infrastructure

While we strive to protect your information, no system is completely secure. Please use a strong, unique password and keep it confidential.

8. Children’s Privacy

SteadyOn is designed for use by adults in a workplace context. We don’t knowingly collect personal information from anyone under 18. If you believe we have information from a minor, please contact us and we will delete it promptly.

9. Marketing Communications

We may send you emails about SteadyOn features, updates, and tips. You can opt out of marketing emails at any time by clicking the unsubscribe link in any email or adjusting your account settings. We’ll still send you important service-related emails (like billing notifications) even if you opt out of marketing.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make significant changes, we’ll notify you by email or through the platform. The updated policy will show the new “Last Updated” date at the top.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

• Email: nathan@steadyon.biz
• Company: Urgnt Limited
• Location: New Zealand

We’ll do our best to respond to your inquiry within 30 days.

Note: This Privacy Policy is written in plain English to help you understand how we handle your information. We believe transparency is important, and we’re committed to protecting your privacy. If anything is unclear, please reach out — we’re here to help.