Privacy

We aim to handle personal information consistently with the Australian Privacy Principles. Whether the Privacy Act 1988 (Cth) applies to Substriva depends on its circumstances, for example the small business exemption; we do not claim a compliance status. Victorian councils remain bound by the Victorian Information Privacy Principles for information they hold and supply, and a pilot agreement may add further privacy and security obligations, which we follow where they apply.

• Visiting the public site: Substriva sets no advertising or analytics cookies and runs no third-party analytics. Cloudflare, our host, processes request information such as IP address and browser details to deliver the site and protect it from abuse.
• Signing in to a workspace: from your organisation’s sign-in we receive an identifier, its issuer and your email address. We use them to link you to your organisation and role, and to record who did what in the audit log.
• Workspace content: layers your organisation imports or connects, managed areas, records, reviews and publication decisions, and evidence details (titles, links, dates and file fingerprints; files themselves are not uploaded). This belongs to your organisation and is used only to provide the workspace.
• Corrections and community evidence: what you choose to send, including any contact details. Exact locations are kept private; any public location is generalised. Photos are kept privately as sent, which can include location metadata, so reviewers can check them; any copy that could be shown publicly has that metadata removed.

We do not collect information just because it might become useful later, and we do not sell personal information.

• Workspace content is visible only to members of your organisation, according to their role.
• A published record shows your organisation’s name, never the names or emails of the people who captured, reviewed or published it.
• Service providers: Cloudflare (hosting, database, storage, sign-in gateway and abuse protection). Your organisation’s identity provider handles your sign-in under its own terms.
• Information may be processed outside Australia on Cloudflare’s network. We do not currently guarantee Australian data residency.
• We disclose information if required by law.

• Workspace content is kept for the term of the pilot agreement, then returned by export and deleted as that agreement sets out.
• The audit log is append-only by design, so its entries are not edited; it records identifiers, not the content of your work.
• Private details sent with community evidence are intended to be erased after 90 days. Until that process is confirmed running, ask us to delete them and we will.
• You can ask to see or correct personal information we hold about you, or complain about how we handled it, by writing to hello@substriva.com.au. If you are not satisfied with our answer you can contact the Office of the Australian Information Commissioner, or for Victorian public-sector information the Office of the Victorian Information Commissioner.