Privacy Policy

1. Scope and who handles information

This Privacy Policy explains how the operator of clearrivet.com and the legal ClearRivet supplier identified on a customer's Order Form handle personal information in connection with the public website, private simulator, live-machine trial, customer accounts, support, sales and related business interactions.

ClearRivet is a business-to-business service. Much of the information processed by the platform is machine or production information rather than personal information. Personal information may nevertheless be present in user accounts, operator names, comments, help requests, audit records and support communications.

2. Personal information we may collect

Business contacts and enquiries

We may collect name, work email, phone number, company, role, site, requested service, correspondence and information voluntarily provided in sales, simulator, trial or support requests.

Accounts and access

For authorised users we may process name, business email, organisation, site, role, permissions, authentication information, login/security records and multi-factor authentication status.

Operational information

The Services may process machine state, counts, downtime events and reasons, production orders, quality records, shift information, operator comments, checks, help requests and audit history configured by the customer. Some operational records may identify a user or operator and may therefore be personal information.

Technical information

We may process IP address, browser/device information, timestamps, application logs, error records, security events and diagnostic information where reasonably necessary to operate and secure the Services.

3. How we collect information

We collect information directly from individuals and customer administrators, through the website and Services, from connected customer equipment and systems as authorised by the customer, and from service providers that support authentication, security, communications or support.

4. Why we use information

• Provide, configure, maintain and support ClearRivet.
• Authenticate users and apply customer, site and role permissions.
• Receive authorised production information and generate customer-requested dashboards, reports and alerts.
• Respond to sales, simulator, trial and support requests.
• Detect abuse, investigate security events, troubleshoot errors and maintain reliability.
• Invoice customers and administer the commercial relationship.
• Comply with legal obligations, resolve disputes and enforce agreements.

Customer Data and AI. ClearRivet does not sell Customer Data and does not use Customer Data to train general-purpose AI models without the customer's express written agreement. If an AI-assisted feature processes Customer Data to answer a customer's request, that processing is for providing the feature, subject to the applicable agreement and provider safeguards.

5. Direct marketing

We may use business contact information to communicate about ClearRivet where permitted by law. Commercial electronic messages will identify the sender and provide a practical way to unsubscribe where required. We will honour valid unsubscribe requests and maintain suppression records so that unsubscribed addresses are not intentionally re-added to marketing lists.

6. When we disclose information

We do not sell personal information. We may disclose information to service providers that perform hosting, authentication, communications, security, email, support, analytics or AI functions for ClearRivet; professional advisers under confidentiality obligations; a purchaser or successor in a genuine corporate transaction subject to appropriate safeguards; or a regulator, court or other recipient where required or authorised by law.

Service providers are expected to use information only for authorised purposes and to apply appropriate security and confidentiality protections. Where ClearRivet is subject to the Australian Privacy Principles, cross-border disclosures will be handled in accordance with applicable requirements.

7. Location and international processing

Core ClearRivet production hosting is intended to be located in Australia unless a customer agreement states otherwise. Some providers supporting communications, support, security, analytics or AI may process personal information in other countries depending on the provider and configuration in use. Where it is practicable and required by applicable privacy law, ClearRivet will identify likely overseas recipient countries in this policy or a current subprocessor list.

8. Security

ClearRivet uses reasonable technical and organisational safeguards appropriate to the Services, including encrypted web transport, access controls, role and tenant scoping, logging, security maintenance and backup/recovery practices appropriate to the deployed environment. No online system can be guaranteed completely secure, but ClearRivet is designed to minimise unnecessary access and to respond to security incidents.

9. Data breaches

If ClearRivet becomes aware of a suspected data breach, it will investigate and take reasonable steps to contain and remediate it. Where the Notifiable Data Breaches scheme applies, ClearRivet will assess a suspected eligible data breach as required by law and notify the Office of the Australian Information Commissioner and affected individuals where notification is legally required.

10. Retention and deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, to provide the Services, maintain appropriate security and audit records, comply with law and resolve disputes. Demo and trial information may be deleted after access ends unless the customer converts to paid service or another retention period is agreed.

When personal information is no longer required and no law or legitimate retention requirement applies, ClearRivet will take reasonable steps to delete it, de-identify it, or place it beyond use in accordance with applicable law and normal backup cycles.

11. Cookies, local storage and analytics

The public ClearRivet website is designed without third-party behavioural advertising trackers. It may use essential browser storage for site functionality and may use privacy-respecting analytics if enabled. The ClearRivet application may use session, security and preference storage required for login and normal operation.

12. Access, correction and privacy complaints

Where applicable law provides access or correction rights, an individual may contact privacy@clearrivet.com. We may need to verify identity and authority before providing or changing information. Where the Australian Privacy Principles apply, we will handle eligible requests and privacy complaints in accordance with the Privacy Act 1988 (Cth).

If an Australian privacy complaint is not resolved, an individual may have the right to contact the Office of the Australian Information Commissioner.

13. Automated decision-making

ClearRivet's AI and analytics features are intended to support operational decisions, not to make legally significant decisions about individuals. If ClearRivet later arranges for a computer program to use personal information in a way that requires additional privacy-policy disclosure under applicable Australian law, this policy will be updated before or when that use becomes applicable.

14. Customer responsibilities

Customers control the personal information they choose to place in ClearRivet and are responsible for having appropriate notices, permissions and lawful bases for employee, operator and other personal information they provide. Customers should avoid placing unnecessary sensitive information in free-text production comments, order records or support fields.

15. Children

ClearRivet is a business service and is not directed to children. We do not knowingly solicit personal information from children through the website or Services.

16. Changes to this policy

We may update this Privacy Policy to reflect changes to the Services, providers, information-handling practices or law. Material changes will be identified by the updated date and, where appropriate, notified to active customers.

17. Contact

Privacy questions, requests and complaints may be sent to privacy@clearrivet.com. Before any paid service begins, the applicable Order Form or invoice will identify the contracting supplier and required business details.