1. Introduction
Predelo Pty Ltd ("Predelo," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workforce optimization and scheduling platform.
By accessing or using Predelo's services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, company name, phone number, and job title when you create an account
- Customer Data: Workforce scheduling data, employee information (as permitted by your organization), shift patterns, labor costs, and operational metrics
- Payment Information: Billing details processed securely through third-party payment processors
- Communications: Information you provide when contacting our support team or participating in surveys
2.2 Automatically Collected Information
- Usage Data: Log files, IP addresses, browser type, pages visited, time spent on pages, and access times
- Device Information: Device type, operating system, unique device identifiers
- Cookies and Tracking: We use cookies and similar tracking technologies to track activity and hold certain information
2.3 Information from Third Parties
We integrate with Deputy and other workforce management systems. When you connect these integrations, we receive scheduling data, employee information, and operational metrics as authorized by your organization.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To provide, operate, and maintain our workforce optimization platform
- Forecasting & Analytics: To generate demand forecasts, labor recommendations, and business insights
- Platform Improvement: To understand usage patterns and improve our features and user experience
- Customer Support: To respond to your inquiries and provide technical assistance
- Communications: To send service updates, security alerts, and administrative messages
- Compliance: To comply with legal obligations and enforce our terms of service
- Machine Learning: To train and improve our AI models for better forecasting accuracy (using aggregated, de-identified data)
4. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: Data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption
- Access Controls: Role-based access control (RBAC) and multi-factor authentication (MFA) for platform access
- Infrastructure Security: Secure cloud infrastructure with isolated production environments
- Monitoring: Continuous security monitoring and audit logging
- Certifications: SOC2 Type 2 and ISO 27001:2022 certified
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but maintain enterprise-grade security controls.
5. Data Sharing and Disclosure
We may share your information in the following circumstances:
- With Your Consent: When you authorize us to share information with third-party integrations
- Service Providers: With trusted vendors who perform services on our behalf (cloud hosting, analytics, customer support)
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Legal Requirements: When required by law, court order, or to protect our rights and safety
- Aggregated Data: We may share de-identified, aggregated data for research or industry insights
We do NOT sell your personal information to third parties.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide services. After account termination, we retain data for a reasonable period to comply with legal obligations, resolve disputes, and enforce agreements. Customer data is typically retained for 90 days after account closure unless otherwise required.
7. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
- Access: Request access to the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Data Portability: Request a copy of your data in a machine-readable format
- Objection: Object to certain processing activities
- Opt-Out: Unsubscribe from marketing communications
To exercise these rights, please contact us at privacy@predelo.com
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and compliance with applicable data protection laws.
9. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will take steps to delete the information.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.
Regulatory Compliance
Predelo complies with applicable data protection regulations including:
- Australian Privacy Principles (APPs) under the Privacy Act 1988
- California Consumer Privacy Act (CCPA) for California residents
- General Data Protection Regulation (GDPR) for European users