Privacy Policy
Robotyx (“Robotyx”, “we”, “us”), operated by Tryfecta Robotyx, provides a multi-tenant health, safety, environment (HSE) and operations platform available at robotyx.tryfecta.biz and related applications and domains (the “Service”). This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have.
1. Information we collect
Identity and sign-in (Google & Microsoft)
The Service uses single sign-on. When you sign in with your Google or Microsoft work account, we receive your name, email address and basic profile information (via the OpenID Connect email, profile and openid scopes) to authenticate you and create or match your account. We never receive or store your Google or Microsoft password.
Microsoft SharePoint (optional)
If your organisation enables document features, you may consent to a delegated Sites.Read.All permission so the Service can display links to your organisation’s existing SharePoint documents. We use this only to show and open those links; we do not copy, index or retain the contents of your files beyond the reference links you choose to surface.
Information you and your organisation enter
The Service stores the operational records you and your colleagues create — for example HSE records, rosters, sites, people directories, journeys and documents — within your organisation’s isolated tenant.
Technical information
We collect standard log and device information (such as browser type and timestamps) and store a session token in your browser’s local storage to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.
2. How we use your information
- To authenticate you and provide, maintain and secure the Service;
- To enforce multi-tenant access control so you only see your organisation’s data;
- To send operational notifications you or your administrators configure (for example daily HSE digests and alerts);
- To provide support, diagnose problems and improve reliability;
- To meet legal, security and audit obligations.
3. Google user data
We use data received from Google only to sign you in and identify your account. Robotyx’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data and do not use it for advertising.
4. How we share information
We do not sell your personal information. We share it only with service providers who process data on our behalf to run the Service, under confidentiality obligations:
- Supabase — authentication and database hosting (primary region: Sydney, Australia);
- Netlify and Vercel — application and serverless hosting;
- Mailgun — delivery of transactional and notification emails;
- Anthropic — AI assistance for content you explicitly submit to AI features (drafting, triage and summaries).
We may also disclose information where required by law, to protect our rights or users, or in connection with a corporate transaction, in each case consistent with this Policy.
5. Where your data is stored and how we protect it
Customer data is hosted primarily in Australia. We protect it with encryption in transit, encryption at rest, access controls, and strict tenant isolation so one organisation cannot access another’s data. No method of transmission or storage is completely secure, but we use industry-standard safeguards.
6. Data retention
We keep your information while your account and your organisation’s tenant are active, and as needed to provide the Service and meet legal obligations. When an account or organisation is closed, we delete or de-identify personal information within a reasonable period, unless retention is required by law.
7. Your rights
Subject to applicable law, you may request to access, correct or delete your personal information, or to restrict or object to certain uses, and you may withdraw consent. To make a request, contact us using the details below. You can also revoke the Service’s access to your Google or Microsoft account at any time from that provider’s account security settings.
8. Cookies & local storage
We use only the browser storage needed to run the Service: a short-lived session token and your interface preferences. We do not use advertising cookies, tracking pixels or third-party analytics that identify you.
9. Children
The Service is a workplace tool and is not directed to, or intended for use by, children.
10. Changes to this Policy
We may update this Policy from time to time. We will change the “Last updated” date above and, where appropriate, notify you within the Service.
11. Contact us
Questions about this Policy or your personal information can be sent to titto@tryfecta.biz.