PRIVACY POLICY · VERSION 2026-10-23
Your information, explained clearly.
This policy explains how Brighter Management handles personal information about account holders, business contacts, customers, drivers and technicians. Brighter Trading operates the service. A company using BM decides what information to put in its workspace and who can use it. We process that workspace information to supply and support the service.
What we collect and where it comes from
- Account and business details you provide: name, email, business name, address, ABN, phone, role and workspace preferences.
- Records entered or imported by your company: customer and site contacts, addresses, orders, quotes, invoices, payments recorded by staff, expenses, job notes, measurements, documents, photos, delivery signatures and recipient acknowledgements.
- Operational information: appointments, assigned drivers, vehicles, run progress, work completion times, changes, access and support activity, email delivery results and integration identifiers.
- Technical information: network/IP information used for security and rate limits, browser and app requests, session identifiers, device preferences and technical error logs used to operate and troubleshoot the service. Passwords and driver PINs are protected using hashes; we do not store them as readable passwords or PINs.
- Billing and integration details: subscription status, billing contacts and payment-provider references. Full payment-card numbers are handled by Stripe, not stored in BM. If authorised, Xero supplies organisation, contact, account, tax and invoice information.
We collect information directly from you, your company and its authorised users, connected services, and technical requests to our service. If required account information is not supplied, we may not be able to create or maintain your account. Please do not upload tax file numbers, card numbers, identity documents, health records or other sensitive material that is not needed for the business workflow.
Why we use it
We use information to create and secure accounts; run orders, deliveries and service work; generate and send requested business documents; provide billing and integrations; respond to support and privacy requests; investigate faults, fraud and misuse; and meet legal obligations. We do not sell your personal information or use workspace records for advertising audiences.
Who can receive it
Your authorised company users can access records within their roles. Drivers and technicians see work and notes allowed by their assignment. Company owners control invitations and permissions. Brighter administrators can access a workspace through a time-limited, recorded support session. Our infrastructure, email, payment and support providers process information needed to supply their services; see service providers and processing locations.
Documents are sent to customer and office addresses configured or selected by your company. Email attachments can be saved or forwarded by recipients. Larger documents may use a private, expiring link; anyone who receives that link can use it before expiry. An authorised Xero connection shares relevant contacts, invoice details and completion documents with the selected Xero organisation. We may disclose information when required by law, to protect rights or safety, or to investigate misuse.
Overseas processing
We use providers with international infrastructure and support teams. Information may be processed in Australia, the United States and other countries in those providers’ networks, including New Zealand for Xero-related processing. BM does not promise Australian-only storage or processing. The provider register explains what is verified and what depends on the provider or account configuration. Contact us before uploading records subject to a specific residency requirement.
Photos, signatures and location
Photos, signatures, addresses and timestamps may identify people or reveal where work occurred. Use them only for a legitimate business purpose and tell affected people how they will be used. The current standard driver app does not collect continuous GPS location; geolocation is disabled in its browser permissions policy. Directions links open an external maps service, whose own privacy terms apply. A custom tracking integration would require separate configuration and appropriate notices before use.
Essential messages and optional marketing
Verification, recovery, billing and workspace notices are essential service messages. Product tips and promotional announcements are optional: the signup box is not preselected. You can change your preference in your account or use a marketing email’s unsubscribe link without signing in. Opting out of marketing does not stop essential messages or documents your company requests. Campaigns do not use open-tracking pixels.
Brighter Management Driver for iPhone
The iPhone app uses the company ID, sign-in name and PIN provided by your company. The app does not save your PIN. It keeps a session credential in the iPhone Keychain for up to 12 hours and removes it locally when you sign out. You can optionally remember your company ID and sign-in name.
Unsent work, photos and signatures may remain in app storage while you complete or retry a save. Signing out warns before removing local drafts; completed company records remain on the server under the retention and deletion arrangements below. Camera or photo access is requested when you choose to add evidence. The app does not request device location or continuously track GPS. Opening directions sends the work destination to the selected external maps service. Temporary completion PDFs can be opened and shared using iOS; copies you share are outside the app’s control.
Storage, retention and deletion
We use access controls, protected connections, private file storage and recovery processes described on our security page. Some drafts, photos and preferences can remain in your browser’s local storage until saved, discarded or cleared. Use your own secured device and clear site data before handing it to someone else.
Records remain while needed to operate your workspace and support your obligations. Returning to Free does not delete them. Closure and permanent deletion are different; used workspaces and financial records need review before erasure. We retain information needed for legal, accounting, dispute or security purposes, and then delete or de-identify it when no longer required. Backups are separate copies and are not immediately erased when a live record is deleted. See retention and deletion details.
Access, corrections and complaints
Contact us to request access, correction, export or deletion of your information, or to make a privacy complaint. We will verify your identity and authority using only necessary information. For records controlled by a company using BM, contact that company first; we can help direct the request. Tell us the workspace and issue, but never send passwords, PINs or verification codes.
We will acknowledge the request and explain the next steps, including any lawful reason we cannot fulfil it. If you are dissatisfied, you can contact the Office of the Australian Information Commissioner about available complaint options. We will update this policy when our handling changes and provide notice of material changes.
Contact Brighter
Travis John Gollan trading as Brighter Trading (sole trader), ABN 40 993 718 319
C/O Kootingal Post Office, Kootingal NSW 2352, Australia
travis@brightertrading.com.au · 0435 458 275
Published 23 October 2026. This version.
Customer login