Privacy Policy

Effective Date: 6 June 2026

1.About Us

Nexshift is an Australian technology company that builds AI-powered operations platforms for compliance-heavy industries. We are committed to handling personal information responsibly under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2.Information We Collect

Account & Professional Information

Name, email address, organisation name, ABN, and subscription information.

Usage Data

Login timestamps, browser and device information, and error logs.

Contact Information

Information you provide when contacting us via email or contact forms.

If you use a specific Nexshift platform (such as Nexshift for HMR), that platform's own privacy policy applies to data entered within it.

3.How We Use Your Information

  • To provide and operate our platforms and services
  • To manage your account and subscription
  • To process payments
  • To send service notifications and support communications
  • To improve and develop our products
  • To comply with legal and regulatory obligations

We do not use your data for advertising. We do not sell your data.

4.Disclosure of Your Information

We only disclose information to:

  • Trusted infrastructure and service providers bound by confidentiality obligations
  • Payment processors (PCI-compliant; we do not store card details)
  • Law enforcement or courts where required by law or court order
  • Successors in the event of a business transfer, with prior notice to users

We never sell or rent your personal data to third parties.

5.Data Storage & Security

All data is stored exclusively in Australia (Sydney region). We do not transfer personal information outside Australia. We implement the following security measures:

  • Encryption in transit (TLS) and at rest (AES-256)
  • Role-based access controls
  • Regular security reviews and vulnerability assessments
  • Compliance with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988

6.Data Retention

Data is retained while your account is active. Upon account closure, data will be deleted or de-identified within 90 days, except where retention is required by law.

7.Your Rights (under Australian Privacy Principles)

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your data (subject to legal obligations)
  • Opt out of non-essential communications
  • Lodge a privacy complaint

To exercise these rights, contact us at info@nexshift.com.au.

8.Cookies & Analytics

We use cookies and similar technologies for session management, user preferences, and usage monitoring to improve our platforms. You can disable cookies via your browser settings, though some features may not function as expected.

9.Third-Party Services

We use the following categories of third-party services, with only the minimum data necessary shared:

  • Authentication providers (including Google OAuth)
  • Cloud infrastructure hosted in Sydney, Australia
  • Payment processing services

10.Children's Privacy

Nexshift platforms are intended for business users aged 18 and over. They are not directed at or intended for use by minors.

11.Changes to This Policy

We will notify users of material changes to this policy at least 14 days in advance via email or an in-platform notice. Continued use of the platform after changes take effect constitutes acceptance.

12.Contact & Complaints

For privacy enquiries or complaints, contact us at: info@nexshift.com.au

If your complaint is not resolved to your satisfaction, you may escalate to the Office of the Australian Information Commissioner (OAIC):