MyHazMate Privacy Policy
Effective date: 18 December 2025
1) Who we are
MyHazMate is an app that helps small and medium businesses create and maintain a hazardous chemicals/materials register and manage Safety Data Sheets (SDS), including by using automated tools (including AI) to read product labels, locate SDS, and help keep SDS current.
MyHazMate is developed and owned by:
AI Experts Pty Ltd (ABN 84 684 700 892)
Victoria, Australia
Privacy contact: privacy@myhazmate.com.au
In this policy, “we”, “us”, “our” means AI Experts Pty Ltd and “you” means the person or business using MyHazMate.
2) Our commitment to privacy
We aim to handle personal information in an open and transparent way, consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
3) What information we collect
Depending on how you use MyHazMate, we may collect and hold:
A) Account and user information
- User names
- User email addresses
- Phone numbers (user and/or business)
- Other personal information you choose to provide (e.g., role/title, notes, preferences)
B) Business information
- Business name (including trading name)
- Business addresses (including site addresses)
- Business phone number
- Team member access/roles linked to your business account
C) Hazardous materials/register information (business operational data)
- What hazardous materials/chemicals you use, store, handle, and dispose of
- Register details (e.g., product name, location, quantity—where entered or derived from a label photo)
- SDS documents and SDS metadata (e.g., issue/revision dates, manufacturer/supplier details)
- We may generate insights such as a risk profile (e.g., flags for higher-risk substances or missing documentation)
D) Photos and attachments
- Photos you take/upload while adding products
- Files/images attached to support tickets or correspondence
E) Supplier email correspondence (for SDS retrieval)
- Copies of emails we send to suppliers/manufacturers and any replies we receive
- Related attachments (including SDS documents), message headers, and delivery metadata
These may include your business contact details and product details needed to request the correct SDS.
F) Technical, usage, and device information
- IP addresses
- Time/date of access and activity
- App usage events (feature usage, error logs, performance diagnostics)
- Device/app information (e.g., device type, OS version, app version—where available)
G) Subscriptions and billing information
- Subscription plan, status and entitlement information
- Renewal dates and purchase history references
- Invoice/receipt references where available
Note: We do not store full payment method details such as credit card numbers. Purchases are processed by the relevant app store and/or payment platform.
H) Support and communications
- Support tickets and troubleshooting details
- Emails/messages between you/your business and us
- Records of access/correction requests
4) How we collect information
We collect information:
- Directly from you (account setup, register entries, photos, support requests)
- Automatically (usage logs, IP address, device/app diagnostics)
- From third parties as needed to provide the service, including:
- Apple App Store / Google Play (purchase confirmations and subscription status)
- RevenueCat (subscription management/entitlements)
- Suppliers/manufacturers/SDS publishers (where SDS are provided or confirmed)
5) Why we collect, use, and disclose information
We collect/use/disclose information to:
- Provide and operate MyHazMate and business/team accounts
- Build and maintain hazardous materials registers
- Locate, store, and update SDS documents
- Use automated tools (including AI) to read labels and pre-fill data
- Contact suppliers/manufacturers to request SDS and store that correspondence
- Manage subscriptions, access, billing administration, and customer support
- Maintain security, prevent misuse/fraud, and improve reliability/performance
- Meet legal obligations
6) Payments, subscriptions and RevenueCat
MyHazMate uses in-app purchases/subscriptions. Purchases are processed by:
- Apple App Store (iOS) and/or Google Play (Android), and
- a subscription management platform (RevenueCat) to help manage subscription status and entitlements.
Apple provides customer billing support and receipts for App Store purchases. Apple Developer+1
RevenueCat may process and store purchase/receipt information and identifiers to provide subscription functionality, and it states it does not collect payment card details itself.
7) When we disclose information to others
We may disclose information:
- Within your business account to your authorised team users
- To our service providers (hosting, email delivery, analytics, support systems, identity/authentication, subscription management)
- To suppliers/manufacturers/SDS publishers to obtain or confirm SDS (including by email)
- To professional advisers (legal/accounting/insurance) as needed
- To regulators/law enforcement/emergency services where required or authorised by law
We do not sell personal information.
8) AI, automation, and changing providers
We use automated systems (including AI) to help deliver the service (for example: extracting text from label photos, matching products to SDS, checking for SDS updates, and generating register insights).
We may use different AI models and service providers over time. Where third-party services are used, your information (including photos and text) may be processed by those services for the purpose of providing MyHazMate.
9) Overseas disclosure
Some providers we use (such as cloud, analytics, email delivery, subscription management, and AI processing) may store or process data outside Australia. For example, RevenueCat states it stores data on AWS in the USA. RevenueCat
We take reasonable steps to ensure overseas recipients handle personal information in a way that is consistent with Australian privacy requirements.
10) Emergency QR code feature
If you generate a QR code for your register and display it on site, anyone with access to that QR code (or link) may be able to access the information made available via that feature. You are responsible for where and how it is displayed and who can access it.
11) SDS/register accuracy and important limitation
MyHazMate helps you manage registers and SDS more efficiently, but:
- SDS content comes from third parties (manufacturers, suppliers, SDS publishers) and may change
- AI/automation may occasionally misread labels or mismatch documents
- You should review and confirm register entries and SDS are correct for your specific product and workplace use
To the extent permitted by law, we do not accept responsibility for errors/omissions in your hazardous materials list/register or for SDS accuracy where content originates from third parties or user input.
12) Security
We take reasonable steps to protect information from misuse, interference, loss, unauthorised access, modification, or disclosure (e.g., access controls and security monitoring). No system is 100% secure.
13) Data breaches
If a breach of personal information is likely to result in serious harm, we will comply with the Notifiable Data Breaches (NDB) scheme, which may require notifying affected individuals and the OAIC.
14) How long we keep information
We keep information only as long as needed for the purposes in this policy, including providing the service and meeting legal/accounting/security obligations. We may delete or de-identify information when no longer required.
You may request deletion of your account and associated personal information. Some information may need to be retained where required or permitted by law (e.g., dispute, audit, tax, or security).
15) Accessing and correcting your information
You may request access to, or correction of, personal information we hold by emailing: privacy@myhazmate.com.au. We may need to verify your identity before actioning requests.
16) Complaints
If you have a complaint, contact privacy@myhazmate.com.au. We will investigate and respond within a reasonable timeframe. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC).
17) Changes to this policy
We may update this Privacy Policy from time to time. The latest version will be available in the app and/or on our website and will apply from the updated effective date.
Where required by law, or where we consider it appropriate, we may also notify you of material changes via the app or email. (Apple also requires developers to disclose privacy practices in App Store privacy details, including those of integrated third parties.)
