Data & Security

Last updated: 23 September 2026

CHIPPIES Group Pty Ltd (“CHIPPIES”, “we”, “us” or “our”) recognises that customers rely on CHIPPIES to manage important company, site, job, inspection and project information.

This page provides an overview of how CHIPPIES approaches data ownership, access and security.

For information about how personal information is handled, please also read our Privacy Policy.

1. CUSTOMER DATA

Customers may use CHIPPIES to create, upload, store and manage information including:

Company information
Sites and jobs
Fire door and asset records
Inspections
Installation records
Measurements
Defects
Rectification records
Maintenance information
Photographs and videos
Drawings and plans
Documents
Reports
Communications
Other project information

As between CHIPPIES and the customer, customers retain their rights in Customer Data they provide to the platform.

CHIPPIES does not take ownership of a customer’s project data merely because that information is stored within CHIPPIES.

CHIPPIES may process Customer Data as reasonably necessary to provide, operate, secure, maintain and support the platform and as otherwise permitted under our agreements and applicable law.

2. CHIPPIES PLATFORM OWNERSHIP

Customer Data is separate from the technology used to operate CHIPPIES.

CHIPPIES Group Pty Ltd retains its rights in the CHIPPIES platform and associated intellectual property, including where applicable:

Software
Source code
Application design
Workflows
Platform architecture
Database structures
System logic
Interfaces
Branding
Documentation
Templates
Proprietary processes
Other CHIPPIES technology and intellectual property

Use of CHIPPIES does not transfer ownership of the CHIPPIES platform or its intellectual property to customers or users.

3. COMPANY SEPARATION

CHIPPIES is designed around company accounts.

Users are associated with the company or companies they are authorised to access.

Access to company information is intended to be limited according to authorised accounts, roles and permissions.

CHIPPIES is designed so that customers cannot access another customer’s private company information merely by using the platform.

4. USER ROLES & PERMISSIONS

CHIPPIES may provide different levels of access based on user roles.

Depending on the features available, roles may include:

Admin
Manager
Inspector
Viewer
Other authorised roles introduced by CHIPPIES

Different roles may have different permissions to:

View information
Create records
Edit records
Perform inspections
Access jobs
Communicate with team members
Generate reports
Manage users
Manage company settings

Customers are responsible for appropriately assigning and managing access within their organisation.

5. JOB ACCESS

Where job-assignment controls are available, users may be provided access only to jobs they are authorised to access.

Customers should regularly review:

Active users
User roles
Job assignments
Access permissions

particularly when a worker changes role or leaves an organisation.

6. ACCOUNT SECURITY

Users are responsible for maintaining the security of their CHIPPIES account.

Users should:

Use a strong and unique password
Keep login credentials confidential
Not share individual accounts
Protect devices used to access CHIPPIES
Sign out of shared devices
Promptly report suspected unauthorised access

CHIPPIES may use authentication and access controls designed to protect accounts and platform information.

7. INFRASTRUCTURE & HOSTING

CHIPPIES uses cloud-based technology to operate the platform.

Production infrastructure may include services provided by Amazon Web Services (AWS).

The precise infrastructure configuration, hosting region and services used may change as CHIPPIES develops.

Information about specific hosting locations will only be stated where the applicable production configuration has been confirmed.

8. DATA PROTECTION

CHIPPIES takes reasonable technical and organisational measures designed to protect information against:

Misuse
Interference
Loss
Unauthorised access
Unauthorised modification
Unauthorised disclosure

The specific controls used depend on the production architecture and services supporting CHIPPIES.

No internet-based service or electronic storage system can guarantee absolute security.

9. PHOTOS, DOCUMENTS & FILES

Files stored through CHIPPIES may include:

Inspection photographs
Defect evidence
Drawings
Plans
Reports
Videos
Documents
Other project attachments

Access to these files is intended to follow applicable account and permission controls.

Users should only upload information they are authorised to collect, use and store.

10. CHIPPIES CHAT

CHIPPIES may provide direct, group and job-based communication functionality.

Messages and attachments may form part of a company’s operational or project record.

Access to communications is subject to applicable account, job and user permissions.

Users should not use CHIPPIES Chat to transmit passwords, complete payment card details or unnecessary sensitive information.

11. OFFLINE USE & SYNCHRONISATION

Certain CHIPPIES functionality may operate where internet connectivity is unavailable or unreliable.

Information created while offline may be temporarily stored on a user’s device and queued for synchronisation when connectivity becomes available.

Users should allow synchronisation to complete before assuming locally created information has been successfully transferred to CHIPPIES’ online systems.

Users should take reasonable care to protect devices containing offline project information.

12. BACKUPS & RECOVERY

CHIPPIES may maintain backups as part of its operational, security and recovery processes.

Backup arrangements may change as the platform and infrastructure develop.

Backups are intended to assist with platform resilience and recovery and should not be treated as a substitute for records customers are independently required to retain.

13. PAYMENT SECURITY

Subscription payments may be processed using third-party payment providers, including Stripe.

Where payment information is entered directly into a third-party payment system, that provider processes the payment information in accordance with its own security and privacy practices.

CHIPPIES does not intend to store complete payment card details where payment details are processed directly by the payment provider.

Users should never send full payment card information through CHIPPIES Chat, support messages or email.

14. SERVICE PROVIDERS

CHIPPIES may rely on third-party providers for services including:

Hosting
Cloud storage
Payment processing
Application distribution
Authentication
Communications
Monitoring
Technical infrastructure
Support services

Third-party providers may process information where reasonably necessary to provide their services to CHIPPIES.

Further information is available in the Privacy Policy.

15. ADMINISTRATIVE ACCESS

Authorised CHIPPIES personnel or service providers may require limited access to systems or information for legitimate purposes including:

Technical support
Troubleshooting
Security
Maintenance
Investigating incidents
Resolving customer issues
Complying with legal obligations

Access should be limited to what is reasonably necessary for the relevant purpose.

16. SECURITY MONITORING

CHIPPIES may maintain technical and activity information to assist with:

Identifying technical problems
Protecting accounts
Investigating suspicious activity
Detecting misuse
Maintaining platform reliability
Responding to security incidents

The type and extent of monitoring may change as CHIPPIES develops.

17. SECURITY INCIDENTS

If CHIPPIES becomes aware of a suspected security incident, we may:

Investigate the incident
Take reasonable steps to contain it
Assess affected systems and information
Address identified vulnerabilities where appropriate
Restore affected services where necessary
Make notifications where required by law

Where applicable, CHIPPIES will respond to eligible data breaches in accordance with Australia’s Notifiable Data Breaches scheme.

18. REPORT A SECURITY ISSUE

If you believe you have identified:

Unauthorised account access
Exposed information
A security vulnerability
Suspicious account activity
Another security issue affecting CHIPPIES

please contact us promptly.

Security: [INSERT SECURITY/SUPPORT EMAIL]

Please provide enough information for CHIPPIES to investigate.

Do not publicly disclose sensitive details of a suspected security vulnerability before CHIPPIES has had a reasonable opportunity to investigate and address the matter.

19. CUSTOMER RESPONSIBILITIES

Customers are responsible for taking reasonable steps to:

Maintain accurate user access
Remove users who no longer require access
Assign appropriate permissions
Secure their devices
Protect account credentials
Comply with applicable privacy and confidentiality requirements
Obtain appropriate authority to upload information
Report suspected security incidents promptly

20. DATA RETENTION & DELETION

Information is retained and deleted in accordance with CHIPPIES’ applicable policies, contractual requirements and legal obligations.

Deleting an individual user account does not necessarily delete legitimate company or project records created by that user.

For further information, see:

Account & Data Deletion

Privacy Policy

21. CONTINUOUS IMPROVEMENT

Security requirements change as technology and the CHIPPIES platform develop.

CHIPPIES may update its infrastructure, policies, controls and security practices as the platform grows and new risks or requirements are identified.

This page may therefore be updated from time to time.

22. CONTACT

CHIPPIES Group Pty Ltd

Security: support@chippiesgroup.com.au

Support: support@chippiesgroup.com.au

Privacy: support@chippiesgroup.com.au

Website: chippiesgroup.com.au

Location: Sydney, NSW, Australia

ABN: 65 695 748 488

CHIPPIES Group Pty Ltd

BUILT BY CARPENTERS, FOR CARPENTERS.