Privacy

Arivoza helps businesses coordinate contractors and vendors visiting their sites. This page explains what we collect, why, who we share it with and how long we keep it. We only collect what's needed to coordinate visits.

Who is responsible for what

When a business uses Arivoza, that business decides whose details go into it (for example its vendors and the technicians who visit). For that information the business is responsible, and we handle it on its behalf. For the accounts of the business's own staff, and for running the service, we are responsible.

What we collect

• Staff of our customers: name, work email, the organisations and locations they belong to, their role, and sign-in sessions (including the IP address and browser recorded with a session).
• Vendors: business name, service type, dispatcher name, dispatch email and optional phone number.
• Technicians and other visitors: name, email, optional phone number, the company they're attending for, and which visits they're named on.
• Visits: location, purpose, times, references, notes, decisions and a history of changes (who changed what, and when).
• Email delivery: which emails we sent, to which address, and whether the provider reports them delivered or bounced.

We don't sell personal information, and we don't use it for advertising.

Cookies

We use one essential cookie to keep staff signed in. We don't use analytics, advertising or tracking cookies. Vendors and technicians don't get a cookie; their access comes from the private link they were sent.

Links sent by email

Vendor and technician links are long, random and expire. We store only a scrambled version (a hash) of each link, so we can't read them back. Anyone holding a link can use it, so please don't forward them. A technician's link stops working if they're replaced or the visit is cancelled.

Who we share it with

We use these service providers to run Arivoza:

• Vercel: hosting the application.
• Neon: the database.
• Cloudflare: domain and network services.
• Briksend: sending email.

During early access, data is stored in the United States. We plan to offer Australian storage before general release. We share information with others only if the law requires it.

How long we keep it

Each business chooses how long completed visit records are kept (the default is 180 days). Automatic deletion is being built during early access; until then, a business can ask us to delete its records. Staff accounts are kept while the person belongs to an organisation.

Your choices

You can ask to see, correct or delete information about you. If a business added you as a vendor or technician, it's usually quickest to ask that business; you can also contact us at hello@arivoza.com and we'll help. If you're unhappy with how we've handled your information, please tell us first. You can also contact the Office of the Australian Information Commissioner.

Contact

Questions about privacy: hello@arivoza.com