Privacy Policy

How we collect, use, store and protect your personal information.

Last updated: 19 October 2026

1. About this policy

One Bridge Technologies (ABN 32 900 422 332), based in Brisbane, Queensland (“we”, “us”, “our”), respects your privacy. This policy explains how we collect, hold, use and disclose personal information in connection with our website, our technology services and our software products, including Rental Proof. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. The personal information we collect

Depending on how you deal with us, we may collect:

  • Enquiries: your name, business name, email address, phone number, the service you are interested in, your budget and timeframe, and the details you give us about your project.
  • Purchases: your name, email address, business name (optional), order details and payment status. Card payments are made directly to Stripe; we do not receive or store your card number.
  • Licence activation: when you activate Rental Proof, AssetProof, Smart Timetable or StaffProof, the software sends us your purchase email address, your licence key, an anonymous computer identifier (a one-way code derived from your Windows installation), your computer's name and the software version. We use this to verify your licence and apply the activation limit. Smart Timetable also registers its free trial (sending the anonymous installation identifier, computer name, institution name and, if you give it, an email address) and checks its licence about once a day (sending the licence identifier, installation identifier and software version).
  • AI assistant chats: when you use the chat assistant on our website, we keep the messages you type and the replies, the page you started on, your browser details and a one-way code made from your IP address (not the address itself). If you choose to leave your details in the chat, we collect your name, email address and, if you give them, your phone number, business name and the service you are interested in. Chats are deleted automatically after 90 days unless they become part of an enquiry.
  • Free website check: when you use our website check, we keep the website address you enter, its results and a one-way code made from your IP address (not the address itself). If you ask for the full report, we also collect your email address and, if you give them, your name and phone number, and we keep these as an enquiry. Reports are deleted automatically after 90 days. To write your action plan, we send your results (not your contact details) to OpenAI.
  • AI assistant customers: if you sign up for our AI assistant service, we collect your name, email address, business name and website, a securely hashed version of your password (never the password itself), your business details, settings and FAQs, and your subscription and usage details. Card payments are made directly to Stripe; we receive only your subscription status and payment confirmations, not your card number.
  • Chats on our customers' websites: when you chat with an AI assistant that we provide for another business on its website, we process your messages, and any details you leave, on behalf of that business, and send your details to it. That business's own privacy policy also applies. These chats are deleted automatically after 90 days.
  • Technical information: your IP address and browser details when you submit a form, activate a licence or use our website, which we use to protect our systems against spam, fraud and misuse.
  • Advertising data (only if you accept advertising cookies): if you choose to accept advertising cookies, the Meta Pixel sends Meta (Facebook and Instagram) information about your visit, such as the pages you view, your browser and device details, a cookie identifier, and actions such as sending an enquiry or buying a licence. We do not send Meta your enquiry message, uploaded files or payment card details.
  • Correspondence: records of emails and other communications with you.

Rental Proof, AssetProof, Smart Timetable and StaffProof store your records (such as properties, assets, inspections, photographs, documents, courses, teachers, rooms, timetables, employee details, attendance, timesheets, leave and reports) on your own computer. We do not collect or have access to that information; StaffProof never sends employee, attendance, timesheet, leave or document information to us.

We do not intentionally collect sensitive information. Please do not include sensitive information (such as health information) or passwords in an enquiry. You can contact us without identifying yourself where that is practicable, but we need your contact details to respond to an enquiry or supply a licence.

3. How we collect personal information

We collect personal information directly from you — when you complete a form on this website, buy a licence, activate our software, email us or work with us on a project. We may also receive payment confirmation details from Stripe about purchases you make.

4. How we use personal information

We use personal information to:

  • respond to your enquiries and provide quotes and proposals;
  • answer questions through our website AI assistant, and review chats to improve its answers;
  • process purchases, issue and deliver licence keys and activate our software;
  • provide our AI assistant service to businesses, including account, trial, usage, billing and monthly report emails, and passing enquiries to the business a visitor contacted;
  • provide, support and improve our services and products;
  • manage our relationship with you, including administration and record keeping;
  • protect our website, systems and customers from fraud, spam and misuse; and
  • comply with our legal obligations, including taxation record-keeping requirements.

5. Direct marketing

We will only send you marketing messages with your consent, in accordance with the Spam Act 2003 (Cth). Every marketing email includes a way to unsubscribe, and you can ask us to stop at any time by emailing us. Service messages about an enquiry or purchase you have made are not marketing.

6. Who we disclose personal information to

We do not sell or rent personal information. We may disclose it to:

  • Stripe, which processes payments for our software and AI assistant subscriptions;
  • the business you contacted, when you leave your details with an AI assistant we provide on that business's website;
  • OpenAI, which generates the AI assistant's replies. Only your chat messages and the relevant website information are sent; details you enter in the chat's contact form are not. Under OpenAI's business terms, information sent through its API is not used to train its models;
  • Meta Platforms (Facebook and Instagram), only if you accept advertising cookies. Meta uses this information to measure and improve our advertising, and handles it under its own privacy policy;
  • our website hosting and email service providers, which store and transmit information on our behalf;
  • our professional advisers, such as accountants and lawyers; and
  • government authorities or other parties where required or authorised by law.

We require our service providers to handle personal information securely and only for the purposes of providing their services to us.

7. Overseas disclosure

Some of our service providers store or process information outside Australia. In particular, Stripe processes payment information in the United States and other countries where it operates, OpenAI processes AI assistant chat messages in the United States, Meta (if you accept advertising cookies) processes advertising data in the United States and other countries, and our website hosting provider's servers may be located outside Australia, including in the United States. Where we disclose personal information overseas, we take reasonable steps to ensure it is handled in a way that is consistent with the APPs.

8. Storage and security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Our website uses encrypted (HTTPS) connections, enquiries and orders are stored in a secured database that only authorised administrators can access, administrator accounts are protected by hashed passwords and sign-in limits, and licence activations are protected by digital signatures.

We keep personal information only for as long as it is needed for the purposes described in this policy or as required by law. Purchase and payment records are kept for at least five years to meet Australian tax record-keeping requirements. When information is no longer needed, we take reasonable steps to delete or de-identify it.

If a data breach is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.

9. Access and correction

You can ask for access to the personal information we hold about you, or ask us to correct it, by emailing us. We will respond within a reasonable time, usually within 30 days. If we refuse a request, we will explain why and how you can complain.

10. Cookies

Our website always uses essential cookies. We use Meta advertising cookies only if you accept them on our cookie banner, and you can change your choice at any time using Cookie settings in the footer. See our Cookie Policy for details.

11. Complaints

If you are concerned about how we have handled your personal information, please contact us first. We will investigate and respond in writing within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.

12. Changes to this policy

We may update this policy from time to time. The current version is always published on this page, with the date it was last updated.

13. Contact us

For privacy questions, access or correction requests, or complaints: