Privacy
Policy

Who we are

FOC Capture is a construction QA and compliance platform — a product of First Order Civil, operated by FOC Capture Pty Ltd, based in Victoria, Australia. This policy applies to the FOC Capture Android app, the web portal at app.foccapture.com.au, and the foccapture.com.au website.

We are bound by the Australian Privacy Act 1988 and the Australian Privacy Principles.

What we collect and why

Account information

• Your name and email address. Used to create and manage your account.
• Your organisation name. Used to identify your account in the platform.
• Your billing details. Processed securely by Stripe, never stored on our servers.

Google Drive or OneDrive access

When you connect your Google Drive or Microsoft OneDrive, FOC Capture requests permission to:

• Create a FOC Capture folder in your Drive.
• Read and write files within that folder only. This includes photos, project records, ITP completions, and reports.
• List files within the FOC Capture folder to display them in the app.

For Google Drive, this corresponds to the drive.file OAuth scope (https://www.googleapis.com/auth/drive.file) — the most restricted Drive scope, which permits access only to files our app has created or that you have explicitly opened with our app. We cannot see, read, or list any other files in your Drive.

We do not access any files outside the FOC Capture folder. We do not read your emails, calendar, contacts, or any other Drive files. The access token is stored encrypted in our database and used only to perform actions you initiate within the app.

FOC Capture's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Project and field data

• Photos captured in the field. Stored in your Drive, referenced in our database by file ID.
• Survey coordinates and asbuilt records. Stored in your Drive as part of your project record.
• ITP completions and form data. Stored in your Drive.
• Defect records and field notes. Stored in our database, referenced to your project.
• Variation records and approval history. Stored in our database with signed PDFs in your Drive.

Compliance documents

• Contractor and employee documents you upload. Stored in Supabase Storage, accessible only to your organisation.
• Licence and ticket details. Stored in our database, visible only to your organisation.

Usage data

• Crash reports and error logs. Collected via Sentry (EU region) to help us fix bugs. Contains device type, app version, and stack traces. No project data is included in crash reports.
• Basic session information. Used to maintain your login session.

Interest registration

• If you register interest via foccapture.com.au, we collect your email address to follow up. We do not add you to any marketing list without your explicit consent.

What we don't do

• We do not sell your data to any third party.
• We do not use your data for advertising or marketing purposes.
• We do not share your project data with other FOC Capture customers.
• We do not access your Google Drive or OneDrive beyond the FOC Capture folder.
• We do not store payment card details. Stripe handles all payment processing.
• We do not use your data to train AI models.
• We do not transfer your data outside Australia or the EU without your knowledge.

Where your data is stored

• Project files and photos. Your Google Drive or OneDrive, your account, your control.
• Account and project metadata. Supabase database, Sydney region, Australia.
• Compliance documents. Supabase Storage, Sydney region, Australia.
• Crash reports. Sentry, EU region, Frankfurt.
• Transactional emails. Sent via Resend using AWS SES infrastructure.
• Payment processing. Stripe, US-based, PCI DSS compliant.

Third-party services

FOC Capture uses the following third-party services to operate. Each has their own privacy policy.

• Google Drive / Microsoft OneDrive. File storage for your project data.
• Supabase. Database and authentication infrastructure.
• Stripe. Payment processing.
• Resend. Transactional email delivery.
• Sentry. Crash reporting and error monitoring.
• Vercel. Web portal hosting.
• Google Play Store. Android app distribution.

We do not use advertising networks, analytics platforms, or tracking pixels on any FOC Capture surface.

Data retention

• Your account data is retained for as long as your account is active.
• If you cancel your subscription, your account data is retained for 90 days before deletion, giving you time to export anything you need.
• Project files in your Drive are yours. Cancelling your FOC Capture subscription does not affect them.
• Crash reports are retained for 90 days in Sentry.
• You can request deletion of your account and all associated data at any time.

Your rights

Under the Australian Privacy Act you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Withdraw consent for data processing where consent was the basis for collection.
• Lodge a complaint with the Office of the Australian Information Commissioner if you believe your privacy rights have been breached.

To exercise any of these rights, contact us at admin@foccapture.com.au. We will respond within 30 days.

Cookies and tracking

The FOC Capture web portal uses session cookies only. Small files stored in your browser to keep you logged in. We do not use tracking cookies, advertising cookies, or any third-party analytics scripts.

The foccapture.com.au website does not use any cookies beyond what is required for basic functionality.

Changes to this policy

If we make material changes to this privacy policy we will notify active users by email and update the date at the top of this page. Continued use of FOC Capture after notification constitutes acceptance of the updated policy.