Privacy statement

This statement is issued by PSEC Project Services Pty Ltd (ABN 81 118 308 713) and Saiyu Construction Pty Ltd (ABN 38 613 364 784), referred to below as "we" and "us".

• CSIM (Construction Site Information Management), at onsite.saiyu.com.au. It runs site inductions, daily check-ins, toolbox talks, Safe Work Method Statement (SWMS) sign-offs, staff timesheets and site records for the construction sites we manage.
• The PSEC × SAIYU Hub, an internal staff portal. The Hub uses the same Google sign-in as CSIM, so section 4 applies to both applications.

Questions about this statement go to info@psecprojects.com.au or info@saiyu.com.au.

Workers (site labour inducted through CSIM). At induction: your name, mobile number, email address (optional), company, date of birth, a photo of you, your White Card number and a photo of the card, a second photo ID and its number, any additional licences you add (type, number, expiry date and a photo of the card), the name and phone number of your emergency contact, your signature, and the site conditions and declaration you agreed to, with the date and time. After induction: a 4-digit check-in PIN (stored only as a one-way hash that nobody can read back), your check-in and check-out times at each site, your SWMS acknowledgements with your signature, your toolbox talk and daily brief attendance, and your re-induction attendance.

Visitors. Your name, mobile number, company, the purpose of your visit, and your check-in and check-out times. If you join a toolbox talk, your attendance (name, and company, phone or email if given).

Staff of PSEC and Saiyu. Your account name and work email, role, and the sites you are assigned to. When you complete your own site induction, the same identity details as a worker. Your check-ins at sites, and your timesheets (hours, breaks, leave, the sites you worked at, and who approved them). If you sign in with Google, the details in section 4.

Everyone. When you check in with a PIN or submit a public form, we record your IP address and the phone number or email you entered, to limit repeated attempts. Changes to records are audit-logged with the before and after values and who made the change. Our hosting provider keeps standard access logs. CSIM sets sign-in cookies for staff only. We use no advertising or analytics cookies.

Emergency contact. When you give us another person's name and number, please make sure they know you have done so. We use it only in an emergency.

• To induct you onto a site and keep a verifiable record that you were briefed on its rules and that your identity was checked, as work health and safety (WHS) law requires of us.
• To know who is on each site at any moment, so a foreman can account for everyone in an emergency and the site can be cleared each evening.
• To record that you have acknowledged the SWMS that apply to your work and attended the day's briefings.
• To send the notifications the system relies on: induction submitted and approved, PIN resets, SWMS to sign, and for staff, timesheet changes and missing-hours reminders. We email you, or send an SMS when you gave us only a mobile number.
• To record and pay staff hours correctly, and to manage site assignments.
• To keep the system secure: signing you in, limiting repeated attempts, keeping an audit trail and diagnosing errors.

We do not use your information for marketing, and we do not sell it.

What Google gives us. "Sign in with company account" on the sign-in page is Google sign-in. Both applications request only the basic sign-in scopes, "email" and "profile", through Supabase Auth, our authentication provider. Google returns your name, email address, profile picture URL and Google account ID, and whether your email address is verified. Neither application asks for or receives access to your Gmail, Drive, Calendar or contacts.

Why. To identify you and sign you in, and to check that your account belongs to psecprojects.com.au or saiyu.com.au.

Refused accounts. A Google sign-in from any other domain is refused. If the attempt created a new account record, that record is deleted at once. CSIM offers email and password sign-in to everyone else.

Where it is stored. In Supabase (Postgres and Auth) in Sydney, Australia (AWS region ap-southeast-2). Both applications run on Cloudflare. Supabase Auth keeps the identity Google returned. CSIM copies only your name and email into your staff profile, next to your role and assigned sites. The Hub keeps a staff-directory row per person (name, email, company, position, role, Google account ID), used only inside the Hub.

Not sold. Google user data is not sold, not used for advertising, and not shared with anyone except the service providers that host the applications (section 5).

Removing access. You can remove either application's access in your Google Account under Security, then Your connections to third-party apps and services, and ask us to delete your data through the privacy contact. Your staff account itself is managed by your employer.

The use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Inside PSEC and Saiyu. What staff can see is set by their role. Administrators and construction managers see every site. Foremen and leading hands see the sites they are assigned to, including the induction records and ID photos of the workers inducted there, which is how they verify identity. Office staff can read every site's records but cannot change them. Other employees see their own records only. The on-site roster and the emergency muster list show the name of everyone currently checked in. A worker's employer, the company named at induction, has no access to CSIM.

Service providers. These companies process information on our behalf, only to provide their service to us.

• Supabase, our database, sign-in and file storage. It holds everything listed in section 2, hosted in Sydney, Australia.
• Cloudflare hosts both applications and runs CSIM's scheduled jobs. All traffic passes through Cloudflare's network, so it handles requests in transit and keeps standard access logs. Its network is global, and a request made from outside Australia may be handled at a data centre near you.
• Resend delivers our email. It receives your name, email address and the content of each email: induction and approval notices, the induction evidence copy (the site conditions, your declaration and the signature images), PIN resets, SWMS links, account and password emails, and timesheet notices. The induction evidence copy is also sent to our WHS mailbox, whs@saiyu.com.au.
• Twilio delivers SMS, used when you gave us no email address or an email could not be sent. It receives your mobile number and the message text.
• Sentry collects error reports so we can fix faults. It receives the error, the page or endpoint it happened on, and the staff role. Request bodies, headers, cookies and user identity are removed before anything is sent.
• Google, if you sign in with Google, knows that you signed in to the application.

Outside Australia. Resend, Twilio and Sentry may store or process the information they receive outside Australia, including in the United States. Cloudflare may handle requests outside Australia as described above. We do not otherwise send personal information overseas.

The law. We disclose personal information where the law requires it, for example to a work health and safety regulator investigating an incident.

• Induction records, check-ins, SWMS acknowledgements, toolbox talk and daily brief attendance, and timesheets are not deleted automatically. They are WHS and payroll records. We keep them while the site is active and for 5 years after it closes.
• Before a site is archived or deleted, we download a complete archive of its records and files for our own retention. Archiving then deletes that site's induction records, the workers inducted only at that site (except those with an acknowledged SWMS, which stay as history), their ID and licence photos and signatures, and toolbox talk attachments. Deleting a site removes its remaining records as well. Timesheets are never deleted with a site.
• An induction that is started but not signed within 7 days is deleted by a daily job, together with its uploads. Photos and signatures uploaded but never attached to a record are removed after 24 hours.
• The audit log is kept for 7 years. A weekly job removes older entries.
• A PIN reset link expires after 15 minutes. Expired links are removed daily.
• Check-in and public-form attempt records (IP address and the phone number or email entered) are kept for 30 days.
• Your staff profile and Google sign-in record are kept while your account exists. When an administrator deletes the account, both are deleted. The identity details you entered for your own site induction are a site record and follow the retention rule above, as do records that name you as the person who approved, checked in or changed something.

• Staff can see and update their own details under Profile in CSIM.
• Workers and visitors can ask the site foreman or the privacy contact to see or correct what we hold. Workers can reset their own check-in PIN from the check-in page.
• To ask for deletion, email info@psecprojects.com.au or info@saiyu.com.au. We delete what we are not required to keep. WHS and payroll records may have to be retained for the legal period, and we will tell you when that applies.

We respond to requests within 30 days.

If you think we have mishandled your information, email info@psecprojects.com.au or info@saiyu.com.au. We will acknowledge your complaint and aim to resolve it within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or call the OAIC on 1300 363 992.

We update this statement when what we collect, who we share it with or the providers we use change. The "Last updated" date at the top of this page shows the current version. We will let staff know about material changes.