Privacy Policy

CSTrak (“we”, “us”, “our”) is operated by Jacob Saltalamacchia, trading as CSTrak, based in Victoria, Australia. CSTrak is a software platform that helps construction companies track equipment, manage bookings, and coordinate across job sites. This policy explains what personal information we collect, how we use it, and your rights regarding it.

This policy applies to visitors to cstrak.com.au and to users of the CSTrak application. It is intended to comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

Account and profile information: name, email address, phone number, company name, ABN, and role, when you sign up or are invited to a CSTrak account.

Equipment and operational data: equipment records, site names and addresses, booking details, transfer history, damage reports, and any notes your team enters into the platform.

Photos and documents: images and files you upload — equipment photos, spec sheets, receipts, and warranty documents.

Payment information: we do not store your card details ourselves. Billing is handled by Stripe, our payment processor — see Section 4.

Usage data: log data, device and browser information, and activity within the app, collected automatically when you use CSTrak.

We use the information above to:

• Provide and operate the CSTrak platform for your company
• Process payments and manage your subscription
• Send transactional emails (booking confirmations, invites, alerts, password resets)
• Respond to support requests
• Improve and maintain the platform
• Comply with legal obligations

We do not sell your personal information to third parties.

We use the following third-party service providers to operate CSTrak. Each processes data on our behalf under their own terms:

Files (photos and documents) are stored privately and served via signed, time-limited URLs — they are not publicly accessible.

We may also disclose information if required by law, or to protect the rights, property, or safety of CSTrak, our users, or others.

Your data is stored with our infrastructure providers, which may process and store data outside Australia. By using CSTrak, you consent to this transfer, consistent with Australian Privacy Principle 8.

We use industry-standard measures to protect your data, including Row Level Security so that your company’s data is only accessible to your company’s users, and signed URLs for private file access. No system is completely secure, and we cannot guarantee absolute security.

We retain your data for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or reporting obligations. You can request deletion of your account and associated data — see Section 9.

We use cookies and similar technologies necessary for the platform to function (e.g. keeping you logged in) and, where enabled, analytics to understand how the site is used.

Under Australian privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data, subject to legal retention requirements
• Make a complaint about how we’ve handled your information

To exercise these rights, contact us at info@cstrak.com.au.

If you’re not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

CSTrak is a business tool and is not directed at or intended for use by children. We do not knowingly collect information from children.

We may update this policy from time to time. We’ll update the “Last updated” date above, and notify active account admins of material changes.

Questions about this policy, or about your data: info@cstrak.com.au.