Privacy
How Hermanas Engineering handles your information when you use Hermanas Tools. Last updated [date].
Who we are
Hermanas Engineering [Pty Ltd, ABN xx xxx xxx xxx] of [address], Western Australia ("Hermanas", "we"). We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and we follow them whether or not the Act requires it of a business our size.
What we collect
- Sign-in details: your name and work email address, and the organisation (email domain) you belong to. We receive these from the identity provider you sign in with (Microsoft, Google, or an emailed link). We never see or store your password.
- The files you load: schedules (P6 .xer, P6 XML, MS Project XML, Excel), registers and workbooks you choose to drop into the tools, and the results the tools build from them.
- Usage records: when you sign in, which tool you used, and errors — so we can keep the service running and fix faults. These records carry your email and workspace code, never the contents of your files.
We do not collect anything from your device beyond what the page needs to work. We use no advertising cookies and no third-party analytics. A session cookie keeps you signed in.
Why we collect it
- to give you your own workspace and let the colleagues you invite share it;
- to read your files and draw the results — that is the service;
- to contact you about the service you are using (a fault, a change, the end of a trial);
- to keep the service secure and reliable.
We do not use your information or your files for marketing to third parties, we do not sell or share them, and we do not use them to train any model or product.
Where it is stored
On Microsoft Azure in the Australia East region (Sydney). Files and results are encrypted at rest and in transit. Each organisation has its own workspace; only people signed in to that workspace can see its files. Hermanas staff access a workspace only to fix a fault you have reported, or when the law requires it, and that access is logged.
How long we keep it
- Trial workspaces are deleted automatically, files and all, 30 days after the last sign-in by anyone in the workspace. We send one reminder before that.
- Licensed workspaces are kept for the term of the licence and deleted [90] days after it ends, unless you ask for your data back first — we return it as the original files plus an export.
- Usage records are kept for [12] months.
- Backups are kept for up to [35] days and are deleted on the same schedule.
Asking for deletion, access or correction
Email [privacy@hermanaseng.com] from the address you signed in with, or use "Delete my workspace" under Settings. We delete a trial workspace within [5] business days of the request and confirm by email. You may ask at any time what we hold about you and have it corrected.
Who else sees it
Only the service providers we need to run the tools, each under contract and each in Australia unless stated: Microsoft (Azure hosting, Australia East), [email provider] for service emails. None of them may use your files for their own purposes.
If something goes wrong
If we become aware of a data breach that is likely to cause you serious harm we will tell you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires. Complaints: email the address above; if you are not satisfied with our response you may complain to the OAIC at oaic.gov.au.
Changes
We will post changes here with a new date and, for anything material, tell signed-in users on their next sign-in.