MineFlo

MineFlo Privacy Policy

Effective date: 2 June 2026 · Last updated: 3 June 2026

1. Who We Are

MineFlo is operated by Hodl Labs Pty Ltd (ABN 96 625 524 754), an Australian company based in Perth, Western Australia. When we say “MineFlo,” “we,” “us,” or “our,” we mean Hodl Labs Pty Ltd.

If you have any questions about this policy, you can reach us at support@mineflo.io.

2. Information We Collect

Information you give us

When you create an account or use MineFlo, you may provide:

• Account details (name, email, password, role)
• Company and site information
• Work order data (tasks, schedules, status updates)
• Crew and personnel information
• Team and organisational data
• Equipment registers and asset information
• Safety documents and permits
• Handover reports
• Activity logs including notes and photos (with GPS coordinates if embedded)
• Documents and file uploads

Information we collect automatically

• Device information (browser type, operating system)
• Usage data (features accessed, actions taken)
• Session data (login times, session duration)
• Cookies and session tokens — we use essential cookies to keep you signed in. We do not use advertising or analytics cookies.

Information we do NOT collect

• We do not track you across other websites or apps
• We do not sell your data to anyone
• We do not use ad networks or third-party advertising trackers
• We do not access your device camera, microphone, or contacts without your explicit consent

3. How We Use Your Information

We use the information we collect to:

• Manage your account and authenticate your identity
• Provide shutdown project management features — work orders, scheduling, crew management, team assignments, and resource tracking
• Generate reports and analytics for your organisation
• Store and manage documents you upload
• Send notifications related to your projects and tasks
• Process billing and subscription management
• Improve and develop the platform
• Maintain security and prevent abuse

We do not use your data for advertising purposes.

4. Sharing Your Information

We may share your information in the following circumstances:

• Within your organisation — other members of your company or site may see data you create as part of normal platform usage.
• Service providers — we use trusted third-party services to operate MineFlo, including Cloudflare (hosting, security, and CDN), Vercel (hosting), Turso (database), and Esri and Google (satellite map imagery tiles).
• Legal requirements — we may disclose information if required by law, regulation, or legal process.

We never sell your personal data to third parties.

5. Data Retention

We retain your data for as long as your subscription is active. After your subscription ends, we retain project data for 90 days to allow for reactivation, then remove it from our active systems within a further 30 days. Individual users can request personal account deletion at any time by contacting us. Company administrators can remove users from their organisation. Anonymised, aggregated data may be retained indefinitely.

6. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request that we delete your personal data.
• Portability — receive your data in a structured, commonly used format.
• Objection — object to certain types of processing.

To exercise any of these rights, email support@mineflo.io. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

7. Data Security

We take reasonable measures to protect your data, including:

• HTTPS/TLS encryption for all data in transit
• Secure cloud infrastructure
• Session-based authentication
• Role-based access control (RBAC)
• Password hashing

No system is 100% secure, and we cannot provide an absolute guarantee of security. If you believe your account has been compromised, please contact us immediately.

For comprehensive details on our security infrastructure, practices, and compliance roadmap, visit our Security page.

8. Data Breach Notification

In the event of a data breach that is likely to result in serious harm to affected individuals, we will:

• Notify affected users without unreasonable delay, and no later than 30 days after becoming aware of the breach
• Notify the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches (NDB) scheme
• Provide details of the breach, the types of information involved, and recommended steps you should take

Contact us immediately at support@mineflo.io if you suspect any unauthorised access to your account.

9. Multi-Tenancy and Data Isolation

MineFlo is a multi-tenant platform. Your organisation’s data is logically isolated from other organisations. Administrators within your organisation control who has access to what. There is no cross-company visibility of data.

10. Children’s Privacy

MineFlo is a workplace tool designed for adults. We do not knowingly collect data from anyone under 18 years of age. If we learn that we have collected personal data from a minor, we will take steps to delete it promptly.

11. International Users

MineFlo is operated from Australia. We use Cloudflare’s global network, which means your data may be processed in multiple regions. By using MineFlo, you consent to the transfer of your data to Australia and other locations where our service providers operate.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will notify you via the platform or by email. We encourage you to review this policy periodically.

13. Cookies and Tracking

MineFlo uses essential cookies only:

• Session cookies to keep you signed in
• Preference cookies to remember your display settings (e.g. active site, sidebar state)

We do not use advertising cookies, analytics trackers, or third-party tracking scripts. We do not participate in cross-site tracking. No cookie consent banner is required as we only use strictly necessary cookies.

14. Communications

We may send you emails related to your account, your projects, or platform updates. These are transactional and service-related — not marketing. You can manage notification preferences within the platform. We comply with the Australian Spam Act 2003.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Hodl Labs Pty Ltd
Perth, Western Australia
Email: support@mineflo.io

This policy is written in plain language on purpose — privacy shouldn’t need a lawyer to understand.