Privacy Policy

1. Who we are and when this policy applies

TicketSys is a store-workflow service operated under the iTMate name in Australia. In this policy, “TicketSys”, “iTMate”, “we”, “us” and “our” refer to the operator of the TicketSys service.

This policy applies when a person uses TicketSys, visits a TicketSys page, receives a TicketSys customer update, submits a store-registration request, contacts support, or has their information entered into TicketSys by an authorised participating store.

Participating stores use TicketSys to manage jobs and communicate with their customers. Those stores remain responsible for ensuring that information they enter is collected lawfully, is accurate and is used appropriately. Customers do not need to create a TicketSys account to receive a secure job-tracking link or respond to a quote.

2. Information we collect and hold

The information handled depends on how TicketSys is used and may include:

• Store and staff information: names, work contact details, store number and address, business or franchise affiliation, role, access status, onboarding details and support communications.
• Customer and job information: customer name and mobile number, an email address entered by a customer to receive a requested service or warranty PDF, job or docket number, item and service details, repair notes, status updates, quotes, approvals or declines, collection records, customer messages and related timestamps.
• Photos and documents: docket photographs, item or repair photographs, generated service or warranty PDFs, and screenshots or attachments intentionally uploaded by an authorised user.
• Technical and security information: IP address, browser or app type, device and operating-system information, session identifiers, request timestamps, security events, diagnostic information and audit records showing which authorised user performed an action.
• Customer-link activity: secure-link access, quote responses, collection or reward actions, PDF download or email-delivery requests, and SMS preference choices.
• Website registration information: manager or franchisee name, email, mobile number, store details, preferred contact method and information included in an onboarding request.

TicketSys is not intended to collect payment-card details, government identifiers, health information or other sensitive information. Users should not enter that information unless it is genuinely necessary and authorised.

3. How information is collected

We collect information directly when a person enters it, uploads a photo, responds through a secure link, submits a form or contacts support. We also receive information from participating stores and their authorised staff when they create or update a job. Technical information is collected automatically when our systems receive a request, primarily for session operation, fraud prevention, rate limiting, troubleshooting and security.

The mobile app may request access to the camera or photo library only when a user chooses a feature that needs it. A selected image is transmitted only when the user submits or processes it.

TicketSys stores recent store-profile details on the device for convenience. After a successful sign-in, the app may save the store’s operational PIN in the device’s protected credential storage for biometric-protected profile unlock. On iOS, this is the device-only Keychain; on Android, encrypted storage uses the device Keystore. The PIN is not saved in ordinary app preferences or browser storage. Biometric matching is performed by the operating system; TicketSys does not receive or store your face, fingerprint or biometric template. You can still sign in with your store code and PIN if biometric access is unavailable or declined.

Optional store-location check: This check stays off until you allow it. From iOS build 1.0.2 (29), TicketSys asks for foreground location permission when you first open the app, before sign-in; it checks nearby authorised store areas only after you sign in. Your phone remembers your permission choice, subject to its settings and temporary permissions. Older app builds ask when you enable the in-app check. Your precise device coordinates are compared on the device; they are not sent to TicketSys or stored as a location history. The check stops when the app goes into the background. TicketSys does not request or collect motion and fitness data, and does not track your location in the background.

When this optional check is enabled but a usable device location is unavailable, TicketSys may use an approximate country, region or city inferred by Cloudflare from the network request. This network location can be inaccurate, especially with mobile networks or VPNs. Location is only a suggestion: it does not grant store access or automatically switch stores or sign you out. Declining location permission or turning the check off does not prevent sign-in, docket scanning, job work or customer messaging.

4. Why we use personal information

We use personal information to:

• provide and secure store accounts and staff access;
• create, update and locate repair, collection and special-job records;
• prepare and deliver customer SMS updates, secure tracking links and customer-requested service or warranty PDFs by email;
• record quote decisions, job progress, collections and customer preferences;
• process docket details, photos and attachments requested by an authorised user;
• provide support, investigate faults, maintain audit histories and prevent misuse;
• review store registrations, administer subscriptions and manage the service;
• improve reliability, accessibility and workflow design using aggregated or de-identified observations; and
• meet legal obligations and establish, exercise or defend legal claims.

We do not sell personal information and do not use TicketSys information for third-party behavioural advertising.

Optional offers and consent

If you separately opt in to promotional messages, the identified participating business may use your contact details, customer identifier and consent record to send its offers and administer related vouchers. We retain the consent choice, campaign delivery status and any redemption or unsubscribe action. A job contact alone does not give permission for marketing.

You can stop promotional SMS through the unsubscribe option on your promotion link or contact the store or TicketSys. This does not stop necessary job and collection updates or delete your existing job records. Any subscription-linked discount conditions are displayed with the offer. We do not share these details with data brokers or combine them with unrelated companies' data for advertising.

Security and record integrity

Customer names and mobile numbers may remain stored in the TicketSys database even when they are not being actively used for a message or current workflow. Maintaining this limited identifying information helps keep the correct customer associated with the correct job, prevent mistaken disclosure or collection, verify legitimate support, access or deletion requests, investigate suspected misuse or security incidents, resolve disputes and preserve an accountable audit trail.

Storage for these security and record-integrity purposes does not authorise unrelated marketing, data sale or unnecessary use. The retention and deletion safeguards described below continue to apply.

5. OCR, automation and staff review

When an authorised user chooses docket scanning, TicketSys may send a cropped or reduced copy of the selected image to OpenAI to extract fields such as a customer name, mobile number and job number. The extracted result is an assistance tool only. Store staff are expected to check the fields before using or sending them.

TicketSys does not use OCR or other automated processing to make decisions that significantly affect a person’s rights or interests. Quote, repair and collection decisions remain with the participating store and its authorised staff.

6. When information is disclosed

We disclose information only where reasonably necessary for the purposes above, including to:

• the participating store, relevant franchise group, authorised managers and staff;
• Cloudflare, which provides network protection, application hosting, databases, private object storage, infrastructure diagnostics and email infrastructure used by configured service paths;
• Resend, which sends and receives TicketSys email and processes sender and recipient addresses, subject lines, message contents, attachments and delivery events as needed for those email services;
• OpenAI, when an authorised user invokes optional OCR processing;
• Texto, which receives the destination mobile number and message content needed to deliver an SMS;
• Apple, Expo and related platform providers to the extent required to distribute, operate or diagnose the mobile application;
• professional advisers, insurers, auditors or contractors bound by confidentiality; and
• regulators, courts, law-enforcement bodies or another party where required or authorised by law.

We require service providers to handle information only for the contracted service, apply appropriate safeguards and provide protection consistent with this policy and applicable requirements. If the service or business is reorganised or transferred, information may be transferred with appropriate confidentiality and privacy protections.

7. Overseas processing

TicketSys is operated from Australia. Some service providers operate global infrastructure, so personal information may be processed or stored in Australia, the United States and other countries in which those providers maintain secure facilities or support operations. Privacy laws in another country may differ from Australian law.

We take reasonable steps when selecting and configuring providers, minimise the information sent for each task, restrict access and use contractual, technical and organisational safeguards appropriate to the information.

8. Cookies, sessions and analytics

TicketSys uses essential cookies or similar storage to maintain secure sign-in sessions, remember necessary preferences and protect the service. Server and infrastructure logs may retain request URLs, including in-app search parameters, IP-derived approximate country or region, browser and device information, errors and timing measurements for troubleshooting and security. Security records and performance measurements can be associated with a store or account; they are not necessarily anonymous. Infrastructure traffic summaries also help us understand service usage and reliability. This is separate from the optional on-device location check: declining that permission does not disable ordinary network security processing. We do not use third-party advertising cookies or track users across unrelated apps and websites for advertising.

9. Retention and deletion

We retain information only for as long as reasonably required to provide the service, complete and support store jobs, maintain security and audit records, resolve disputes, meet warranty or record-keeping needs, and comply with law. The appropriate period varies by record type and the participating store’s legitimate operational requirements.

An email address entered only to receive a requested watch service or warranty PDF is passed to the email service for delivery and is not stored in TicketSys. A one-way recipient hash and delivery event may be retained for security, audit and rate-limiting purposes.

When information is no longer required, we take reasonable steps to delete or de-identify it. Deletion from active systems may not immediately remove protected backup copies; backup data is isolated from ordinary use and expires through the normal backup cycle. We may retain a minimal record where required to document a request, maintain security or comply with law.

A person may request deletion or withdraw consent by contacting us. We will assess the request, verify identity where necessary, coordinate with the relevant store and explain any information that must be retained. SMS recipients can use the preference link supplied with an eligible message or contact the store.

10. Security

We use safeguards designed for the nature of the information, including encrypted HTTPS connections, restricted store access, role and session controls, private storage, secret management, audit trails, rate limits, security monitoring and backups. Access is limited to authorised people and providers that need it for their work.

No online service can guarantee absolute security. Users must protect their credentials, use authorised devices and promptly report suspected misuse. If a data breach occurs, we will investigate, contain it and provide notifications where required by applicable law.

11. Access, correction and privacy choices

You may ask to access personal information we hold about you, correct inaccurate or outdated information, or request deletion. Contact us with enough information to identify the relevant store or job, but do not email a PIN, password or unnecessary identity document.

We may need to verify your identity and consult the participating store before responding. We will respond within a reasonable period and will explain if a request cannot be completed in full. We do not ordinarily charge for making a request; if an access request requires substantial work, we will discuss any permitted charge first.

12. Children

TicketSys is a business operations service and is not directed to children. A store may enter limited contact or job information relating to a customer who is under 18 where lawful and appropriate for the service. We do not knowingly create staff accounts for children or use children’s information for marketing.

13. Complaints

If you believe TicketSys has mishandled personal information, contact us with a description of the issue. We will acknowledge the complaint, investigate it, coordinate with the relevant participating store where necessary and communicate the outcome. If you are not satisfied, you may be entitled to contact the Office of the Australian Information Commissioner.

15. Changes to this policy

We may update this policy when the service, providers or legal requirements change. The current version will remain available at this URL and will show its effective and last-updated dates. Material changes will be communicated through the service or another appropriate channel.