Privacy Policy and Notice

• Identity, contact, address, emergency-contact and employment information.
• Bank, payroll, tax, superannuation, leave and benefits information.
• Timecards, attendance, workplace location or GPS evidence, safety records and incidents.
• Licences, compliance records, identity and work-right documents, images, receipts and other uploaded files.
• Microsoft 365, Xero and other enabled integration data.
• AI prompts, extracted values, generated summaries and related usage metadata.
• Account, device, IP address, security, access and audit information.
• Onboarding, offboarding, archived and terminated-employee records.

The Employee Data Collection Notice gives employees and onboarding applicants more detail about these categories.

Information is used for employment administration, onboarding and offboarding, payroll, leave, attendance, safety, compliance, training, support, reporting, workplace operations, account security and related legal or record-keeping needs. myFORZA does not sell personal information or use it for third-party advertising.

Relevant information may be processed by providers that operate or support myFORZA, including Vercel, Neon Postgres, Cloudflare R2, Microsoft 365, Xero, Google Gemini, Anthropic, email/SMS services, map and weather services, and enabled logistics or business integrations. The information involved depends on the feature used.

Personal information may also be disclosed to authorised advisers, regulators or other parties where reasonably required for employment administration, safety, security, legal claims or other lawful business requirements. Provider processing locations and backup arrangements can vary and should be confirmed for the deployed service.

AI may help read documents and receipts, answer questions, draft content or summarise business records. Relevant prompts, files and context may be sent to Google Gemini or, for some features, Anthropic. AI can be inaccurate and does not make the final employment, payroll, safety, legal or compliance decision. Read the AI Use Notice.

Access is limited by role, tenant and business purpose. Selected highly sensitive values—such as tax file and bank-account numbers in supported workflows—are encrypted at the application layer. Other records rely on database, transport, account and private-storage controls. Uploaded files use authenticated or time-limited access, and privileged or security-relevant actions may be recorded for review.

No system can guarantee absolute security. Users must protect credentials, access only authorised information and report suspected loss, misuse or unauthorised access promptly.

Retention depends on the record and applicable employment, payroll, tax, safety, security, dispute and operational needs. Termination normally disables portal access and archives the employee record; it does not automatically erase connected history. See the Data Retention Notice.

You can correct some information directly or request a correction through myFORZA. For broader access, correction, complaint or deletion enquiries, contact HR through the Contact page. Some deletion requests may be limited where the information must continue to be retained.

Essential browser storage and service analytics are described in the Cookies and Analytics Notice. Material changes to this notice will receive a new version and may require a fresh acknowledgement in myFORZA.