Privacy Policy

Who we are

Rivet Studio for Jobman is provided by Rivet Group (ABN 64 700 018 604), Hobart, Tasmania. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we store

• Your account: name, email, password hash and, if you set one up, your authenticator enrolment.
• Your organisation: business name, ABN, address and phone, and who belongs to it.
• Your Jobman connection: the OAuth tokens Jobman issues to us, encrypted at rest, and the Jobman organisation they belong to.
• Your connections: the name of each AI app or API key, the Jobman areas you allowed it, and when it was last used. Keys are stored as a hash only.
• A call log: for every Jobman API call made through the connector, the endpoint, result code, duration and time. Request and response data are not stored.

What passes through

When your assistant asks for Jobman data, we fetch it from Jobman and return it to the assistant. It isn't kept. Your assistant's provider (for example Anthropic or OpenAI) then handles it under your agreement with them. We don't use your data to train AI models and don't sell it.

Who we share with

Our hosting and email providers process data for us: Vercel (hosting, Sydney region), Supabase (database and sign-in, Sydney region), Resend (transactional email) and Cloudflare (DNS and bot protection). Jobman receives the API calls your assistant makes. We don't share your data with anyone else except as the law requires.

Retention and deletion

The call log is kept for 90 days. Disconnecting Jobman deletes the stored tokens immediately. Revoking a connection deletes its tokens immediately. Closing your organisation deletes everything within 30 days. You can ask us to delete your account at any time.

Security

Jobman tokens are encrypted at rest. Sign-in supports two-factor authentication. New AI connections start read-only and deletes are off unless you allow them. Every Jobman call is logged so you can see what your connections did.

Your rights and contact

You can access and correct your information in Settings, or email support@rivetstudio.co to access, correct or delete it, or to complain. If you're not satisfied, you can contact the Office of the Australian Information Commissioner.