Privacy Policy

About this policy

Debret Pty Ltd provides Debret Chat as an authenticated workplace messaging service for authorised staff and business users. This policy explains the information handled when you use the mobile app and its connected Debret services.

Information we collect

• Account information: your name, work email address, user identifier, role and access permissions.
• Messages and content: chat messages, reactions, polls, GIF selections, and files, photos or videos you choose to share.
• Device information: notification permission status and an Apple or Google push-notification token when notifications are enabled.
• Technical information: security, access and diagnostic records needed to operate and protect the service, which may include IP address, timestamps, browser or device type, and error information.

Camera, microphone and photo-library access is used only when you choose to capture, attach or save chat media. You can change these permissions in your device settings.

How we use information

We use this information to authenticate users, deliver workplace messages and attachments, provide realtime updates and notifications, maintain business records, provide support, investigate faults, and protect Debret systems and users.

Debret Chat does not sell personal information and does not use app information for third-party advertising or cross-app tracking.

Service providers

Information may be processed by service providers that support the app, including Apple and Google for push notifications, Google for optional sign-in, Ably for realtime messaging, GIPHY when you choose GIF content, and Debret's hosting, database and file storage providers. Providers receive only the information needed to deliver their services and are subject to their own security and privacy obligations.

Storage, security and retention

Debret uses access controls, encrypted network connections and other reasonable safeguards to protect information. Information is retained for as long as required for workplace operations, safety, legal and record-keeping obligations, dispute resolution and system security, then deleted or de-identified when it is no longer required.

Your choices and requests

You may ask to access or correct personal information, request deletion where applicable, or raise a privacy concern. Some workplace records may need to be retained to meet legal or business obligations. You can disable notifications and media permissions at any time in your device settings.

Contact us