ABGC / ABG Comms privacy policy

What the service collects

Counter iPads report which revision of a notice they fetched and displayed, with device check-in times. This does not record who read a notice or whether anyone read it. Delivery evidence is deleted with its notice or device. The console keeps unfinished drafts in the browser tab for up to 24 hours, cleared on sign-out. Personal templates are saved to the signed-in account until deleted, so they are available across browsers. Import identifiers remain after deletion to prevent an older browser restoring a deleted template.

When a device is enrolled it sends its device name, hardware model, operating system version and app version. When device management supplies a hardware serial number through managed app configuration, the app also reports it for inventory in the console Devices tab; it is cleared with other device metadata under the retention schedule below. The app thereafter reports a periodic check-in time and a push notification token. Each check-in also reports the device's screen brightness, screen orientation, connection type (Wi-Fi, cellular or wired), and its language and time-zone settings, so that a counter screen that has gone dark, been re-mounted or dropped off the counter network can be identified without attending the site. The network address the check-in was made from is recorded, together with the country and the Cloudflare edge region that served it, so that a device reporting from somewhere other than its assigned counter can be detected. Manager records contain the manager's name, work email, assigned counters, sign-in and administrative activity. This is used solely to operate and secure the service.

Operational notices and history

Notices must not contain customer names, contact details, payment information, licence details, incident reports or other personal information. Expired and withdrawn notices are removed from the live notice table after 90 days. Their wording remains in restricted counter history for 12 months after publication. Wording is then removed automatically; security and administrative audit metadata is retained for 24 months unless the designated service owner explicitly clears routine activity earlier. Each clear is recorded; notice-related records remain protected from that action.

The owner-only bottom ticker is temporary operational state, separate from ordinary notices. Its text is excluded from message history, activity and delivery receipts. Fully replaced or cleared lines are deleted immediately; expired lines are deleted by the next minute sweep. Database recovery snapshots follow the hosting provider's backup retention.

Manager-authored notice content can include uploaded images or documents for display on enrolled screens. Attachments are operational content and must follow the same restriction on customer and other personal information.

What the app does not collect

No device location is requested or read: the app holds no location permission, and does not read GPS, Wi-Fi network names or nearby networks. The country and edge region described above are derived from the network address of the connection, not from the device. No analytics, advertising identifiers or tracking are collected, and nothing collected is used to monitor an individual member of staff.

Where data lives

Data is stored with Cloudflare and transmitted only over HTTPS. Apple processes push-notification tokens to wake enrolled iPads; push messages contain no notice text. Data is not sold or used for advertising.

Automatic deletion

Expired and used enrolment credentials are removed automatically. Thirty days after a device is revoked, its credentials, push token, network address and descriptive metadata are deleted or minimised. Removed manager profiles are deleted immediately; suspended profiles remain only while ABG keeps the access decision under review.

Publisher, hosting and international processing

Palingen publishes this app and this notice. Where your organisation uses the app for workplace operations, that organisation controls the operational records it enters and the staff who can access them. Contact your administrator about those records, or contact Palingen for help routing a request.

Hosting, security, email and platform providers process information needed to deliver their services. Cloudflare hosts this policy website and relevant Cloudflare services described above. Provider networks and subprocessors can process information outside Australia. Provider logs, recovery snapshots and backups can have separate retention periods. These policy pages do not send a visit to Palingen’s visitor-printer feed.

Questions, access, correction and complaints

Use the contact below for privacy questions, access or correction requests, deletion requests and complaints. Include the app name and enough detail to locate the relevant information, without passwords, enrolment codes or unnecessary customer information. Identity may need to be verified. We will consider the request and explain any limits, including records controlled by your organisation, legal retention, backups or copies already printed or shared.

If a concern is not resolved, you can contact the Office of the Australian Information Commissioner where applicable. This policy will be updated at this address when practices change.