Privacy Policy
Effective 15 September 2026
OnePack ("the Service") is provided by ROC Advice ("we", "us"). This policy explains what personal information and business documents we handle, why, and what control you have over them. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
What we collect
- Account information — your name, email address, company name, and the password hash created when you register.
- Documents you upload — the HSE documents, policies, procedures, registers, certificates and questionnaires you add to your account, together with the text extracted from them so they can be searched and referenced.
- Content you create — answers, private notes, operator mappings, review dates and gap lists.
- Billing information — handled entirely by Stripe. We receive a subscription status and the last four digits of your card; we never see or store full card numbers.
- Basic usage data — page visits and referrers, collected in aggregate by our website host so we can see which pages are useful. This is not tied to your identity.
How we use it
We use your information to run the Service: to store and retrieve your documents, to draft and tailor answers, to build your submission packs, to keep your subscription current and to contact you about your account. We do not sell your information, and we do not use it for advertising.
Artificial intelligence
OnePack uses a third-party AI service to read your documents and draft answers. The relevant extracts of your documents are transmitted to that provider for processing and are returned as drafted text. Under our agreement with the provider, your content is not used to train their models. Drafted answers are suggestions: you are responsible for reviewing every answer before it is exported or submitted.
Microsoft SharePoint and OneDrive
If you connect SharePoint or OneDrive, you sign in with your own Microsoft account and grant OnePack permission to read files and sites on your behalf. We use that access only to list the folders you choose and to copy the files you select into your OnePack account, and to check whether a file you already imported has a newer version. We do not browse, index or copy anything you have not selected, and we do not retain your Microsoft credentials — only a short-lived access token held in your browser. You can revoke access at any time from your Microsoft account.
Where your data is held
Documents and account data are stored in a Supabase project hosted in Australia. Each account's data is isolated by row-level security so that one customer cannot see another's documents. Payments are processed by Stripe. Some of our service providers operate infrastructure or support functions outside Australia; where that occurs, we take reasonable steps to ensure the information is handled consistently with this policy.
Consultant accounts
Where a consultant holds an account covering several client companies, each client company's documents are kept in a separate workspace within that account. The consultant is responsible for having their client's authority to upload that client's documents.
Retention and deletion
We keep your data for as long as your account is active. You can delete individual documents at any time from within the Service. If you cancel, your data is retained for 60 days so you can reactivate, then deleted. You can ask us to delete your account and its contents immediately by emailing us.
Access, correction and complaints
You can ask what personal information we hold about you, ask us to correct it, or complain about how we have handled it, by emailing craig@rocadvice.com.au. We will respond within 30 days. If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
Security
Access is protected by authenticated sessions, data is encrypted in transit and at rest, and access is restricted by row-level security. No system is perfectly secure; if a data breach occurs that is likely to cause you serious harm, we will notify you and the Commissioner as required by the Notifiable Data Breaches scheme.
Changes
If we change this policy we will update the effective date above and, where the change is significant, tell you by email.
Terms of Service
Effective 15 September 2026
1. The agreement
These terms form an agreement between you (or the company you represent) and ROC Advice. By creating an account or using OnePack you accept them. If you are accepting on behalf of a company, you warrant that you are authorised to do so.
2. What the Service does
OnePack helps you organise HSE evidence, draft referenced answers to prequalification requirements, tailor those answers to a particular operator's questionnaire, and export a submission pack. It is a drafting and organising tool. It does not submit anything on your behalf, and it does not certify, approve or guarantee the adequacy of your HSE management system.
3. Your responsibilities
- You are responsible for the accuracy and truthfulness of everything you submit to an operator, including any answer drafted by OnePack that you choose to use.
- You must review every drafted answer before exporting or submitting it.
- You must have the right to upload the documents you upload, and authority from the relevant company where they are not your own.
- You must keep your login credentials secure and not share your account with people outside your organisation.
- You must not use the Service unlawfully, attempt to access another customer's data, or resell access without our written agreement.
4. Subscriptions and payment
Contractor accounts are $49 per month. Consultant accounts are $29 per client company per month, charged on the number of client companies in your account. Prices are in Australian dollars and include GST where applicable. Subscriptions renew monthly until cancelled. Payment is processed by Stripe under its own terms.
5. Free trial and export
You may use the Service without payment to upload documents, draft answers and see your gaps. A subscription is required to export a filled questionnaire or a submission pack. We may change the limits of the free tier, and will give notice before reducing them.
6. Cancellation and refunds
You can cancel at any time from your account. Cancellation takes effect at the end of the current billing period; we do not pro-rate part months. Where the Australian Consumer Law applies, nothing in these terms excludes rights or guarantees that cannot lawfully be excluded.
7. Availability
We aim to keep the Service available but do not guarantee uninterrupted access. We may suspend access for maintenance, and will give notice where practical.
8. Your data
Your documents and the content you create remain yours. You grant us the licence needed to store, process and display that content in order to provide the Service. We handle it as described in the Privacy Policy above.
9. Intellectual property
The Service itself — its software, design, requirement library and question mappings — remains the property of ROC Advice. You may not copy, reverse engineer or redistribute it.
10. Liability
To the extent permitted by law, our total liability arising out of or in connection with the Service is limited to the amount you paid us in the twelve months before the claim. We are not liable for indirect or consequential loss, including loss of a contract, a prequalification outcome, or business opportunity. Nothing in this clause limits liability that cannot be limited by law, including under the Australian Consumer Law.
11. Suspension and termination
We may suspend or close an account that breaches these terms, that is used unlawfully, or where payment fails and is not remedied. We will give notice and a chance to fix the problem where it is reasonable to do so.
12. Changes to these terms
We may update these terms. Where a change materially affects your rights we will give at least 30 days' notice by email, and continued use after that date means you accept the change.
13. Governing law
These terms are governed by the laws of Queensland, Australia, and the parties submit to the non-exclusive jurisdiction of its courts.
Contact
ROC Advice
Sunshine Coast, Queensland, Australia
craig@rocadvice.com.au
rocadvice.com.au