Our data promise
All software we provide, and all customer data it handles, is hosted and stored in Australia, or for customers outside Australia, in the customer's own country or on the customer's own premises. We do not send your site data to any other country without your written agreement. Messages sent through this website are handled as explained in section 4.
1. Who we are
This website and our services are run by Vantory Technologies, referred to as "Vantory", "we", "us" or "our". Vantory is being registered as a company in Singapore, and we will add our full company details to this page once registration is complete. We supply AI software, robots, drones and related services to businesses in Australia and the other countries we work in.
We follow Singapore's Personal Data Protection Act 2012 (PDPA). Where we work with customers in other countries, we also follow their local privacy laws, including the Australian Privacy Principles in the Privacy Act 1988 (Cth), the New Zealand Privacy Act 2020, the UK GDPR and Data Protection Act 2018, and the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
2. What information we collect
We only collect information we need. This may include:
- Contact details you give us, such as your name, company, job title, email address, phone number and country.
- Details about your business needs that you share through our contact form, by email or on a call, such as the job you want to improve and how it is done today.
- Project data when we deliver a project for you. This can include video from cameras, robots or drones, sensor and machine data, and production records. Video may show people who work at or visit your site.
- Basic website data such as the pages visited and the type of browser used, kept by our website host for security and to keep the site running.
We do not ask for sensitive information such as health details or biometric data. Please do not include it in our contact form.
3. How we use your information
- To reply to your enquiry and book a call with you.
- To prepare proposals and deliver, support and improve the services you buy from us.
- To set up, train and run AI systems and robots for your site, only for the purposes agreed with you.
- To manage our business, such as billing and record keeping.
- To meet our legal obligations.
We do not sell your information, and we do not use your project data to train AI systems for other customers unless you agree in writing.
4. Where your data is kept
We keep personal information and customer data in these places only:
- Australian customers: data is hosted and stored in Australia.
- Customers in New Zealand, the United Kingdom or the United Arab Emirates: data is hosted and stored in that customer's own country.
- On your own premises: our AI systems can run fully on site, so video and production data never has to leave your building.
Some of the technology we use is developed with partners overseas. These partners do not receive your personal information or site data. If remote technical support from a partner is ever needed, we will ask for your written permission first, share only what is needed, and make sure the partner is bound to protect it to the standard required by Australian Privacy Principle 8 and any local law that applies to you.
Website enquiries: when you use our contact form, your message is passed to us by email through a form delivery service (Web3Forms). These providers may store it outside your country, for example in the United States. We only use well-known providers that protect information to the standard required by the PDPA and Australian Privacy Principle 8.
5. AI, cameras and automated decisions
- People stay in charge. Our AI systems are set up so that a person reviews any decision the AI is unsure about. We design them to support your staff, not to make decisions about individual workers.
- No facial recognition by default. We do not use facial recognition or other biometric identification. If a customer asks for it, we will only consider it where it is lawful, after a privacy impact assessment and with the consent required by law.
- Automated decisions. From 10 December 2026, businesses covered by the Privacy Act must explain in their privacy policy when a computer program makes, or substantially helps make, decisions that significantly affect individuals. Vantory does not use automated decision-making about the people who contact us. Where our systems are used by a customer, we will help that customer understand how the system makes decisions so they can meet this duty.
- Workplace cameras. Customers who use cameras or monitoring at work must follow local workplace surveillance and work health and safety laws, such as the Workplace Surveillance Act 2005 (NSW) and the Workplace Privacy Act 2011 (ACT). This usually means telling staff in advance. We provide notice templates and guidance to help.
- Responsible AI. We follow the Australian Government's Guidance for AI Adoption, published by the National AI Centre, in how we design, test and support our AI systems.
6. Who we share your information with
We only share your information when we need to, with:
- service providers who help us run our business, such as website hosting, email and accounting, under contracts that require them to protect it;
- installers or equipment suppliers working on your project, only with the details they need and with your knowledge;
- professional advisers, such as lawyers and accountants; and
- government bodies or others when the law requires it.
7. Keeping your information safe
We take reasonable steps to protect your information from misuse, loss, and unauthorised access or changes. These include encryption, access controls so only the people who need information can see it, secure on-site systems, and regular security reviews. No system is completely secure, but we work to keep risks low.
8. How long we keep your information
We keep enquiry details for up to two years if you do not become a customer, then delete them. Customer and project data is kept for as long as our contract says, and is returned or securely deleted when the contract ends, unless the law requires us to keep it longer.
9. Your rights
You can ask to see the personal information we hold about you and ask us to correct it. We will reply within 30 days. There is normally no charge.
Depending on where you live, you may have more rights. Under the UK GDPR, for example, you can also ask us to delete your information, limit how we use it, transfer it to someone else, or object to how we use it. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, contact us using the details below.
10. Data breaches
If a data breach is likely to cause serious harm, we will tell the people affected and the regulator as the law requires. In Singapore we will notify the Personal Data Protection Commission within 3 days of confirming that a breach must be reported. In Australia this is under the Notifiable Data Breaches scheme, run by the Office of the Australian Information Commissioner. In the UK we will tell the Information Commissioner's Office within 72 hours where required, and in New Zealand we will notify the Privacy Commissioner.
11. Marketing
We will only send you news or updates if you have agreed to receive them. Every message has a simple way to unsubscribe, as required by Singapore's Spam Control Act 2007, Australia's Spam Act 2003 and similar laws in other countries. We do not send marketing calls or messages to Singapore numbers on the Do Not Call Registry.
12. Cookies
This website does not use advertising or tracking cookies. It does not load fonts, analytics or other content from outside services, so visiting it does not share your details with third parties. If this changes, we will update this policy and ask for your consent where the law requires.
13. Questions and complaints
If you have a question or complaint about privacy, or want to use any of your rights, please contact our Data Protection Officer using the form on our Contact page. We will respond within 30 days. If you are not happy with our answer, you can contact the regulator in your country:
- Singapore: Personal Data Protection Commission (pdpc.gov.sg)
- Australia: Office of the Australian Information Commissioner (oaic.gov.au)
- New Zealand: Office of the Privacy Commissioner (privacy.org.nz)
- United Kingdom: Information Commissioner's Office (ico.org.uk)
- United Arab Emirates: UAE Data Office
14. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.