Privacy Policy

Lede Technologies Pty Ltd (ACN 698 337 718)

Last updated: 13 June 2026

Who we are

Lede Technologies Pty Ltd (ACN 698 337 718) (Lede, we, us) is an Australian registered company. We build operational intelligence tools for workforce-facing industries, beginning with Handover — a shift handover platform for teams in aged care, cleaning, security, facilities, and hospitality.

We are committed to handling personal information responsibly, transparently, and in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Contact us at: privacy@workwithlede.com

Who this policy covers

This policy covers two types of people who interact with Lede:

Operators — businesses and organisations that create a Lede account and deploy Handover for their workforce. Operators are our direct customers and agree to our Terms of Service on sign-up.

Workers — the employees and contractors who use the Handover app to record shift notes and receive briefings. Workers use Handover because their employer has deployed it. Workers do not need a direct account with Lede.

Managers and site owners are Workers with elevated access permissions within the Lede platform. This policy applies to them in their capacity as Workers, unless otherwise specified.

What we collect

From operators

• Business name, ABN, and contact details of the account holder
• Name and email address of the account administrator
• Site names and configuration details provided to set up Handover
• Billing information (processed securely by Stripe — we do not store card details)
• Usage data including login activity, feature use, and account settings

From workers

• Shift notes — text and voice-transcribed content entered during a shift
• Clock-in and clock-out times
• AI-generated end-of-shift summaries and briefing content derived from shift notes
• The site and shift type the note relates to
• General usage data including session timestamps and device type
• Name and role, as configured by the operator

Workers may, in the course of writing shift notes, include personal information about themselves, colleagues, or clients that was not specifically requested by Lede. We have designed the platform to minimise the collection of sensitive information, but we cannot prevent it from entering freeform note fields. This policy addresses how we handle such information.

We do not collect sensitive information as defined under the Privacy Act (including health information, racial or ethnic origin, or biometric data) intentionally. Where sensitive information is incidentally disclosed in shift notes, it is handled under APP 11 security obligations and is not used for any purpose beyond operational delivery.

How we classify worker data

Lede applies a three-tier data classification to information in the Lede platform:

Tier 3 information is handled with the highest level of care. It is secured under APP 11, is not used for AI training or product improvement, is not surfaced in management dashboards at an individual level, and access is restricted to authorised personnel only.

How we use your data

To provide the Lede platform

We use operator and worker data to operate the Lede platform — processing shift notes, generating AI summaries and briefings, enabling manager dashboards, and delivering operational insights. This is the primary purpose for which data is collected.

To deliver AI features

The AI features of Handover — including shift summaries, incoming briefings, pattern detection, and the Manager Dashboard — are powered by large language model processing of shift note content. This processing occurs on a per-session basis and is used to generate outputs for workers and managers.

Where AI pattern analysis is available (Free, Starter, Growth and Enterprise tiers), the AI identifies patterns across multiple shifts. This analysis is designed to surface operational signals at a site or team level. AI outputs are framed as patterns for human review — not findings or conclusions. Lede prohibits the use of AI outputs as the sole basis for any employment decision.

To support privacy, fairness, and responsible use of AI, individual worker attribution in AI-generated outputs is restricted. Outputs that identify or name individual workers are subject to human review and appropriate approval controls.

To improve Lede for everyone

AI-generated outputs, system performance metrics, and aggregated usage patterns may be analysed to monitor service quality, evaluate system performance, and improve product functionality. This analysis is conducted at an aggregated level and is not used to identify individual workers or operators, nor is it linked back to specific accounts. Tier 3 (Sensitive) data is excluded from this process.

To communicate with operators

We send product updates, onboarding information, and service notifications to operators via email. Operators can opt out of marketing communications at any time by emailing privacy@workwithlede.com.

We do not sell personal data to third parties — ever.

Worker consent and awareness

Workers use Handover because their employer has deployed it as an operational platform. Operators are responsible for ensuring their workers are informed that:

• their shift notes and clock-in data are recorded and stored in the Lede platform;
• managers and site owners can access shift note history for the sites they manage;
• AI features process shift note content to generate summaries, briefings, and operational insights; and
• where paid-tier (Starter, Growth, or Enterprise) AI pattern features are active, note content may be analysed across multiple shifts.

Lede provides suggested worker disclosure language on request. Operators are contractually required to provide this disclosure before workers first use the platform.

Where AI features are upgraded or extended — for example, when an operator moves from Free to a paid tier (Starter, Growth, or Enterprise) — operators must ensure workers receive updated disclosure before those AI features are activated on their account.

Who has access to your data

Your data is accessible to the Lede team. We use the following third-party services to operate the platform, each governed by their own privacy policies:

We take reasonable steps to ensure these providers handle personal data securely and in accordance with applicable law. All providers are engaged under data processing terms consistent with APP 8 cross-border disclosure obligations.

Data storage location

All Lede operational data — including shift notes, worker records, and account information — is stored on infrastructure located in Australia (AWS ap-southeast-2, Sydney region). To deliver our AI features, shift-note Content is disclosed to our AI provider, Anthropic, for processing. This processing may occur outside Australia. This is a cross-border disclosure for the purposes of APP 8, and we take reasonable steps to ensure it is handled in accordance with the Australian Privacy Principles. Aside from this AI processing, we do not transfer operational data offshore without explicit operator consent.

Data retention

Operator account data is retained for as long as the account is active. If an operator closes their account, we will delete all associated personal data within 30 days, unless we are required by law to retain it (for example, for tax or financial record-keeping purposes).

All Worker shift-note data is retained until the operator’s account is deleted, regardless of subscription tier. The subscription tier instead determines the AI processing window — how far back the AI features analyse a worker’s shift-note history:

Operators can request deletion of their site's shift note history at any time by emailing privacy@workwithlede.com. Workers who wish to request deletion of their own records should contact their employer in the first instance, or contact us directly at the same address.

Your rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• request access to the personal information we hold about you;
• ask us to correct information that is inaccurate or out of date;
• ask us to delete your personal information, subject to our legal obligations; and
• make a complaint about how we have handled your personal information.

To make any of these requests, email privacy@workwithlede.com. We will respond within 20 working days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Data breaches

Lede maintains a written data breach response plan. In the event of an eligible data breach as defined under the Notifiable Data Breaches (NDB) scheme (Privacy Act 1988, Part IIIC), we will:

• assess the breach within 30 days of becoming aware;
• notify the OAIC and all affected individuals as required by law; and
• take immediate steps to contain the breach and prevent recurrence.

To report a suspected security issue or data breach, contact privacy@workwithlede.com immediately.

Operator responsibility

Operators who use Handover are responsible for:

• informing their workers that the Lede platform is in use and that shift notes are recorded, stored, and processed by AI features;
• providing worker disclosure in the form required by this policy and our Terms of Service before workers first use the platform, and again before any AI feature upgrade is activated;
• ensuring workers use pseudonyms or codes (not resident, client, or patient names) when entering notes that reference third parties, particularly in aged care, disability support, and health settings;
• not using Handover data, including AI outputs, as the sole basis for any employment decision; and
• maintaining an internal response protocol for any safety or compliance signals surfaced by the platform.

Lede provides template disclosure language and recommended usage guidelines to all operators on request.

Cookies and tracking

Our website uses standard analytics tools to understand how visitors use the site. This data is aggregated and does not identify individual users. You can disable cookies in your browser settings at any time.

Changes to this policy

We may update this policy from time to time as our product and obligations evolve. We will notify operators of any significant changes via email before they take effect. The current version is always available at workwithlede.com/privacy.

This policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Last updated: 13 June 2026

Lede Technologies Pty Ltd (ACN 698 337 718) — privacy@workwithlede.com — workwithlede.com/privacy