Privacy Policy

This policy is written against the Australian Privacy Principles. It explains how CosmoHealth Solutions (ABN 92 345 979 566) handles personal information in Mocos.

Mocos is a record-keeping and workflow tool and does not replace your own professional judgement, safety assessments or legal obligations.

What we collect

• Your name, email address and password. The password is stored as a secret by the sign-in service. We do not keep a copy we can read.
• Your company name, site name, and the company and site details you add.
• The change records, actions, notes and files you enter.
• That you agreed to the Terms and this policy.
• Technical details needed to run the site, such as a sign-in cookie. If you use Send feedback, the email includes the page path you were on.

Why we collect it

We use this information to create your account, keep your company's records, let the right people in that company see them, and secure sign-in. We do not use it for unrelated marketing. We do not sell personal information.

Where it is kept

Your records are stored in Sydney, Australia.

Overseas disclosure

These providers may handle personal information outside Australia. We use them only to provide the service.

• Cloudflare provides hosting and the network. Cloudflare is a US company and runs a global network.
• Stripe processes card payments.
• Resend sends email.
• Microsoft 365 holds the support mailbox.
• Supabase holds the database. Your records are stored in Sydney, Australia.

Who can see it

People in your company see the records their role allows. Our team can see a company when that access is needed to run the service, for example a support question you send us. We do not give your records to other customers.

Access and correction

You can ask to see the personal information we hold about you, or ask us to correct it. Email mocos@cosmohealth.com.au. Company admins can also update the company profile in the app. You can download the CSV register from the dashboard at any time.

Retention and deletion

We keep account and record data while the account is open. After the account is closed, we delete customer data within 90 days, unless the law requires us to keep it.

Complaints

Email mocos@cosmohealth.com.au first. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Notifiable data breaches

If we suspect a data breach, we contain it and assess whether it is likely to result in serious harm. If it is, we notify the people affected and the OAIC.

Contact

Privacy questions: mocos@cosmohealth.com.au