Last updated: 7 October 2026 · applies to wrightplan.com.au and the Wright Plan app
This page is written in plain English so people actually read it. It isn't legal advice — if you rely on Wright Plan for regulated obligations, have your own advisor review it.
Wright Plan ("we", "us") provides web-based tools for construction projects: a drawing register with distribution, simple document sharing, RFIs, defects (including links for trades), site inductions with sign on/off and visitor sign-in, and precast panel records. The service is operated from Western Australia. When we say "you" we mean the account holder; "workers" means people who use public pages (inductions, sign on/off, panel records) without an account, and "visitors" means people who sign in at a site as a visitor.
Wright Plan's job is to put the current information in front of the right people — the latest drawing revision, the live induction register, today's panel status. It is not an archive, backup or system of record. You must keep independent copies of every drawing, document and record you upload, and export anything you need to retain (register PDFs, day sheets and similar) while your subscription is active. We may remove superseded revisions, close inactive projects, and we make no promise that any file remains retrievable at any future time.
You're responsible for what happens under your account and for who you add: team members (full access, or able to add drawings), panel crew and panel admins, the induction team (approvers, admins and viewers), people on your distribution list, trades you send defects to, and anyone you hand a link, poster or QR code to. Access you grant is access you manage — remove people when they leave the project. Keep your sign-in details to yourself.
The Wright Plan operator can open any project — including its drawings, documents, inductions, attendance and panel records — to investigate a support request, a security concern or a billing problem, or to keep the service running. Support access is explicit, limited to what the issue needs, and every action taken in support mode is logged against the operator's account. We don't use support access to read your data for any other purpose.
Billing is per project, monthly, in Australian dollars, processed by Stripe — card details go to Stripe, never to us. Every price includes GST. Modules are priced exactly as shown on the pricing table; there are no hidden fees. Your invoices are available from Manage subscription in the app.
You can change your subscription at any time, and the app shows the new monthly total before anything changes:
If a payment fails, the project keeps working for a 7-day grace period (with a visible warning), then locks — nothing is deleted at lock, and reactivating restores access. Prices may change with at least 30 days' notice before your next renewal.
Some pages are deliberately public to anyone holding the link or scanning the code, so that workers, visitors and third parties can act without an account:
You control the distribution of those links and posters; anyone with one sees what that page shows.
Don't upload anything unlawful or that you lack rights to; don't attempt to access other accounts' projects, probe or overload the service, or misuse worker or visitor personal information beyond legitimate site-management purposes. We can suspend accounts that put the service or other users at risk.
We run the service with care on reputable infrastructure, but the service is provided "as is" and "as available". To the maximum extent permitted by law (including the Australian Consumer Law, which contains guarantees that cannot be excluded), we exclude liability for loss of data, loss of profit, delay costs, and any indirect or consequential loss, however arising — including outages, failures, or the ending of the service. Where liability cannot be excluded, our total aggregate liability is limited, at our option, to resupplying the service or the amount you paid us in the three months before the event. Nothing here removes rights you have under law that we cannot exclude.
We improve the product continuously and may change features. If we ever wind the service down, we'll give at least 60 days' notice so you can export what you need — which, per section 2, you should be keeping copies of all along.
These terms are governed by the laws of Western Australia, and disputes belong to the courts of Western Australia.
Account holders: your name, email, and the content you put into your projects (drawings, documents, RFIs, defects, panel records, and the names and emails of the people you add).
Workers completing a site induction: full name, date of birth, a selfie, email, mobile, employer and trade, next of kin name and mobile, your answer about allergies or medical conditions (the form asks everyone — write "None" if you have none — so the site knows in an emergency), white card number and photo, other tickets with expiry dates and photos, your confirmation that you've signed your company's SWMS, the documents you've read, and your signature.
Sign on/off: the times you sign on and off site — by you, or by the site office on your behalf (the register then records who in the office did it) — including automatic sign-off after 12 hours and any adjustment to your finish time. To set up your phone for one-tap sign on, we email you a sign-on link or code.
Visitors: your name, company, mobile, who you're visiting, and the times you sign in and out — whether you sign in yourself at the gate or the site office signs you in.
Trades sent defects: the email the builder sends your link to, and the photos and notes you send back.
People on a distribution list: name and email, and when you open a drawing through a share link (an open is recorded against the email entered on the link).
Billing: payments are handled by Stripe; card numbers never reach us. We can see what Stripe records about your subscription and payments — your packages, the amounts charged and refunded, Stripe's fees, failed payments, disputes, and your billing email and invoices.
On your device: small local conveniences only — your session; on the gate page, the email you sign on with and a sign-on key for each site your phone is set up for, and the visits signed in on that device so they can be signed out (on a shared office tablet, that's the visitors signed in there); on a share link, the name and email you entered; on a trade link, your notes and fix photos not yet sent; and preferences such as label size and the last reason you picked when issuing drawings. No advertising trackers.
To run the service you asked for: distributing project information, running site inductions, attendance and a visitor register for site safety, panel traceability, sending the emails the product is built on (submission alerts, decisions, reminders, sign-on codes, revision notices — transactional only, no marketing without separate consent), and billing.
Induction records are visible only to the project owner and the induction team they appoint (approvers, admins and viewers), and — on jobs the operator owns — the co-owners the operator names. The owner, co-owners, approvers and admins can accept, decline and delete inductions; viewers can only look. Worker selfies are view-only for identification: the app deliberately provides no way to download them, and they remain stored inside the system. Other induction photos (white card, tickets) are viewable by the same authorised people for verification.
Sign on/off and visitor records are visible to the same people. Trade defect links show that trade's defects to anyone holding the link. Panel record pages and their share links show panel information (not induction information) to anyone with the link.
We don't sell personal information, ever. We share it only with the providers that run the service, and where the law requires:
Some of these providers store or process information outside Australia, including in the United States.
Data is stored with our cloud infrastructure providers, encrypted in transit and at rest, behind access controls that enforce the visibility rules above on the server, not just in the app. The database is backed up daily by our database provider, and each backup is kept for 7 days. Uploaded files (drawings, documents and photos, including induction selfies and signatures) are copied each night to a separate backup store, which keeps earlier versions for up to 30 days. Backups exist only to recover the service after a failure.
Project data is kept while the project exists so registers stay truthful. The owner, co-owners and induction approvers or admins can permanently delete an induction (a typed-name confirmation guards against accidents). Inductions are not deleted at a worker's request: the site needs a complete induction register while the project runs. Workers and visitors can ask the site office to see or correct their details.
When something is deleted it's removed from the service straight away, and we don't restore deleted items on request — remember section A2: this is a distribution service, not an archive. Copies already in the backups above expire on their own: within 7 days for the database and within 30 days for files.
We handle personal information in line with the Australian Privacy Principles. You can ask what we hold about you, ask us to correct it, or ask us to delete it — email josh@wrightplan.com.au (or the site office for inductions and site registers) and we'll respond within 30 days. The exception is a site induction: it stays on the site's register while the project exists (section 5), so it can be corrected but not deleted on request. If you're unhappy with our answer you can complain to the OAIC (oaic.gov.au).
If we change this page in a way that matters, we'll note it here with a new date, and email account holders for significant changes.
Wright Plan · Western Australia · wrightplan.com.au