BuildMate AI

Privacy Policy

Version 2026-09-v1 · 10 September 2026

This policy explains what personal information BuildMate AI handles, why, and how it is protected. We are an Australian service: your data stays in Australia by default, handled under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What we collect

Only what a workflow needs: your name, email and organisation; timesheet, lead, quote, estimate, tender, invoice and compliance records you send us to process; and billing/usage information to operate your plan.

2. Why we collect it

To draft clean records for your confirmation and to act only once you confirm. We never collect information "just in case" (APP 3).

3. How your data is protected

  • Encrypted in transit (TLS) and encrypted at rest on our servers.
  • Stored per organisation with row-level isolation — one client can never see another's data (APP 11).
  • Credentials for your connected services (Xero, Telegram, Dropbox, SharePoint, Google Drive) are encrypted and only decrypted at the moment an adapter needs one.
  • Consequential actions (money, payroll, external sends) always wait for a named human's confirmation — no AI acts alone.

4. Sharing and cross-border disclosure (APP 8)

We do not sell your data. Where an AI/LLM provider processes outside Australia, we minimise what leaves (personal information is redacted or limited to the minimum needed) and your consent records note it. See our consent page for the plain-words notice we record at signup.

5. Access, correction and erasure (APP 12)

You can request access to, correction of, or deletion of your personal information at any time by emailing our privacy contact. We respond within 30 days.

6. Retention and breach readiness

We keep data only while your account is active and delete on request. If a data breach is likely to cause serious harm, we notify the Office of the Australian Information Commissioner and affected individuals as the Notifiable Data Breaches scheme requires.

Questions: contact our privacy team at privacy@example.com (Australian privacy contact).