Privacy Policy

1. Who we are

BuildIQ is a product of Syvanto Pvt Ltd, a company registered in New South Wales, Australia. Syvanto Pvt Ltd is the data controller for personal data processed in connection with your BuildIQ account and use of the platform.

If you have any questions or requests regarding this Privacy Policy, please contact our Privacy team at privacy@syvanto.com or write to us at: Syvanto Pvt Ltd, Sydney NSW 2000, Australia.

2. What data we collect

We collect the following categories of data when you register for or use BuildIQ:

Account data

• Full name and email address
• Company name and your role within that company
• Password (stored as a one-way cryptographic hash — never in plaintext)
• Billing and subscription information (handled by our payment processor, Stripe)

Usage data

• Pages viewed and features accessed within the platform
• Feature usage patterns and session duration
• Actions taken by AI agents on your behalf and the results returned

Construction project data

• Project details, schedules, and financial information you import or enter
• Documents, RFIs, variation orders, and site records you upload
• Data imported via integrations with third-party construction tools

Device and technical data

• IP address and approximate geographic location
• Browser type, version, and device type
• Referrer URLs and session identifiers

Communications

• Support requests and tickets you submit
• Chat logs from in-platform support sessions
• Feedback and survey responses

3. How we use your data

We use the data we collect for the following purposes:

• Providing and improving the platform — operating, maintaining, and enhancing BuildIQ's features and user experience
• AI analysis and agent operations — running AI agents and generating intelligence insights exclusively on your tenant's data
• Security monitoring and fraud prevention — detecting, investigating, and preventing security incidents and misuse
• Billing and subscription management — processing payments, managing your subscription, and issuing invoices
• Product communications — sending you release notes, feature updates, and service notifications (you can opt out of marketing emails at any time)
• Legal and compliance — complying with applicable laws and responding to lawful requests from regulators or courts

4. Data isolation

Each tenant's data is stored in a dedicated database schema, entirely separate from every other organisation using BuildIQ. We do not share, combine, or cross-reference tenant data between organisations under any circumstances.

Your construction project data is never used to train shared or third-party AI models. AI processing on your data is scoped to your tenant context only and the outputs are returned exclusively to your organisation.

5. Third-party services and sub-processors

To deliver the platform, we engage the following sub-processors. Each is contractually obligated to maintain the confidentiality and security of your data:

• Supabase — database hosting and authentication. Data stored in AWS-backed infrastructure.
• OpenAI API — AI processing for agent operations. Your data is processed under OpenAI's API terms, which explicitly prohibit use of API inputs for model training.
• Stripe — payment processing and billing. Stripe is PCI DSS Level 1 certified. BuildIQ never stores raw card data.
• Amazon Web Services (AWS) — primary cloud hosting infrastructure, with data centres in Australia, the United States, and the European Union.

We will update this policy if we add or replace sub-processors that have access to personal data.

6. Data retention

• Active accounts: personal and project data is retained for as long as your account is active, plus a 90-day grace period after account closure.
• Deleted accounts: upon a verified deletion request, all personal data is purged from our systems within 30 days, except where we are required by law to retain it for longer (e.g., financial records).
• Backups: anonymised or encrypted data in backup systems is purged on a rolling 90-day cycle.

7. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your personal data
• Right to portability — receive your data in a machine-readable format
• Right to restriction — ask us to limit how we process your data
• Right to object — object to processing based on legitimate interests

EU and UK users have these rights under the General Data Protection Regulation (GDPR) and UK GDPR respectively. Australian users have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

To exercise any of these rights, email privacy@syvanto.com. We will respond within 30 days.

8. Cookies

BuildIQ uses cookies for authentication, session management, and analytics. For full details, see our Cookie Policy.

9. International data transfers

Your data may be processed in Australia, the United States, the United Kingdom, or the European Union, depending on which infrastructure services are in use and your chosen data residency settings.

For transfers of personal data from the EU or UK to countries that have not been granted an adequacy decision, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission. Enterprise customers may request a Data Processing Agreement (DPA) that includes SCCs by emailing dpa@syvanto.com.

10. Children

BuildIQ is a professional software platform intended for use by adults in the construction and built environment industries. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has provided us with personal data, please contact us at privacy@syvanto.com and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the platform, applicable laws, or our practices. For material changes, we will notify you by email at least 30 days before the new policy takes effect. Continued use of BuildIQ after the effective date constitutes acceptance of the updated policy.

The current version of this policy is always available at buildiq.app/legal/privacy.

12. Contact us

For any privacy-related enquiries, requests, or complaints:

• Email: privacy@syvanto.com
• Post: Syvanto Pvt Ltd, Sydney NSW 2000, Australia