This Privacy Policy explains how BuildAria (“we”, “us”, “our”) collects, uses, discloses and protects personal information about visitors and users of the BuildAria construction management platform at buildaria.com.au. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as the Google API Services User Data Policy where applicable.
1. Who we are
BuildAria is a software-as-a-service platform used by Australian builders, subcontractors and construction businesses to manage estimates, variations, purchase orders, invoicing, contacts, checklists and job scheduling. If you have a question about this policy or want to exercise any of your rights, contact us at support@buildaria.com.au.
2. What information we collect
We collect only the information we need to provide the service:
- Account details — name, email address, phone number, business name, ABN, business address and role within your organisation.
- Business content you create — leads, contacts, estimates, variations, purchase orders, invoices, projects, checklists, documents, photos, scheduling data and related notes.
- Google account data (if you connect Gmail) — your Google display name and email address, and permission to send email on your behalf via the Gmail API. See section 6 for full detail.
- Payment details — handled by our payment processor (Stripe). We never see or store your full card number.
- Technical data — IP address, browser type, device, pages visited, action logs and error reports needed to operate and secure the platform.
3. How we use your information
We use personal information to:
- Provide, maintain and improve the BuildAria service and the features you use.
- Send transactional emails you request (quotes, variations, invoices, reminders, notifications).
- Authenticate you, prevent fraud and secure your account.
- Comply with our legal obligations under Australian law, including tax and record-keeping.
- Provide customer support and respond to your enquiries.
We do not sell your personal information, and we do not use it to train third-party advertising models.
4. When we share information
We share personal information only in the following circumstances:
- With people you send documents to — e.g., a client receiving a quote or variation you sent from BuildAria will see your business details on that document.
- Service providers under strict confidentiality — cloud hosting (Vercel, Render, Neon), email delivery (via Gmail on your behalf), payments (Stripe), error monitoring, AI services (OpenAI, Anthropic — only on ARIA copilot requests you explicitly submit).
- Where required by law — court orders, statutory obligations, or lawful requests from regulators.
- Business transfer — if BuildAria is acquired, personal information will move with the business under the same protections.
5. Data location & retention
BuildAria hosts data with reputable providers in secure data centres. We retain your business data for as long as your account is active and for a reasonable period afterwards to satisfy legal, accounting and dispute-resolution obligations. You can request permanent deletion of your account and its data at any time by writing to support@buildaria.com.au.
6. Google API disclosures (Gmail integration)
When you choose to connect a Google account to BuildAria, we ask Google for permission to use a limited set of scopes so we can send email on your behalf. Specifically:
- userinfo.email / userinfo.profile — to identify which Google account is connected and display your address in the app.
- gmail.send — to send quotes, invoices, reminders and other messages you compose in BuildAria, from your address, so replies come back to your inbox.
BuildAria's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- We do not read your inbox. We never request the
gmail.readonlyorgmail.metadatascopes. - We use the connection only to send messages you originate from within BuildAria.
- We do not use Gmail data for advertising, and we do not sell or transfer it to any third party.
- We do not use Gmail data to train AI or generative-AI models.
- You can revoke access at any time at myaccount.google.com/permissions.
7. Cookies & tracking
We use essential cookies to keep you signed in and to remember your preferences. We use privacy-respecting product analytics to understand how the app is used so we can improve it. We do not use third-party advertising trackers.
8. Security
We use industry-standard measures to protect your data, including TLS encryption in transit, encrypted database volumes, isolated per-tenant data storage, hashed passwords (bcrypt), MFA support, and least-privilege internal access. No system is impenetrable; if a breach affects you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme.
9. Your rights under the Privacy Act
Under the Australian Privacy Principles, you have the right to:
- Request access to the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your personal information (subject to legal retention obligations).
- Complain to us, and if unsatisfied, to the OAIC at oaic.gov.au.
10. Children
BuildAria is not directed at children under 16 and we do not knowingly collect data from children.
11. Changes to this policy
If we make material changes to this policy we will notify you in-app and by email at least 14 days before the changes take effect. Continued use of BuildAria after that date means you accept the updated policy.
12. Contact us
For any privacy question, request or complaint:
Email: support@buildaria.com.au
Website: https://www.buildaria.com.au