Privacy Policy

1 Introduction

Build Ezi AU Pty Ltd (ABN 77 657 772 864) (“Build Ezi”, “we”, “us”, “our”) operates the Build Ezi construction project management platform, available via mobile application on iOS and Android, and the website at www.buildezi.com (“Platform”).

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information in connection with the Platform.

By creating an account or using the Platform, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree, please do not use the Platform.

2 Who This Policy Applies To

This Privacy Policy applies to:

• Builder users — individuals or business entities subscribing to Build Ezi as the primary account holder;
• Worker users — employees, contractors, or subcontractors added to a project by a Builder user;
• Client users — clients of a Builder user who are granted restricted access to project information;
• Website visitors — any person who visits www.buildezi.com; and
• Demo or trial users — individuals using the Platform under a free trial.

3 What Personal Information We Collect

3.1 Information You Provide Directly

When you register for an account or use the Platform, we may collect:

• Full name and business name
• Email address and mobile phone number
• Business address
• Password (stored in encrypted form)
• ABN and business registration details
• Payment information (processed by Stripe — see section 7)
• Profile photos or images you upload
• Trade licence, White Card, and credential information you upload
• Project data, documents, photos, and files you upload
• Communications you send within the Platform
• Timesheet, task, schedule, and financial data you enter

3.2 Information Collected Automatically

When you use the Platform or visit our website, we may automatically collect:

• Device type, operating system, and app version
• IP address and approximate location
• Browser type (for web access)
• Usage data including pages visited, features accessed, and time spent
• Log data and error reports
• App Store or Google Play account information where relevant

3.3 Information Collected via Third Parties

We may receive personal information about you from:

• Builder users who add you as a Worker or Client to the Platform;
• Stripe, our payment processor, for transaction verification;
• Google Analytics 4 (GA4), for website and app usage analytics;
• Meta (Facebook) Ads platforms, for advertising and lead generation;
• Calendly, for demo booking information;
• Mailjet, for email delivery analytics (open rates, click rates);
• GoHighLevel (GHL), our CRM platform, for contact and sales pipeline management.

3.4 Sensitive Information

4 How We Use Your Personal Information

We use your personal information for the following purposes:

• To create and manage your account;
• To provide and operate the Platform and its features;
• To process subscription payments via Stripe;
• To send transactional emails (account confirmations, receipts, usage notifications) via Mailjet;
• To send onboarding, trial, and account lifecycle emails via our automated email system;
• To respond to your enquiries and support requests;
• To manage demo bookings via Calendly;
• To improve the Platform through usage analytics;
• To conduct direct marketing, where you have consented (see section 8);
• To prevent fraud, security incidents, and technical errors;
• To comply with legal obligations including the Privacy Act, Australian Consumer Law, and any applicable Work Health and Safety legislation;
• To enforce our Terms of Service and SaaS Subscription Agreement.

5 Disclosure of Personal Information

5.1 Service Providers

We may share your personal information with trusted third-party service providers who assist us in operating the Platform, including:

• Stripe — Payment processing and subscription billing (USA)
• Supabase — Database, file storage, and backend infrastructure (USA)
• Mailjet — Transactional and marketing email delivery (France / EU)
• GoHighLevel (GHL) — CRM, SMS, and pipeline management (USA)
• Google (GA4) — Website and app analytics (USA)
• Meta Platforms — Advertising and lead capture (USA)
• Calendly — Demo and meeting booking (USA)
• Vercel — Landing page hosting (USA)
• Xero (live) / MYOB (in development) — Accounting software integrations (Australia / New Zealand)

5.2 Overseas Disclosure

5.3 Other Disclosures

We may also disclose your personal information:

• To a Builder user who has added you as a Worker or Client on the Platform (the Builder is responsible for ensuring you have been notified of this Policy);
• Where required by law, regulation, court order, or government authority;
• In connection with a merger, acquisition, or sale of our business, subject to appropriate confidentiality obligations;
• With your explicit consent.

We do not sell your personal information to third parties.

6 Cookies and Tracking Technologies

6.1 Website Cookies

Our website uses cookies and similar tracking technologies. Cookies are small files stored on your device that help us operate the website and understand usage patterns.

6.2 Types of Cookies We Use

• Essential cookies: required for the website and Platform to function. These cannot be disabled.
• Analytics cookies: Google Analytics 4 (GA4) collects anonymised data on how you interact with our website and app.
• Marketing cookies: Meta Pixel (Facebook Ads) and related tracking, used for advertising targeting and measurement.
• Preference cookies: remember your settings and login status.

6.3 Cookie Consent

On your first visit to our website, a cookie consent banner will be displayed. You may accept all cookies, reject non-essential cookies, or manage your preferences. Essential cookies will always be active.

6.4 Managing Cookies

You can control cookies through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform but may limit some website functionality.

7 Payment Information

Subscription payments are processed by Stripe, Inc. We do not store your full credit card or payment card details. Stripe is PCI-DSS compliant.

8 Marketing Communications

We may send you marketing communications (including emails and SMS) about Build Ezi’s features, promotions, and updates where you have:

• Consented at account registration or during the trial sign-up process; or
• Had a prior commercial relationship with us, subject to opt-out rights.

You can unsubscribe at any time by:

• Clicking the unsubscribe link in any marketing email; or
• Emailing info@buildezi.com and requesting removal from our mailing list.

Unsubscribing from marketing communications will not affect essential transactional communications related to your account.

9 Data Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These include:

• Encryption of data in transit (TLS/HTTPS);
• Encryption of data at rest (via Supabase);
• Access controls and role-based permissions;
• Regular security assessments;
• Incident response procedures.

No data transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

10 Data Breach Notification

If we become aware of a data breach that is likely to result in serious harm to any individual whose personal information is involved, we will:

• Contain and assess the breach as quickly as possible;
• Notify the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches (NDB) scheme; and
• Notify affected individuals as required by law.

11 Data Retention

We retain your personal information for as long as your account is active or as needed to provide services to you. Following account termination:

• Your account data is retained for 30 days to allow data export;
• After 30 days, your account data is permanently deleted;
• Certain information may be retained longer where required by law (e.g., financial records for tax purposes).

Project data uploaded by Builder users may include data about Worker and Client users. Builder users are responsible for managing their obligations in relation to this data.

12 Your Rights

Under the Privacy Act and the APPs, you have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate, incomplete, or out-of-date personal information;
• Request deletion of your personal information (subject to legal retention obligations);
• Opt out of direct marketing;
• Make a privacy complaint (see section 14).

To exercise any of these rights, please contact us at info@buildezi.com. We will respond within 30 days.

13 Children’s Privacy

The Platform is not directed at or intended for use by persons under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected personal information from a person under 18 without appropriate consent, please contact us immediately.

14 Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us first at:

• Email: info@buildezi.com
• Address: 17 Karp Ct, Bundall QLD 4217, Australia

We will acknowledge your complaint within 5 business days and aim to resolve it within 30 business days.

15 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated Policy on our website with a new effective date; and
• Sending an email notification to your registered email address for significant changes.

Your continued use of the Platform following notification of changes constitutes your acceptance of the updated Policy.

16 Contact Us