Your data, handled with care

IWILLBUILD (ABN 89 791 350 823) is a construction and job management software platform operated from Queensland, Australia ("we", "us", "our").

This Privacy Policy explains how we collect, hold, use and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It applies to all users of the IWILLBUILD portal, website, and related services (collectively, the "Service").

By using the Service you consent to the collection, use and disclosure of your personal information as described in this policy. If you do not agree, please do not use the Service.

We collect personal information that is reasonably necessary to provide the Service. This includes:

• Identity and account data — full name, email address, hashed password, phone number, and hashed PIN (if set).
• Company and business data — business name, ABN, address, and configuration settings you enter.
• Job and project data — job names, site addresses, notes, status, assigned team members, and related records you create.
• Financial data — estimates, invoice line items, pricing, GST amounts, and payment history you record in the portal.
• Safety and compliance records — completed forms, SWMS, site safety plans, and any data entered by your team.
• Fleet and asset data — vehicle records, registrations, maintenance notes, and asset bookings you enter.
• Files, photos and documents — attachments uploaded through the portal.
• Technical and usage data — IP address, browser type, pages visited, actions taken, and session information collected automatically when you use the Service.

We collect personal information directly from you when you register, use the Service, or contact us. We may also collect information from your employer or the company account administrator who invited you to the platform.

Where it is lawful and practicable to do so, you may use the Service without identifying yourself (for example, when browsing public pages). However, most features require you to create an account.

We use personal information to:

• Provide, operate and maintain the Service and its features.
• Create and manage your account and company workspace.
• Process subscription payments and manage billing.
• Provide customer support and respond to enquiries.
• Send transactional communications — password resets, account notifications, and service updates.
• Detect, investigate and prevent fraud, security incidents, and unauthorised access.
• Comply with legal obligations, including tax and record-keeping requirements.
• Improve the platform, fix bugs, and develop new features (using aggregated or de-identified data where possible).

We will not use your personal information for direct marketing without your consent. We do not sell your personal information to third parties or use it for advertising purposes.

We may disclose your personal information to:

• Service providers — third-party vendors who assist us in operating the Service, including cloud hosting providers, database infrastructure, email delivery services, and payment processors. These providers are contractually required to handle your information securely and only for the purposes we specify.
• Payment processor (Stripe) — subscription payments are processed by Stripe, Inc. IWILLBUILD does not store your full card number or CVV. Stripe handles payment data under its own privacy policy and PCI-DSS compliance program. See stripe.com/au/privacy.
• Accounting integrations (e.g. Xero) — if you choose to connect a third-party accounting platform, data such as approved invoices and customer contacts may be synced to that platform at your direction. You can disconnect integrations at any time from Settings → Integrations. Data already transmitted to a third-party platform is governed by that platform's privacy policy.
• Your company administrator — account owners and administrators within your company workspace can access data created by team members in accordance with their role permissions.
• Legal and regulatory authorities — where required by law, court order, or to protect the rights, property, or safety of IWILLBUILD, our users, or the public.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify affected users before personal information is transferred and becomes subject to a different privacy policy.

We do not otherwise disclose your personal information to third parties without your consent.

Some of our service providers are located or store data outside Australia, including in the United States and the European Union. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure those recipients handle your information in a manner consistent with the APPs, including through contractual data processing agreements.

By using the Service, you acknowledge that your information may be transferred to and processed in countries outside Australia. If you do not consent to this, please contact us before using the Service.

Files, photos, and documents you upload are stored in secure cloud storage (currently Cloudflare R2 or equivalent infrastructure). Your company's files are isolated and are not accessible to other companies on the platform. Data is stored using industry-standard security controls.

We take reasonable steps to ensure the personal information we hold is accurate, up to date, complete, and relevant. You can update your account details at any time from your profile settings. If you believe information we hold about you is inaccurate or out of date, please contact us using the details in section 12.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include:

• Encrypted connections (HTTPS/TLS) for all data in transit.
• Hashed storage of passwords and PINs (never stored in plain text).
• Role-based access controls limiting data access to authorised users.
• Rate limiting and session management to reduce unauthorised access risk.
• Regular review of security practices as the platform evolves.

No system is completely secure. We encourage you to use a strong, unique password and to keep your login credentials private. If you suspect unauthorised access to your account, contact us immediately at [email protected].

We use session cookies to keep you logged in while using the portal. These are strictly necessary for the Service to function and are not used for advertising.

We may collect limited technical usage data (such as page views and feature interactions) to understand how the platform is used and to improve it. This data is aggregated and does not identify you individually. We do not use third-party advertising cookies or tracking pixels.

We retain personal information for as long as your account is active or as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

If you cancel your subscription, your data will be retained for a reasonable period (typically 90 days) to allow account recovery. After that period, your data may be deleted or de-identified, subject to any legal or regulatory record-keeping requirements that apply to your business records.

When personal information is no longer required, we take reasonable steps to destroy or permanently de-identify it.

Under the Privacy Act 1988 (Cth) and the APPs, you have the right to:

• Access the personal information we hold about you.
• Correct personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
• Complain about how we have handled your personal information.

To exercise any of these rights, contact us at [email protected]. We will respond to access and correction requests within 30 days. In some circumstances we may be unable to provide access (for example, where doing so would unreasonably impact the privacy of another individual), and we will explain why.

If you are not satisfied with our response to a privacy complaint, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

We may update this Privacy Policy from time to time to reflect changes to our practices, the Service, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify users by email or in-app notice.

Continued use of the Service after the updated policy is posted constitutes your acceptance of the changes. We encourage you to review this policy periodically.

For any privacy questions, access or correction requests, or complaints, please contact us:

IWILLBUILD
Queensland, Australia
ABN 89 791 350 823
[email protected]

We aim to respond to all privacy enquiries within 5 business days.