Privacy Policy

1. Policy Owner and Contact

This Privacy Policy is published by BuildersBrochures.com.au, a sister site of the SpeedyCore group, operated by or on behalf of SpeedyCore Pty Ltd (ACN placeholder — together, "SpeedyCore", "we", "us", or "our"). SpeedyCore is the data controller responsible for the personal information we collect, hold, use, and disclose in connection with your use of BuildersBrochures.

For privacy enquiries, access requests, correction requests, or complaints, contact our privacy officer at:

• Email: admin@buildersbrochures.com.au
• Via the SpeedyCore dashboard privacy tools (see Section 8).

This policy is designed to be read alongside the SpeedyCore Group Master Privacy Policy and the BuildersBrochures Terms of Service at /terms.

2. Personal Information We Collect

We collect only the personal information reasonably necessary to operate the BuildersBrochures rendering service, administer billing, provide support, and meet our legal obligations. This includes:

• Account and identity information — full name, display name, email address, company or builder business name, phone number (if provided), and ABN/ACN (if provided during billing).
• Transaction and billing information — invoice recipient details, billing address, subscription status, credit pack history, and payment timestamps.
• Usage and device data — IP address, device type, browser user agent, page timestamps, referrer URLs, render job logs, feature usage, and approximate geographic location (derived from IP).
• Uploaded files and rendering data — floorplan PDFs, PNGs, JPGs, facade sketches, interior reference images, brief notes, style selections, and any other materials uploaded to generate renders. Uploaded files may incidentally contain personal information embedded in architectural annotations or title blocks; we process this content solely to produce outputs on your behalf.
• Support and correspondence — email threads, support tickets, in-app feedback, and any other communications you send us.

3. SpeedyCore Identity Spine and Billing Spine

3.1 Authentication via SpeedyCore Identity

BuildersBrochures does not operate a standalone identity or user database. All authentication, account creation, login, multi-factor authentication, profile preferences, and security settings are handled exclusively through the SpeedyCore Identity spine. Your SpeedyCore Identity account is shared across all SpeedyCore sister sites, so the same profile you use on speedycore.com.au, constructiveos.com.au, mytradieweb.com.au, and other group sites applies to BuildersBrochures.

The personal information you provide or that is generated as part of SpeedyCore Identity is governed by the SpeedyCore Group Master Privacy Policy. By using BuildersBrochures you consent to the sharing of your identity record between the Identity spine and BuildersBrochures for the purpose of authenticating you and associating your render jobs with your account.

3.2 Billing via SpeedyCore Billing Spine

All subscription and pay-as-you-go credit billing is processed through the SpeedyCore Billing spine using Stripe as the payment processor.

• No credit card data is stored on BuildersBrochures vertical infrastructure. Full card numbers, CVC/CVV values, and magnetic stripe data are tokenised and held by Stripe under their PCI DSS Level 1 compliance program. We receive only Stripe token references, card brand, last four digits, and expiry month/year for display and subscription management.
• Billing records (invoices, transaction IDs, amounts, GST, item descriptions) are stored in the SpeedyCore Billing spine and shared with your BuildersBrochures dashboard so you can view render job history and associated charges.

4. Why We Collect, Hold, and Use Your Information

Under the Australian Privacy Principles (APPs), particularly APP 3 and APP 5, we only use or disclose personal information for the purposes it was collected for, or a related secondary purpose that you would reasonably expect. Those purposes include:

• Providing the AI rendering service — authenticating you, running your uploaded plans through our AI models, returning rendered outputs, storing project history, and enabling the floorplan, facade, interior, and brochure apps.
• Billing and subscription administration — invoicing, processing AUD payments via Stripe, applying GST, managing subscriptions, credit pack balances, refunds, and disputes in accordance with our Terms of Service.
• Customer support and service improvement — responding to support tickets, investigating render failures, reproducing bugs, onboarding new users, and improving model accuracy and user experience.
• Legal compliance and safety — complying with applicable Australian laws (including the Privacy Act, Competition and Consumer Act, Spam Act, anti-money laundering laws, and tax/GST record-keeping requirements), enforcing our Terms of Service, detecting fraud and abuse, and protecting the safety and integrity of the SpeedyCore platform.
• Marketing communications (opt-in only) — if, and only if, you explicitly opt in, we may send product updates, new feature announcements, SpeedyCore sister site offers, or builder industry content via email. All marketing emails include a working one-click unsubscribe footer as required by the Spam Act 2003 (Cth). You may update your marketing preferences at any time via your SpeedyCore Identity dashboard.

4.1 Lawful Basis (APP Grounds)

We rely on the following APP-compliant grounds when processing your personal information: (a) your consent, for marketing and optional profile fields; (b) performance of a contract, for the rendering service and billing you purchase under our Terms of Service; and (c) our legitimate and legal obligations, for security, fraud prevention, compliance, accounting records, and enforcement of Terms — but only where those interests are not overridden by your privacy rights under the Privacy Act.

5. Disclosure of Personal Information

We do not sell, rent, or trade your personal information or uploaded floorplans to third parties for marketing or list-building purposes. We only disclose information as follows, in accordance with APP 6 and APP 8:

5.1 Trusted Service Providers

• Stripe Payments — for credit card tokenisation, subscription billing, one-off credit purchases, and invoice generation. Refer to Stripe's privacy policy at stripe.com/au/privacy.
• Cloud hosting providers — for compute, storage, network, database, and CDN services used to run the BuildersBrochures web app and API endpoints.
• AI GPU workers and inference providers — uploaded plans, render parameters, and style preferences are sent to our GPU inference infrastructure for the sole purpose of generating your requested render outputs. Render workers are configured to process inputs in memory where technically feasible.
• Email and transactional communications providers — for sending login links, support replies, invoices, and (if opted in) marketing communications.
• Professional advisors — our accountants, solicitors, and auditors, in the course of providing their services and subject to appropriate confidentiality obligations.

All service providers are contractually required to protect your personal information in a manner consistent with this policy and the APPs, and may only use it for the specific purposes we engage them for.

5.2 Disclosures Required by Law

We may disclose personal information if required to do so by Australian law, a court order, a subpoena, or a valid request from a law enforcement or government agency with statutory authority to compel the disclosure. Where lawful and practicable, we will attempt to notify you of any such disclosure before it occurs.

5.3 Overseas Disclosure (APP 8)

Some of our cloud and AI infrastructure providers may process or store personal information on servers located outside Australia, including in the United States, Singapore, or other jurisdictions. Where this occurs, we take the following APP 8-compliant steps:

• We contractually require overseas recipients to handle personal information in a manner consistent with the APPs, including encryption, access controls, and data retention limits;
• We apply a risk-based classification: uploaded floorplan files containing potential personally identifiable annotations are routed preferentially to Australian or APAC-region storage where commercially feasible; and
• We remain accountable under APP 8.1 for any overseas recipient breach of the APPs affecting your personal information, unless the exception in APP 8.2 applies.

6. Data Retention, Deletion, and Security

6.1 Retention Schedule

We retain personal information only for as long as is reasonably necessary to fulfil the purposes described in Section 4, to comply with our legal obligations, and to resolve disputes. Key retention periods:

• Uploaded files (floorplans, sketches, images): automatically purged after 30 days from the date of upload, unless the file is part of an ongoing billing dispute or a render job stored in your dashboard favourites. A 7-day soft-delete buffer applies after which files are permanently removed from active and backup storage.
• Rendered outputs: retained for the life of your account, or 90 days after account closure, whichever is sooner. You can delete individual renders or entire project folders at any time from your dashboard.
• Account records: retained for the life of your account plus 12 months after permanent closure to satisfy chargeback, tax, and audit lookback windows.
• Invoices and tax records: retained for a minimum of 5 years from the date of issue, as required by the Taxation Administration Act 1953 (Cth).
• Server and access logs: rotated after 30 days for active infrastructure, with aggregated and de-identified log data retained for up to 12 months for security analysis.

6.2 Requesting Immediate Deletion

You can request immediate deletion of your uploaded files, render history, or personal information at any time via the privacy tools in your SpeedyCore dashboard, or by emailing admin@buildersbrochures.com.au. Deletion requests are processed within 5 business days, subject to the tax and legal record retention carve-outs listed above. You will receive written confirmation once deletion is complete.

6.3 Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorised access, use, modification, or disclosure. These include HTTPS/TLS encryption in transit, encryption at rest for uploaded files and database records, role-based access controls, two-factor authentication via SpeedyCore Identity, regular vulnerability scans, and restricted staff access to production user data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security — if you become aware of a security incident affecting your account, notify us immediately.

7. Access and Correction of Your Personal Information (APP 12 & 13)

You have the right under APP 12 to request access to the personal information we hold about you, and under APP 13 to request that we correct any personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

7.1 How to Request Access or Correction

• Self-service (recommended): most of your personal information — including profile, email, password, company, and marketing preferences — is directly editable from your SpeedyCore Identity dashboard. Render history, uploaded files, and invoices are accessible from the BuildersBrochures dashboard.
• Written request: email admin@buildersbrochures.com.au with the subject line "Privacy Access Request" or "Privacy Correction Request". We will verify your identity before responding, to protect the integrity of your data.

7.2 Response Times and Fees

We will respond to your access or correction request within 30 days of receipt. Where a request is complex or requires retrieval of large volumes of archived data, we may extend the response period by up to a further 30 days and will notify you in writing. We do not charge a fee to make an access or correction request. In the highly unusual case that a request is unreasonable, excessive, or repetitive, we may (with notice) require payment of a reasonable administrative fee reflecting actual copying and retrieval costs.

If we refuse access or decline a correction, we will provide you with a written notice setting out the reasons for the refusal and the mechanisms available to you to complain about the decision, as required by APP 12.4 and APP 13.3.

8. Complaints (APP 14 and OAIC Process)

If you believe we have mishandled your personal information or breached the APPs, we encourage you to first raise the concern directly with us so we have an opportunity to resolve it.

• Step 1 — Internal complaint: email admin@buildersbrochures.com.au with "Privacy Complaint" in the subject line, including a detailed description of the concern, the APPs clause or clauses you consider breached, and any supporting evidence. Our privacy officer will acknowledge your complaint within 5 business days and issue a written outcome within 30 days.
• Step 2 — External review: if you are dissatisfied with our response, or if we have not responded within the period above, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC).

The OAIC can be contacted at:

• Website: oaic.gov.au/privacy/privacy-complaints
• Phone: 1300 363 992 (within Australia)
• Mail: GPO Box 5218, Sydney NSW 2001, Australia

9. Cookies, Analytics, and Tracking

We use cookies and similar browser storage mechanisms to operate the BuildersBrochures service. Our approach is designed to comply with the Spam Act, the Privacy Act, and the OAIC's guidance on online tracking.

9.1 Functional and Essential Cookies (always on)

We set first-party cookies that are strictly necessary for the service to function, including:

• Session cookies and refresh tokens to keep you authenticated between page requests (via SpeedyCore Identity);
• CSRF tokens and short-lived nonces to protect forms from cross-site request forgery;
• Render job state cookies so you can navigate away from the app and return to an in-progress render without losing your place.

9.2 Search Console and Performance Data

We collect de-identified search performance data via Google Search Console (GSC) to understand how BuildersBrochures appears in Google search results for Australian builders. GSC data is aggregated at the domain and query level and does not identify individual visitors.

9.3 Behavioural and Marketing Cookies (opt-in)

We do not set behavioural advertising cookies, cross-site tracking pixels, or third-party marketing trackers by default. If, and only if, you explicitly opt in via the SpeedyCore dashboard cookie preferences or a marketing email preference centre, we may enable Google Analytics or similar performance analytics to better understand aggregate user journeys. You can withdraw your consent and disable behavioural tracking at any time from the dashboard cookie panel, or by configuring your browser to reject third-party cookies.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, amendments to the Privacy Act or APPs, SpeedyCore group policy changes, or as otherwise required by law. Material changes (including changes to the categories of information we collect, the purposes we use it for, or the categories of disclosures we make) will be notified by way of an in-app banner or email to your registered SpeedyCore Identity email address at least 14 days before they take effect. The effective date at the top of this page will also be updated.