Privacy Policy

1. What We Collect

When you use MyBuildRecords, we collect:

• Account information: name, email, password (hashed)
• Project data: all documents, photos, and metadata you upload
• Usage data: IP address, browser type, pages visited, timestamps
• Subcontractor & homeowner data: names, email addresses, contact details you invite
• Analytics: via Google Analytics (GA tag GT-5MCNV9TK)

2. How We Use Your Data

We use your data to:

• Provide and maintain the service
• Send billing invoices and service communications
• Support your account and answer your questions
• Improve the service (aggregate analytics only)
• Detect and prevent fraud, security issues, or abuse
• Comply with legal obligations

3. Data Storage & Security

Your data is stored in encrypted cloud servers. We endeavour to host data in New Zealand or Australia where technically feasible. We use industry-standard security practices (TLS/SSL encryption in transit, encryption at rest) but cannot guarantee absolute security.

4. New Zealand — Privacy Act 2020

We comply with the Privacy Act 2020 and the 12 Information Privacy Principles. You have the right to request access to, or correction of, your personal information. Contact privacy@mybuildrecords.com to exercise these rights.

5. Australia — Privacy Act 1988

We comply with the Privacy Act 1988 and the Australian Privacy Principles. If you are an Australian resident, you have the same rights of access and correction as outlined above. You may also lodge a complaint with the Office of the Australian Information Commissioner if you believe your privacy has been breached.

6. European Union — GDPR

If you are located in the EU, your data is subject to GDPR. You have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request deletion (right to be forgotten)
• Portability: receive your data in a portable format
• Object: object to processing for specific purposes

Contact privacy@mybuildrecords.com to exercise any GDPR right. You may also lodge a complaint with your national data protection authority.

7. United States — CCPA

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know: what personal information is collected
• Right to delete: request deletion of your data
• Right to opt-out: opt out of sale or sharing of personal information

To exercise CCPA rights, contact privacy@mybuildrecords.com.

8. Cookies & Analytics

We use Google Analytics to understand how visitors use our website. Analytics data is aggregated and does not identify you individually. You can opt out of Google Analytics tracking via Google's opt-out browser extension.

9. Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share data with service providers (cloud hosting, payment processing, email) who are bound by confidentiality. We may disclose data if required by law, court order, or to protect our rights or safety.

10. Children

The service is not intended for children under 18. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy at any time. Continued use after changes constitutes acceptance.

12. Contact

For privacy inquiries or to exercise your rights, contact privacy@mybuildrecords.com.