Privacy Policy

1. Who we are and what this covers

1.1 This Privacy Policy explains how Planset Pty Ltd (registration in progress; ABN to be confirmed) handles personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1.2 It covers our website, application, and Service, and applies to both homeowners and business users.

2. The personal information we collect

2.1 Account and contact data: name, email, business name (if any), phone, and role.

2.2 Billing data: plan, transaction history, and limited payment metadata. Full card details are handled by our payment processor, not stored by us.

2.3 Content you provide: your Input Material, KB, and Output, which may incidentally contain personal information (for example names or site addresses in plans). You control what you upload.

2.4 Usage and technical data: log data, device and browser information, IP address, and interactions with the Service.

2.5 Communications: records of your contact with support.

2.6 We collect personal information directly from you wherever practicable.

3. Collection notices

3.1 At or before the point we collect personal information (for example at signup and at upload), we will provide a short collection notice describing what we collect and why, and pointing to this policy, consistent with APP 5.

4. How we use personal information

4.1 We use personal information to: provide and operate the Service; generate Output from your Input Material and KB; authenticate and secure accounts; process payments; provide support; communicate with you about the Service; meet legal obligations; and improve and protect the Service.

4.2 We will only use or disclose personal information for a purpose you would reasonably expect, consistent with the APPs, or as permitted or required by law.

4.3 Direct marketing. We will only send marketing communications where permitted. Commercial electronic messages will identify us, be sent only with the consent required under the Spam Act 2003 (Cth), and include a working unsubscribe option. You can opt out at any time.

5. Artificial intelligence and the no-training commitment

5.1 The Service uses third-party AI models to process your Input Material and KB and generate Output. Relevant content is transmitted to our AI provider for processing and returned to you.

5.2 We do not use your content to train our own general AI models, and we contract with our AI provider so that your content is not used to train its general models. Further technical and retention detail is in Part C.

6. When we disclose personal information

6.1 We disclose personal information to service providers ("subprocessors") who help us run the Service, under contracts requiring them to protect it and use it only for our purposes. Key subprocessors are listed in Part C.

6.2 We may disclose personal information where required or authorised by law, to enforce our terms, to protect rights and safety, or in connection with a sale or restructure of the business (subject to appropriate protections). We do not sell personal information.

7. Overseas disclosure

7.1 Some subprocessors store or process personal information outside Australia. Our AI processing and hosting may occur in the United States, and other providers may process data in other countries. A current list of subprocessors and their locations is in Part C.

7.2 Before disclosing personal information overseas, we take reasonable steps to ensure the recipient does not breach the APPs in relation to that information, including through contractual protections. We remain accountable for handling consistent with the APPs.

8. Storage, retention, and deletion

8.1 Plan and specification files. Once we have processed your uploaded plans and specifications, we delete the raw files from our systems within 24 hours, retaining only the structured extraction. Note that content transmitted to our AI provider for processing may be retained transiently by that provider for a limited period under its own terms; see Part C clause 7.

8.2 KB source files are retained while your account is active so you can re-import or audit them, unless you delete them.

8.3 Account data is retained while your account is active and as needed to provide the Service and meet legal obligations.

8.4 Account deletion. When you delete your account, we delete or de-identify your personal information and associated tenant data within 30 days, except where we must retain it by law, and except for residual backup copies overwritten in the ordinary course.

9. Security

9.1 We apply reasonable technical and organisational measures, including per-tenant data isolation enforced at the database layer, encryption at rest, access controls, and least-privilege staff access. No system is completely secure.

10. Your rights

10.1 Access and correction. You may request access to the personal information we hold about you and ask us to correct it. We will respond within a reasonable time and explain any refusal.

10.2 Data export and deletion. You can export your data and may delete your account and request deletion of your personal information, subject to clause 8.4 and any legal retention obligation.

10.3 To exercise these rights, contact privacy@planset.com.au.

11. Data breaches

11.1 We maintain a data breach response process. Where a breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

12. Cookies and analytics

12.1 We use cookies and similar technologies to operate the Service, remember preferences, and understand usage. You can control cookies through your browser.

13. Children

13.1 The Service is not directed at children, and we do not knowingly collect children's personal information.

14. Changes, contact, and complaints

14.1 We may update this Privacy Policy and will post the updated version with a new effective date, taking reasonable steps to notify you of material changes.

14.2 For privacy questions or complaints, contact privacy@planset.com.au. We will acknowledge and investigate and aim to respond within 30 days.

14.3 If you are not satisfied with our response, you may complain to the OAIC at oaic.gov.au.