Privacy Policy
Version 0.9.1 — 1 November 2026 — draft for legal review. Text taken from the SiteVero Customer Legal Pack (v0.9, 16 October 2026) with the free-trial wording updated. This is not legal advice, and the effective date is to be confirmed.
Privacy Policy
SiteVero Pty Ltd ACN 702 446 339. Draft for legal review — version 0.9.1, 1 November 2026; effective date to be confirmed.
v0.9.1 · 1 November 2026 · draft for legal review. Changes from v0.9 (16 October 2026): free-trial wording; version and date.
1. About this policy
SiteVero Pty Ltd (SiteVero, we, us) provides a construction management platform used by builders, developers and contractors (our customers) and the people who work with them. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Contact: Privacy Officer, SiteVero Pty Ltd, 1297A Nepean Highway, Cheltenham VIC 3192 — support@sitevero.com.au.
2. Two ways we hold your information
On behalf of our customers. Most personal information in SiteVero is entered by or for a customer about its projects — for example a builder recording who signed in to its site, a subcontractor's insurance documents, or meeting attendees. The customer decides what to collect and why. We store and process it to run the service for that customer. If you are a worker, visitor, subcontractor or tenderer, the customer that invited you is your first point of contact.
For our own purposes. We also collect information to run our business: customer account contacts, billing, support, security, website enquiries and marketing to businesses.
3. What we collect
| Category | Examples |
|---|---|
| Identity and contact | name, employer, role, work email, phone |
| Site and workforce | site sign-in and sign-out times, inductions, licences and tickets, training records, SWMS acknowledgements, visitor details, [a photo at sign-in where the customer enables it] |
| Project and commercial | tasks, meeting minutes and attendance, signatures, tenders and quotes, contracts, purchase orders, supplier bills, insurance certificates |
| Communications | emails sent through the service, comments, support requests |
| AI interactions | questions and content you submit to AI features, generated outputs, [meeting audio recordings where enabled] |
| Technical | IP address, device and browser, app version, log and security events, approximate location at sign-in where the feature uses it [confirm] |
| Billing (customers) | company details, billing contacts, invoices and payment records (no card details are collected in the app) |
Sensitive information. We do not ask for sensitive information (such as health information). Some documents uploaded by customers may contain it; we handle it only to provide the service and with consent where the law requires.
Anonymity. You can browse our website without identifying yourself, but you cannot use the service anonymously because site and project records must identify people.
4. How we collect it
- from you, when you sign up, sign in on site, complete forms, upload documents or contact us;
- from the customer you work with or for, and other users on the same project;
- automatically, from your device when you use the service;
- from our service providers (for example email delivery status).
5. Why we use it
- to provide, operate, secure and support the service;
- to send service messages (invitations, sign-in confirmations, meeting minutes, tender notices, reminders, account and billing notices);
- to keep records customers need for safety, contract and legal purposes;
- to detect, investigate and prevent fraud, misuse and security incidents;
- to improve the service, including creating de-identified aggregated statistics such as construction cost benchmarks (customers may opt out);
- to bill customers and manage our business relationship;
- to send business marketing to customer contacts, with an unsubscribe option;
- to comply with law.
We do not sell personal information. We do not use customer content to train generally available AI models.
6. AI features
Some features send selected content to our AI provider, Anthropic (Claude API), to produce drafts, summaries or answers. The provider processes it on our behalf and may not use it to train its models. Outputs are reviewed by a person before they are sent or acted on.
7. Who we disclose it to
- Users on the same project or company, according to the roles the customer sets.
- Our service providers: Supabase (database, files, authentication — Sydney), Netlify (web hosting), Resend (email delivery), Google Cloud (encrypted backups), Anthropic (AI features). They may only use the information to provide services to us.
- Professional advisers (lawyers, accountants, auditors) under confidentiality.
- A purchaser of our business, subject to this policy.
- Government or regulators where required or authorised by law, or to prevent a serious threat to life, health or safety.
8. Overseas disclosure
Our primary data storage is in Sydney, Australia. Some providers may process information in the United States [and other countries — confirm] for email delivery, backups, AI features or support. We take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles.
9. Security
We use access controls that separate each customer's data, encryption in transit, encrypted backups, audit logging, multi-factor authentication for our administrators and restricted access to production systems. No system is completely secure; please tell us immediately if you suspect misuse.
10. How long we keep it
We keep customer records for as long as the customer's subscription is active, and after it ends for the export and archive period in our customer agreement (up to 12 months), unless the law requires longer or the customer asks for earlier deletion. Meeting recordings are kept for 3 years unless deleted earlier. Backups expire on our backup cycle. We delete or de-identify information we no longer need.
11. Access and correction
You can ask to access or correct your personal information. If it was entered by a customer, contact that customer first; we will help them respond. Otherwise email support@sitevero.com.au. We will respond within 30 days. We may need to verify your identity, and may refuse access where the law allows, giving reasons.
12. Marketing
We send marketing only to business contacts and you can unsubscribe at any time. Service messages about your projects are not marketing and cannot be turned off while you use the service.
13. Cookies and similar technologies
Our app uses browser storage needed to keep you signed in and remember settings. [Our website uses analytics cookies — confirm.] You can control cookies in your browser, but the app may not work without essential storage.
14. Data breaches
If a data breach is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required, working with the relevant customer.
15. Complaints
Please contact us first at support@sitevero.com.au. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied, you can contact the OAIC at oaic.gov.au or 1300 363 992.
16. Changes
We may update this policy. We will post the new version with its effective date and notify customers of material changes.