Draft — pending legal review.

Privacy Policy

This notice explains how Construction AI handles personal data, following the Personal Data Protection Act 2010 (Malaysia).

1. What we collect

• Account details: your name, company name, email address and password (stored only as a secure hash).
• Photos you take or upload as evidence.
• Voice recordings you make in the app.
• Transcripts of those recordings, and the notes you type.
• Project data: project and client names, site details, events, costs, dates, generated documents and status history. This may include names and details of other people (for example your client's staff).
• Basic technical data needed to run the service (for example login sessions and usage counts).

2. Why we use it

To provide the service: to log you in, store your site records, transcribe recordings, extract facts, prepare documents you ask for, prevent abuse (daily limits) and contact you about your account. We do not sell your data or use it for advertising.

3. Where it is stored

Account data, project data and files are stored with Supabase in its Singapore region. The website is hosted by Vercel.

4. AI processing by OpenAI

Your voice recordings are sent to OpenAI for transcription, and transcripts, notes and confirmed event details are sent to OpenAI to extract facts and write document text. OpenAI processes this data on our behalf and may process it outside Malaysia. Photos are not sent to OpenAI.

5. How long we keep it

We keep your data while your account is active. When you delete your account on the Account page, your account, projects, events, photos, audio, transcripts and documents are deleted straight away. Copies in backups are removed when those backups expire. Documents you have already sent to others are outside our control.

6. Your rights

You can ask to access or correct your personal data, or ask us to delete it, by emailing 0909makkelly@gmail.com. You can also delete everything yourself at any time on the Account page. We will reply within 21 days.

7. Security

Data is sent over encrypted connections. Each account can only see its own projects; files are only shared through short-lived links.

8. Changes

We will tell you about important changes to this policy in the app or by email.