Privacy Policy
Last updated: 17 August 2026
1. Who we are
The Construction Contracts Co. ("TCCC", "we", "us", "our") operates the QLD Subcontract Risk Scanner (the "Scanner") and Claim Pro, our payment dispute assessment tool ("Claim Pro") — together, the "Tool". This Privacy Policy explains how we handle personal information collected through both.
This Policy is written to comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
2. What we collect
When you use the Tool, we collect:
- Email address — supplied by you to receive your report or assessment;
- IP address — automatically captured by our server for security and abuse-prevention purposes;
- Browser identifier (user agent) — automatically captured for compatibility and abuse-prevention purposes;
- File metadata — the file name and file size of any document you upload;
- Timestamp — the date and time the scan or assessment was run.
When you use Claim Pro, we additionally collect the details you choose to give us about your dispute:
- Questionnaire answers — the state, the amount in dispute, how you describe the relationship with the builder, your preferred outcome, the dispute type, how long it has been outstanding, and the agreed payment terms;
- Pasted correspondence — any email or message text you paste instead of, or as well as, uploading files. We treat pasted text exactly as we treat an uploaded document.
3. Your uploaded documents
We store everything you upload in private, access-controlled storage located in Sydney, Australia. It is never made publicly available, never indexed by search engines, and never shared with any other user of the Tool.
Scanner — we keep an uploaded subcontract for up to twelve (12) months from the date of the scan and then delete it permanently. We use it to generate your report, to improve the accuracy of the Tool, and to produce de-identified market benchmarks — aggregate statistics about what is and is not normal in Australian subcontracts, segmented by state. Benchmarks never identify you, your business, the document, or any party named in it.
Claim Pro — dispute documents (payment claims, correspondence, photographs, contracts) and pasted text are more sensitive, so we keep them for a shorter period: up to one hundred and eighty (180) days from the date of the assessment, and then delete them permanently. We use them to generate your assessment and to improve the accuracy of the Tool.
You can ask us to delete your documents and your records at any time — see section 9.
4. Why we collect this information
We collect the information described in section 2 to:
- deliver the report or assessment to you;
- generate the assessment itself — Claim Pro's output depends on the dispute details you provide;
- enforce fair-use limits so the Tool stays available and free for everyone;
- detect and prevent abuse, including circumvention of use limits;
- communicate with you about the Tool, including responses to support enquiries;
- understand how the Tool is used so we can improve it; and
- produce de-identified market and dispute benchmarks, as described in sections 3 and 10.
5. Marketing communications
By providing your email address, you consent to us sending you occasional emails about the Tool, updates to The Construction Contracts Co., new resources, or related products and services we think may be useful to you. You can unsubscribe from these emails at any time using the unsubscribe link in the email or by emailing mat@theconstructioncontracts.co.
6. Who we share with
We use the following third-party service providers in the operation of the Tool. Personal information may be processed by these providers in the course of providing their services to us:
- Anthropic, PBC (United States) — provides the AI model that analyses uploaded documents, images, pasted text, and questionnaire answers;
- Vercel Inc. (United States, with data hosting in Sydney) — hosts the Tool;
- Supabase Inc. (with data hosted in Sydney, Australia) — stores records and uploaded documents;
- Resend, Inc. (United States) — delivers the email copy of your report or assessment, when you ask for one.
We do not sell your personal information to any third party. We do not share your personal information with any third party for that party's own marketing purposes. We do not disclose your documents, your dispute details, or your assessment to any other party to your contract or dispute.
7. Where your data is stored
Records (email, IP, file metadata, questionnaire answers, timestamps) and uploaded documents are stored on Supabase infrastructure located in Sydney, Australia. Uploaded documents sit in private buckets that are not readable without server-side credentials.
The content of your uploaded documents and images, your pasted text, and your questionnaire answers are transmitted to Anthropic's servers (United States) for processing by the AI model and are not retained by Anthropic for training purposes under their commercial API terms.
8. How long we keep it
Scanner documents are deleted permanently within twelve (12) months of the scan. Claim Pro documents and pasted correspondence are deleted permanently within one hundred and eighty (180) days of the assessment.
We retain scan and assessment records — your email, IP address, file metadata, timestamps, and (for Claim Pro) your questionnaire answers and the generated assessment — for up to twenty-four (24) months, after which they are deleted or de-identified.
We may retain de-identified data extracted from documents and disputes — such as payment terms, liquidated damages rates, notice periods, dispute types, amount ranges, and assessment outcomes by state — and anonymised, aggregated usage statistics indefinitely, for benchmarking, operational, and reporting purposes. This data contains no personal information and cannot be used to reconstruct your documents or identify your dispute.
9. Your rights
You have the right to:
- request a copy of the personal information we hold about you;
- request correction of any personal information that is inaccurate or out of date;
- request deletion of your personal information, your uploaded documents, and your scan or assessment records;
- withdraw consent to marketing communications.
To exercise any of these rights, contact us at mat@theconstructioncontracts.co. Deletion requests are actioned within seven (7) days, no questions asked. We will respond to any other request within thirty (30) days.
10. De-identified benchmark data
Separately from your personal information, we derive structured commercial data from what runs through the Tool. From Scanner contracts: figures such as payment terms, liquidated damages rates, retention percentages, and notice periods, together with the trade, the project type, the contract value, and the name of the head contractor or principal named in the contract. From Claim Pro assessments: the state, the dispute type, the amount range, and the shape and outcome of the assessment.
This data describes the contract or the dispute, not you. It carries no name of yours, no business of yours, no email address, and no link back to you in anything we publish. We keep it indefinitely and use it to produce aggregate benchmarks and to improve the Tool. The licence under which we do this is set out in section 9 of our Terms of Use.
We publish benchmarks only in aggregate, drawn from many contracts and disputes. We do not publish, sell, or disclose the terms of any individual contract or the facts of any individual dispute, and we do not publish benchmarks that name a head contractor, principal, builder, or any other party.
11. Data breaches
If we become aware of unauthorised access to, or disclosure of, personal information we hold, and that access or disclosure is likely to result in serious harm, we will assess it and notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).
12. Security
We use industry-standard technical and organisational measures to protect personal information, including encrypted connections (HTTPS), encrypted storage of credentials, and access controls. No system is completely secure, however, and we cannot guarantee the absolute security of any information transmitted to or stored by the Tool.
13. Complaints
If you believe we have breached the Australian Privacy Principles or otherwise mishandled your personal information, contact us at mat@theconstructioncontracts.co. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
14. Changes to this Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Changes do not apply retrospectively to material you uploaded before the change — the policy in force at the time of upload continues to govern that material.