Privacy Policy

The Construction Contracts Co. ("TCCC", "we", "us", "our") operates the QLD Subcontract Risk Scanner (the "Tool"). This Privacy Policy explains how we handle personal information collected through the Tool.

This Policy is written to comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

When you use the Tool, we collect:

• Email address — supplied by you to receive your report;
• IP address — automatically captured by our server for security and abuse-prevention purposes;
• Browser identifier (user agent) — automatically captured for compatibility and abuse-prevention purposes;
• File metadata — the file name and file size of any document you upload;
• Scan timestamp — the date and time the scan was run.

We do not store the contents of any document you upload. Documents are processed in memory by our server for the sole purpose of generating your report, and are discarded immediately after the report is produced. We do not have a copy of your contract on our systems after the scan completes.

We collect the information described in section 2 to:

• deliver the report to you;
• enforce our use limits (one scan per email per 30 days on the free tier);
• detect and prevent abuse, including circumvention of use limits;
• communicate with you about the Tool, including responses to support enquiries; and
• understand how the Tool is used so we can improve it.

By providing your email address, you consent to us sending you occasional emails about the Tool, updates to The Construction Contracts Co., new resources, or related products and services we think may be useful to you. You can unsubscribe from these emails at any time using the unsubscribe link in the email or by emailing mat@theconstructioncontracts.co.

We use the following third-party service providers in the operation of the Tool. Personal information may be processed by these providers in the course of providing their services to us:

• Anthropic, PBC (United States) — provides the AI model that analyses the document text;
• Vercel Inc. (United States, with data hosting in Sydney) — hosts the Tool;
• Supabase Inc. (with data hosted in Sydney, Australia) — stores scan records.

We do not sell your personal information to any third party. We do not share your personal information with any third party for that party's own marketing purposes.

Scan records (email, IP, file metadata, timestamps) are stored on Supabase infrastructure located in Sydney, Australia.

The text content of your uploaded document is transmitted to Anthropic's servers (United States) for processing by the AI model and is not retained by Anthropic for training purposes under their commercial API terms. The text is also not retained by us after the report is generated.

We retain scan records for up to twenty-four (24) months from the date of the scan, after which they are deleted. We may retain anonymised, aggregated usage statistics (e.g. total scans per month) indefinitely for operational and reporting purposes — these contain no personal information.

You have the right to:

• request a copy of the personal information we hold about you;
• request correction of any personal information that is inaccurate or out of date;
• request deletion of your personal information;
• withdraw consent to marketing communications.

To exercise any of these rights, contact us at mat@theconstructioncontracts.co. We will respond within thirty (30) days.

We use industry-standard technical and organisational measures to protect personal information, including encrypted connections (HTTPS), encrypted storage of credentials, and access controls. No system is completely secure, however, and we cannot guarantee the absolute security of any information transmitted to or stored by the Tool.

If you believe we have breached the Australian Privacy Principles or otherwise mishandled your personal information, contact us at mat@theconstructioncontracts.co. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date.