Privacy Notice

This notice explains how Ryan O'Connor ("we", "us") collects, uses and protects personal data when you use BuildWiseOS. For the purposes of UK/EU data protection law, Ryan O'Connor is the data controller of the personal data described below.

What we collect and why

• Account information — your name, email address, hashed password, company name. Used to create and secure your account and to provide the Service (legal basis: contract).
• Project content you upload — drawings, specifications, quotations, materials lists, schedules. Used solely to deliver the Service to you (contract).
• Usage and device data — pages visited, actions taken, browser type, device identifiers, IP address, timestamps. Used to operate, secure and improve the Service (legitimate interests).
• Support messages — the contents of emails and support requests you send us (contract / legitimate interests).
• Marketing preferences — where you opt in, we may send product updates (consent).

Payment card details are collected directly by our Merchant of Record (Paddle) and are never stored on BuildWiseOS systems.

Who we share data with

• Service providers / subprocessors — cloud hosting (Cloudflare, Supabase), email delivery, product analytics and error monitoring, engaged under written contracts to process data on our instructions.
• Paddle, our Merchant of Record, receives the information necessary to process payments, manage subscriptions, comply with tax obligations and issue invoices.
• AI providers — where you use AI features, the relevant project content is sent to our AI provider(s) to generate responses; the content is not used to train third-party foundation models.
• Professional advisers — legal, accounting and audit advisers, where necessary.
• Authorities — where we are required to disclose by law or to protect rights, property or safety.

International transfers

Personal data may be transferred outside the UK/EEA to service providers based in other jurisdictions. Where this happens we rely on appropriate safeguards, including the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or adequacy decisions.

Retention

We retain personal data for as long as your account is active. When you close your account or ask us to delete your data, we delete or anonymise it within a reasonable period, subject to legal retention obligations (for example, tax and accounting records).

Your rights

Under UK/EU GDPR you have the right to access, rectify, erase, restrict or object to our processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority. We will respond to requests within one month.

Security

We use appropriate technical and organisational measures, including transport encryption (HTTPS/TLS), encrypted storage at rest, access controls and audit logging, to protect personal data against unauthorised access, alteration, disclosure or destruction.

Cookies

BuildWiseOS uses cookies that are strictly necessary to keep you signed in and to secure the Service. We use limited analytics cookies to understand how the Service is used. You can manage cookies through your browser settings; blocking strictly necessary cookies will prevent parts of the Service from working.

Children

BuildWiseOS is not intended for children under 16 and we do not knowingly collect their personal data.

Changes

We may update this notice from time to time. Material changes will be notified via the Service or by email.

Contact

Data protection queries: info@buildwiseos.co.uk.