Privacy Policy

Core Estimator Software Pty Ltd

Introduction

At Core Estimator Software Pty Ltd ("Core Estimator", "we", "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information, and is intended to reflect the Australian Privacy Principles under the Privacy Act 1988 (Cth).

This policy covers our website (coreestimator.com.au), the Core Estimator web app, the Core Estimator mobile app for iOS and Android, and the Core Estimator connector for AI assistants.

By using Core Estimator, you consent to the data practices described in this policy.

Our Customers and Their Data

Core Estimator is used by businesses such as builders, estimators and sub-contractors (our "customers"). Our customers add their own staff, clients, suppliers and trades to the service, and enter information about their jobs.

The customer decides what information it enters about other people, who in its business can see it, and how it is used. We hold that information on the customer's behalf in order to provide the service to them, and access it only as authorised by the customer or as needed to provide, support and secure the service.

We are not responsible for how a customer collects, uses or discloses personal information it enters into Core Estimator. Customers are responsible for meeting their own privacy obligations.

If you ask us for access to, correction of, or deletion of information that a customer controls, we may refer your request to that customer, or work with them to respond to it.

Information We Collect

We collect several types of information from and about users of our service:

Account and Billing Information: Name, email address, phone number, company details, and the details we need to invoice you.

Usage Data: Information about how you use our service, including your project data, estimates, calculations, and interaction patterns with our software.

Technical Data: Information about your device, browser, IP address, and how you interact with our service.

Project Files: Any files, including 2D and 3D models, PDFs, photos, and other documents you upload to our service. Uploaded files may contain personal information about other people, such as your clients' names and site addresses. You are responsible for ensuring you are entitled to upload it.

Work Records: Timesheets, site diary entries, tasks, notes and comments entered in the web app or the mobile app.

The Core Estimator Mobile App

The mobile app is for the staff of Core Estimator customers. Accounts are set up by the employer; the app does not create accounts. The app sends us the timesheets, site diary entries and photos you record, linked to your account.

Location: Where your phone is when you clock on or off, or add time by hand. Location is collected only while the app is open and only if you allow it, and is used to record whether time was entered on site. You can record your time without it.

Photos: Location data stored inside a photo is removed before it is uploaded.

Voice: Dictation is processed on your phone. Audio is not sent to us.

Your employer, and the people in its business it gives access to, can see what you record in the app, and may be able to see where your time was recorded and whether it was on site. You can turn off location, camera and microphone access at any time in your phone's settings.

AI Features

You can connect an AI assistant, such as Claude or ChatGPT, to your Core Estimator account. Once connected, the assistant can read and change the information your account can access, when you ask it to. The information it reads, together with your requests, is sent to the AI provider and is handled under your, or your organisation's, agreement with that provider, not this policy. Nothing is sent to an AI provider through the connector unless you connect it, and you can disconnect it at any time.

If we add AI features that send your information to an AI provider, we will update this policy to name the provider and say what is sent before the feature is released.

AI output can be wrong. Check anything an AI feature produces before you rely on it.

How We Use Your Information

We use the information we collect to:

Provide and maintain our service, including processing your calculations and estimates, recording timesheets and site diary entries, and syncing the mobile app.

Notify you about changes to our service and updates to your account.

Provide customer support and respond to your requests.

Improve our service through analysis of usage patterns and technical data, including in de-identified and aggregated form to develop and improve features such as automated measurement.

Invoice you and prevent fraud.

Keep the service secure, including investigating misuse.

Send you marketing communications about our products and services. Every marketing email we send includes a functional unsubscribe link, and you can opt out at any time.

Comply with legal obligations and enforce our terms of service.

Data Storage and Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Information sent between our apps and our servers is encrypted in transit.

Your data is stored on secure Amazon Web Services (AWS) servers located in Sydney, Australia.

While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.

Data Retention

We keep a customer's data, including timesheets, location records, site diary entries and photos, while the customer's account is open.

When an account is closed, the customer can ask for a copy of its data within 90 days, which we will provide where practical. We may keep the data after that so the account can be reactivated with its history, until the customer asks us to delete it.

Items deleted in Core Estimator are removed from view but may remain in our systems until they are erased.

We will erase data when asked (see section 11), except where the law requires it to be kept. Copies held in our backups are overwritten in the normal backup cycle.

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

Service providers who help us operate our business and the service, such as hosting, email delivery, plan viewing, address mapping, real-time notifications, customer support, accounting and invoicing, analytics and marketing.

Services you choose to connect to your account, such as Xero or an AI assistant, to the extent needed for that connection to work.

The customer that set up your account, as described in sections 2 and 4.

Law enforcement or other authorities if required by applicable laws.

Professional advisers including lawyers, auditors, and insurers.

A successor entity in connection with a merger, acquisition, corporate reorganisation, or sale of all or substantially all of our business or assets, in which case the successor will remain bound by this Privacy Policy in respect of the transferred information.

All third-party service providers are contractually obligated to protect your information.

Overseas Disclosures

Your data is stored in Australia. Some of our service providers are located overseas, mainly in the United States, and may store or access personal information there or in other countries. These include our website analytics and advertising providers, customer relationship management and support chat, plan viewing, address mapping, real-time notifications, and accounting and invoicing software, and any service you choose to connect, such as an AI assistant.

Where we disclose personal information to overseas recipients, we take reasonable steps to ensure they handle it in a manner consistent with the Australian Privacy Principles.

Access, Correction and Deletion

You can ask us for access to the personal information we hold about you, ask us to correct it, or ask us to delete it or your account. You can also withdraw any consent you have given us, and opt out of marketing at any time using the unsubscribe link in any marketing email.

To make a request, email info@coreestimator.com.au from the email address on your account and tell us what you would like us to do. We may need to confirm your identity first.

If your account was set up by your employer, you can also ask your employer, who can remove your access and your records. If you ask us, we will work with your employer on the request, as your timesheets and diary entries form part of their business records.

We will respond within 30 days. We may need to keep some information where the law requires us or the customer to keep it, such as tax, invoicing and employment records. If we cannot do what you ask, we will tell you why.

Cookies, Analytics and Advertising

We use cookies and similar tracking technologies on our website and web app to operate our service, understand how it is used, and measure our marketing.

Analytics: We use Google Analytics, Hotjar and Microsoft Clarity to understand how visitors use our website, including session activity and interaction patterns.

Advertising: We use the Meta Pixel and Google advertising tools to measure the effectiveness of our advertising and to show you relevant ads.

Customer relationship management and support: We use HubSpot to manage our communications with you, and Intercom for in-app support chat and help articles.

The mobile app does not use cookies or any of these tools.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent, and you can opt out of Google Analytics via Google's browser opt-out and manage ad preferences in your Meta account settings. Note that if you disable cookies, some features of our service may become inaccessible or not function properly.

Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us at info@coreestimator.com.au. We will acknowledge your complaint and aim to respond within 30 days.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

You are advised to review this Privacy Policy periodically for any changes.

Your continued use of the service after we post any modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide by them.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Core Estimator Software Pty Ltd

ABN: 17 665 892 866

Email: info@coreestimator.com.au