Privacy Policy

Last updated 23 September 2026. This explains what personal information AProjx collects, why, and what you can ask us to do with it. CEO Restoration & Construction Pty Ltd (ABN 60 695 306 999) is the operator of AProjx and is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Two kinds of people are covered here

This distinction runs through the whole policy, so it is worth being clear up front.

• Our customers — the businesses that subscribe to AProjx, and the staff they invite. We collect their information directly and deal with them about it.
• Their clients and staff — the property owners, tenants, insurers and technicians whose details a subscribing business puts into AProjx. We hold that information on behalf of that business. They decide what goes in and who sees it; we store and process it under their instruction. If you are one of these people, contact the business you dealt with first, and see “If your details are in someone else’s account” below.

What we collect

Account information

• Name, email address and password (stored hashed, never in readable form)
• Business name, ABN, address, phone, website, logo
• Role, and which business you belong to
• Country, currency and timezone — used to format dates, money and spelling

Job and business information you enter

• Jobs, sites, schedules, notes, tasks and messages
• Client contact details, including business and individual names
• Insurance details where relevant: insurer, claim number, assessor contact, date of loss
• Quotes, invoices, payments and purchase orders
• Field reports, room-by-room notes, moisture and psychrometric readings, contents inventories

Photographs and signatures

• Photos taken on site — of property, damage, rooms and contents. These may incidentally include people or identifying features of a home.
• Signaturescaptured on a device when a client signs off work, stored as an image with the signer’s name and the time.

Location information

This is worth calling out plainly. AProjx can record GPS coordinates:

• when a technician clocks in or out;
• when a site visit is started or finished;
• attached to photos taken in the field.

This is captured from the device and only when the person using it allows location access. It is visible to the business that employs them. We do not track anyone’s location in the background or between those events. If you are a technician and you want to know how your employer uses this, ask them — they control it, and they are responsible for telling you about it.

Technical information

• Log data: IP address, browser and device type, pages requested, timestamps
• A session cookie so you stay signed in — we do not use advertising or tracking cookies
• An in-app activity record of significant actions (who created, sent or completed what)

Why we collect it

• To provide AProjx and keep your account working
• To produce the documents you ask for — reports, quotes, invoices
• To run AI features when you choose to use them
• To send service email: sign-in links, password resets, notifications you enable
• To keep the service secure, investigate misuse and meet legal obligations
• To improve AProjx using aggregated, anonymised usage patterns

We do not sell personal information, and we do not use it for advertising.

AI features

When you use an AI feature — generating a report, analysing a photo — the relevant job details and images are sent to Anthropic to produce that output, and the result is returned to your account.

• This happens only when someone in your business triggers an AI feature.
• Your data is not used to train AI models.
• AI output is a draft for you to review — see section 6 of the Terms.
• If you never use the AI features, nothing is sent for this purpose.

Who else handles the data

We use a small number of providers to run AProjx. Each handles data only to provide their service to us. All of them store or process data in the United States, which means your information is held overseas — a disclosure required by Australian Privacy Principle 8.

We may also disclose information where the law requires it, or to protect our rights, safety, or those of our users.

Sharing inside the product

Some features deliberately share information. So that these are not a surprise:

• Your team sees the jobs and clients in your account, according to their role. Office staff see everything; field technicians see the jobs assigned to them and cannot see rates or billing.
• Client portal and share links. If you invite a client to the portal, or share a report by link, the people you give access to can see what you shared. Share links work without a login — treat them as public to anyone holding the link.
• Company network. If you connect with another business on AProjx and send them a work request, quote or invoice, they see what you send them.
• Feature suggestion board. Ideas posted to the shared board are visible to other businesses. Only the title, description, status and vote count are shown — never the author’s name or their company.
• Our support access. A small number of our staff can access account data where it is needed to support you, investigate a fault, or meet a legal obligation. This access is restricted and used sparingly.

How long we keep it

• While your account is active, we keep your data so the service works.
• After cancellation, your data stays available for export for 45 days, then we delete it.
• Deleting inside the app — a job, photo or report — removes it, including the stored files.
• We may keep limited records for longer where the law requires it, such as financial records.
• Backups are kept for a short period for disaster recovery and are overwritten on a rolling basis.

Security

• Traffic is encrypted in transit (HTTPS), and data is encrypted at rest by our hosting providers.
• Passwords are hashed — we never see or store them in readable form.
• Each business’s data is separated, and requests are checked against the account making them.
• Access to production systems is limited to those who need it.

No system is perfectly secure. If a data breach occurs that is likely to cause serious harm, we will notify affected customers and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

Your rights

You can ask us to:

• Access the personal information we hold about you
• Correct anything inaccurate — most of it you can edit yourself in the app
• Delete your account and its data
• Export your data
• Complain if you think we have mishandled your information

Email ceorc.works@gmail.com. We aim to respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.

If your details are in someone else’s account

If a business used AProjx for work at your property, your name, address, photos of your property or your signature may be held in their account. That business decides what is kept and for how long.

Contact that business first — they can answer and act fastest. If you cannot reach them, email us and we will help you make contact and pass on your request.

Where we operate

AProjx is offered to businesses outside the European Union and the United Kingdom, and the countries we serve are listed when an account is created. We are not currently set up to meet the additional obligations that apply to personal data of people in those regions, so we don’t take customers there rather than doing it badly.

Children

AProjx is business software and is not directed at children. We do not knowingly collect information from anyone under 16.

Changes to this policy

We may update this policy. For material changes we will notify account holders by email or in the app. The date at the top always shows the current version.

Contact

CEO Restoration & Construction Pty Ltd
ABN 60 695 306 999 · ACN 695 306 999
1/2 Parkwood Rd, Holsworthy NSW 2173, Australia
ceorc.works@gmail.com