Privacy Policy

BuildPanda is the controller of the personal information processed about you when you use the Services, except where we process information on behalf of our business customers (see "How we handle customer project data" below), in which case we act as a processor for that customer.

If you have any questions about this policy or how we handle your information, contact us at hello@buildpanda.ai.

We collect the following categories of personal information:

• Account information: your name, email address, phone number, password, company or organisation, role, and profile details you provide when you register or are invited to a project.
• Project information: data you and your team enter into the platform, such as project details, schedules and activities, budgets and finances, milestone payments, documents and drawings, daily logs, inspections, risks, materials and messages.
• Uploaded content: files, documents, photos and drawings you upload, and any information contained within them.
• Usage information: how you interact with the Services, including pages viewed, features used, actions taken, and timestamps.
• Device and technical information: IP address, browser type, device identifiers, operating system, and similar diagnostic data collected automatically.
• Communications: messages, support requests and feedback you send to us.
• Lead and enquiry information: details you submit through our website forms, such as when you request a consultation or a demo.

We use personal information to:

• Provide, operate and maintain the Services and your account.
• Process and display your project data, documents and communications to authorised members of your project.
• Power platform features such as scheduling, finances, milestone payments, document management and inspections.
• Provide AI-assisted features (Panda AI) that analyse your project's own data and documents to answer your questions and surface insights, on your request.
• Communicate with you about your account, security, updates, and support.
• Send service and, where permitted, marketing communications, which you can opt out of.
• Monitor, secure, troubleshoot and improve the Services, and develop new features.
• Detect, prevent and respond to fraud, abuse, security incidents and unlawful activity.
• Comply with legal obligations and enforce our terms.

When an organisation uses BuildPanda to run its projects, that organisation controls the project data it and its members put into the platform. For that data we act as a service provider (processor) and process it on the organisation's instructions to provide the Services.

If you are a member, client or participant of a project, the organisation that owns the project is responsible for how that project's data is used and shared within the project. Please direct requests about that data to the organisation. We will assist our customers in responding to such requests as required by law.

Some features use artificial intelligence to help you work, including extracting information from documents you upload, structuring imported schedules, and answering questions about your project. These features operate only on the data within your own project and only when you use them.

We may use third-party AI providers to process the content you submit to these features. We do not permit those providers to use your content to train their models, and we send only the data needed to perform the requested task. AI output can contain mistakes; you should verify important information.

We do not sell your personal information. We share information only as follows:

• Within your project: with other authorised members, clients and participants of the projects you belong to, according to their roles and permissions.
• Service providers: with vendors who help us run the Services (for example cloud hosting, file storage, email delivery, and AI processing), under contracts that require them to protect your information and use it only for us.
• Shared links: when you create a shareable link to a file, anyone with the link can view that file until it expires or you revoke it.
• Legal and safety: when required by law, regulation, legal process, or to protect the rights, property or safety of BuildPanda, our users or others.
• Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to this policy.
• With your consent: for any other purpose disclosed to you at the time.

We and our service providers may process and store information in countries other than where you live. Where we transfer personal information across borders, we take steps to ensure it remains protected and that transfers comply with applicable data protection laws.

We keep personal information for as long as your account is active or as needed to provide the Services, and afterwards as required to comply with legal obligations, resolve disputes, and enforce our agreements. Project data is retained according to the controlling organisation's settings and instructions. When information is no longer needed, we delete or anonymise it.

We use technical and organisational measures designed to protect personal information, including encryption in transit, access controls, and secure infrastructure. Files are stored securely and shared links use unguessable tokens. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, and you are responsible for keeping your account credentials safe.

Depending on where you live, you may have rights to access, correct, update, delete, restrict, or object to the processing of your personal information, to data portability, and to withdraw consent. You may also opt out of marketing communications at any time.

To exercise your rights, contact us at hello@buildpanda.ai. Where the data relates to a project controlled by an organisation, we may direct your request to that organisation. We will respond in accordance with applicable law and may need to verify your identity first.

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Services, and understand how the Services are used. You can control cookies through your browser settings, but disabling them may affect how the Services work.

The Services are intended for business use and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect means you accept the updated policy.

If you have questions, concerns or requests regarding this Privacy Policy or your personal information, please contact us at hello@buildpanda.ai.