Privacy Policy

This Privacy Policy explains how Buildipedia ("we", "us" or "our") collects, holds, uses and discloses personal information through our website, marketplace, provider portal and related services (the Platform).

1. Information we collect

The information we collect depends on how you use the Platform and may include:

  • Account details such as your name, email address, profile image, time zone, authentication identifiers and preferences;
  • Provider and business information, including business contact details, professional experience, licensing jurisdictions, service areas, services, availability, pricing and uploaded images;
  • Booking information, including participant details, dates, times, property location, project notes, intake answers and booking status;
  • Payment and transaction records such as amounts, currency, status and account identifiers;
  • Messages, attachments, contact requests, expressions of interest, ratings and reviews; and
  • Technical and usage information such as IP address, browser and device information, access times, requested pages, referring URLs, cookies and security or diagnostic logs.

Information you choose to publish in a provider profile, service, directory listing or review may be visible to other users and the public.

2. Google and Microsoft calendar data

If you connect Google Calendar or Microsoft Outlook, we may process your connected account identifier and email address, encrypted OAuth tokens, calendar identifiers, calendar names and time zones, calendar selections, free/busy information and booking events that Buildipedia creates or manages on your behalf.

We use this information only to show your available calendars, prevent scheduling conflicts and create, update or delete Buildipedia booking events on calendars you select. We do not use calendar information for advertising, credit assessment, unrelated profiling or training general-purpose artificial-intelligence models.

Buildipedia's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

We do not permit people to read Google user data unless you give explicit permission for a specific support purpose, it is necessary for security or abuse investigation, or it is required by law. We disclose Google user data only to service providers necessary to operate the requested feature or where otherwise permitted by Google's Limited Use requirements.

3. How we collect information

We collect personal information:

  • Directly from you when you use the Platform or contact us;
  • From another user who adds you to a booking or provider team;
  • From services you choose to connect, including calendar, authentication and payment services;
  • Automatically through essential Platform operation and security; and
  • From public registers, professional directories, business websites and data providers for professional directory listings.

4. How we use information

We use personal information to:

  • Create, authenticate, secure and administer accounts;
  • Operate marketplace listings, enquiries, bookings, messages and reviews;
  • Check availability and synchronise bookings with connected calendars;
  • Process payments, refunds, provider payouts and marketplace fees;
  • Send service, security, booking and support communications;
  • Prevent fraud, abuse and security incidents;
  • Maintain and improve the Platform; and
  • Comply with legal, regulatory, tax, accounting and reporting obligations.

5. When we share information

We disclose personal information where reasonably necessary to operate the Platform, provide requested services, protect users and the Platform, complete a transaction, comply with law or carry out your instructions. Recipients may include:

  • Clients, providers, team members and booking participants;
  • People who can view information you choose to make public;
  • Service providers that support hosting, authentication, data storage, payments, communications, calendars, mapping, support, security and Platform operations;
  • Professional advisers, insurers and parties involved in a business transfer;
  • Regulators, courts and law-enforcement bodies where legally required; and

We do not sell personal information or Google user data.

6. Payments

Our payment provider collects and processes payment card details, bank account details, identity-verification information and other payment information under its own privacy policy. Buildipedia does not store complete payment card or bank account numbers.

7. Cookies

We use cookies and similar technologies needed to keep users signed in, share authentication across Buildipedia subdomains, remember account selections, protect OAuth flows and provide payment, messaging and security functions. Blocking these cookies may prevent parts of the Platform from working.

8. Overseas processing

Some service providers operate outside Australia or use infrastructure and subprocessors in other countries, including the United States. Overseas recipients may be subject to different privacy laws and lawful government-access requirements. Where required, we take reasonable steps to ensure overseas recipients handle personal information consistently with applicable Australian privacy requirements.

9. Security

We use safeguards designed to protect personal information, including access controls, encryption and restricted credentials. No method of transmission or storage is completely secure.

10. Retention and deletion

We retain personal information only for as long as reasonably necessary to provide the Platform, maintain security, resolve disputes and meet legal, tax, accounting and reporting obligations. When information is no longer required, we take reasonable steps to delete or de-identify it.

Disconnecting a calendar account deletes the stored OAuth credential and associated calendar selections from our active application database. It does not automatically delete events already created in your calendar or necessarily revoke authorisation at Google or Microsoft. You can also revoke access through your Google or Microsoft account settings.

11. Access, correction and privacy requests

You may ask to access or correct personal information we hold about you, or request deletion of information we are not required to retain. We may need to verify your identity and may decline a request where permitted by law.

To request account, Google user data or calendar data deletion, email support@buildipedia.au.

12. Children

The Platform is not directed to children under 18, and we do not knowingly collect personal information from children without appropriate authorisation.

13. Complaints and contact

For privacy questions, requests or complaints, contact our Privacy Officer at support@buildipedia.au. We will investigate and respond within a reasonable period. If you are not satisfied, you may be entitled to contact the Office of the Australian Information Commissioner or another regulator with jurisdiction.

14. Changes to this policy

We may update this policy when the Platform, our practices or applicable law changes. We will publish the updated version here and change the last updated date. If a change materially affects how we use information previously collected from Google APIs, we will provide appropriate notice and obtain consent where required before using it for a new purpose.

Last updated: 10 August 2026