Effective date: 4 October 2026
This Privacy Policy explains how BuildHQ Pty Ltd (ABN 28 606 828 871) (“Snagster”, “we”, “us”) collects, holds, uses, and discloses personal information in connection with the Snagster building-defect tracking application (the “Service”). We handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
Account information — name, email address, and password (your password is handled by our authentication provider and is never visible to us in plain text) when you sign up or are invited to join an organization (“Org”) or contractor company.
Organization and project data — Org name, project details, team membership, and per-user access roles.
Defect data — defect descriptions, location tags, priority, due dates, status history, closeout submissions, and comments entered by you or others with access to a project.
Photos — photos attached to defects and closeout submissions. Because these are taken on active construction/inspection sites, they may incidentally include images of people, vehicles, license plates, or other identifiable details in the background. Photos are treated as part of the defect record they’re attached to.
Technical information — standard request metadata (such as IP address and browser type) processed by our hosting and edge-network infrastructure as part of serving the Service, and authentication session tokens stored in your browser to keep you signed in.
We do not currently collect payment information — the Service does not yet have a paid subscription tier.
We use personal information to:
We do not sell personal information, and we do not use it for advertising.
Personal information is visible within your Org according to the Service’s built-in roles and permissions (for example, a contractor only sees defects assigned to their own company; an Org’s data is never visible to another Org).
We use the following infrastructure providers to run the Service, each of which processes data on our behalf as a service provider:
australia-southeast1 (Sydney) region. Google is a global company and account/authentication metadata may be processed on infrastructure outside Australia in accordance with Google’s own privacy and data-processing terms.This means some personal information — in particular, defect photos and general request metadata — may be disclosed to or processed by these providers outside Australia (an “APP 8” overseas disclosure). We otherwise do not share personal information with third parties except: where required by law; to protect the rights, safety, or property of Snagster, our users, or the public; or with your consent.
Access to data is enforced by database security rules scoped to your Org and role, and photos are served through authenticated routes rather than a publicly readable bucket. No Snagster administrator has a standing elevated-privilege credential to your Org’s data outside of these same access rules. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We retain Org and defect data for as long as your Org’s account is active, so that historical records remain available for reporting. If a contractor or employee is removed from an Org, their access is revoked, but records they created (e.g. comments or closeout submissions) may remain as part of the project history. To request export or deletion of your Org’s data, contact us at the address below.
The Service uses browser local storage/session tokens to keep you signed in, and a minimal service worker solely to support “Add to home screen” installation on supported devices — it does not track your activity or cache your data for analytics purposes. We do not currently use third-party advertising or analytics cookies.
You can view and update most of your own account information from the Account page in the Service at any time. Under the Australian Privacy Principles, you may also request access to, or correction of, personal information we hold about you by contacting us below. We will respond within a reasonable period.
If you have a concern about how we’ve handled your personal information, please contact us first at the address below so we can try to resolve it. If you’re not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
The Service is intended for use by construction and site-inspection professionals and is not directed at, or knowingly used to collect information from, children.
We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify Org admins before the change takes effect.
For privacy questions, access/correction requests, or to request export or deletion of your data, contact hello@snagster.com.au.