Privacy Policy

1. Introduction

Cluzta ("we," "us," or "our") is operated by Oz Systems Pty Ltd, an Australian company. We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our construction management software platform.

2. Information We Collect

2.1 Account Information

When you register for Cluzta, we collect:

• Name and email address
• Password (stored securely and encrypted)
• Company name and role
• Authentication tokens if you sign up via Google OAuth

2.2 Project and Usage Data

When you use our services, we collect:

• Project information (names, descriptions, locations, dates)
• Files and documents you upload (drawings, CAD files, PDFs, images)
• Financial data (invoices, payments, BOQ, quotes)
• Team and collaboration data (users, tasks, comments)
• Technical usage logs (features used, timestamps, IP addresses)

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your full credit card details on our servers. Stripe collects and processes payment information in accordance with their privacy policy and PCI DSS standards. We receive only limited information such as the last four digits of your card and payment status.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Cluzta platform and its features
• Process your subscription payments and issue receipts
• Generate AI-powered drawings, BOQ, and reports from your project data
• Enable collaboration between team members on shared projects
• Send service notifications, updates, and account-related communications
• Improve our services and develop new features
• Provide customer support and respond to your inquiries
• Ensure security and prevent fraud or unauthorized access
• Comply with legal obligations and enforce our Terms of Service

4. Data Storage and Security

Your data is stored on secure cloud infrastructure. We implement industry-standard security measures including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Regular backups to prevent data loss

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. You use our service at your own risk.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With your team: Project data is shared with team members you invite to collaborate
• Service providers: We use third-party services (cloud hosting, payment processing, analytics) that may access your data solely to provide services on our behalf
• Legal compliance: We may disclose information if required by law, court order, or to protect our rights, safety, or property
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity

6. Your Rights

You have the right to:

• Access and download your personal data
• Correct inaccurate or incomplete information
• Request deletion of your account and associated data
• Export your project data in standard formats
• Opt out of marketing communications (service notifications will still be sent)
• Lodge a complaint with a data protection authority if applicable

To exercise these rights, please contact us at hello@cluzta.com.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you close your account, we will delete or anonymize your personal data within 90 days, unless we are required to retain it for legal, tax, or audit purposes.

8. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze usage patterns. You can control cookie settings in your browser, but disabling cookies may affect platform functionality.

9. Children's Privacy

Cluzta is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our platform. Continued use of Cluzta after changes indicates your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us: