Privacy Policy

APEX BOS · apexbos.cloud · Last updated: [DATE]

The short version: We collect the information we need to run your account and generate your documents — your contact details, your login, your payment details (handled by our payment provider), and the building plans you upload. We use your plans only to produce your outputs and to operate and improve the Service. We don't sell your information. You can access, correct, or delete your information by contacting us.

This Privacy Policy explains how [LEGAL ENTITY NAME / LTD] ("APEX BOS", "we", "us", "our") collects, uses, stores, and protects your personal information when you use the APEX BOS platform, website, and services (the "Service"). We handle personal information in accordance with the Privacy Act 2020 and the Information Privacy Principles.

1. Information we collect

What	Why
Name, company name, email address, phone number	To create and manage your account, communicate with you, and deliver your documents
Username and password	To secure and provide access to your account
Building plans and documents you upload	To generate the construction documents you request
Payment information	Processed by our third-party payment provider to manage your subscription — we do not store full card details ourselves
Usage data (jobs run, documents generated, log and technical data)	To operate, secure, support, and improve the Service
Communications you send us	To respond to enquiries and provide support

2. How we use your information

We use your information to:

Create and administer your account and subscription;
Process the plans you upload and generate your requested documents;
Deliver documents and notifications to you;
Take payment and manage billing through our payment provider;
Provide support and respond to your enquiries;
Operate, secure, maintain, and improve the Service, including improving the quality and accuracy of our outputs;
Meet our legal and regulatory obligations.

We do not sell your personal information, and we do not share your uploaded plans with other customers.

3. Your uploaded plans

The building plans and documents you upload remain yours. We use them only to provide the Service to you — to generate your outputs and to operate and improve the platform. We retain your uploads and outputs so you can access them and so we can support and improve the Service. You can ask us to delete your uploaded plans and generated documents by contacting us (see section 9), subject to any records we are required to keep by law.

4. Third-party services

We use trusted third-party providers to run the Service. These may include:

Hosting and infrastructure providers, who store and process data on our behalf;
An AI processing provider, which processes the content of your plans to generate your documents;
A payment provider, which securely handles your subscription payments;
Email delivery services, used to send you account and document notifications.

These providers only receive the information they need to perform their function, and are required to protect it. Some providers may process or store data outside New Zealand; where that occurs, we take reasonable steps to ensure your information remains protected to a comparable standard.

5. Storage and security

We take reasonable steps to protect your information from loss, misuse, unauthorised access, and disclosure. This includes access controls and secure transmission where appropriate. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Retention

We keep your information for as long as your account is active and for a reasonable period afterwards, to provide the Service, meet our legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we take reasonable steps to delete it or de-identify it.

7. Cookies and website data

Our website may use cookies and similar technologies to keep you logged in, remember preferences, and understand how the site is used so we can improve it. You can control cookies through your browser settings; disabling them may affect how the site works.

8. Sharing and disclosure

We may disclose your information:

To the third-party providers described above, to run the Service;
Where required by law, or to respond to lawful requests from authorities;
To protect our rights, safety, or property, or those of others;
In connection with a sale or transfer of our business, in which case your information may transfer as part of that transaction (and remain subject to privacy protections).

9. Your rights

Under the Privacy Act 2020, you have the right to:

Access the personal information we hold about you;
Request correction of information that is inaccurate;
Request deletion of your information, subject to any records we are legally required to keep.

To exercise any of these rights, contact us at [CONTACT EMAIL]. We will respond within the timeframes required by law.

10. Complaints

If you have a concern about how we have handled your personal information, please contact us first at [CONTACT EMAIL] so we can try to resolve it. If you are not satisfied, you can contact the Office of the Privacy Commissioner (New Zealand) at privacy.org.nz.

11. Changes to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will give you reasonable notice. The "last updated" date at the top shows when this policy was last revised.

12. Contact

Questions about this Privacy Policy, or about how we handle your information, can be sent to [CONTACT EMAIL].

Note for the operator (remove before publishing): This is a plain-language starting draft, not legal advice. Have a New Zealand lawyer or privacy adviser review it before you rely on it, and make sure it accurately reflects your actual data practices (your real hosting, AI, payment, and email providers, where data is stored, and how long you keep it). Replace all [RED PLACEHOLDERS] with your real details before publishing. If any of your providers store data overseas, confirm section 4 reflects that accurately.