Privacy Policy

BuildTrack Pro ("we", "us", "our") provides construction management software for contractors and related businesses. This Privacy Policy explains how we handle personal data when you use our website, demo forms and the BuildTrack Pro service (together, the "Service"). We aim to align with the Malaysian Personal Data Protection Act 2010 (PDPA) and good industry practice.

1. Who we are

The data controller for the Service is the entity operating BuildTrack Pro as described on your subscription or order. For questions about this policy, contact us using the details shown in the Service (for example Settings or your account administrator), or the contact channel we publish on our website.

2. Data we collect

We may collect:

• Account and profile data — name, email, phone, company name, role, and credentials you provide when registering or using the Service.
• Business and project data — information you enter into the Service (for example clients, jobs, quotations, invoices, schedules, team members and files you upload).
• Technical and usage data — IP address, device and browser type, approximate location, log data, cookies and similar technologies, and how you interact with the Service.
• Marketing and lead data — information you submit via demo requests, contact forms or similar features on our marketing site.
• Payment data — billing details processed by our payment partners; we do not store full card numbers on our own servers where card processing is delegated to a certified provider.

3. How we use your data

We use personal data to:

• Provide, operate and improve the Service;
• Authenticate users, enforce security and prevent abuse;
• Communicate with you about the Service, support, and important notices;
• Send marketing where permitted by law and your preferences;
• Meet legal, regulatory and tax obligations;
• Analyse usage in aggregate or de-identified form to improve the product.

4. Legal bases (where applicable)

Depending on context, we rely on performance of a contract, legitimate interests (such as securing the Service and improving features), consent (where required), and legal obligation.

5. Sharing and processors

We may share data with subprocessors that help us host, analyse, email, authenticate, take payments or otherwise run the Service (for example cloud hosting, analytics, email delivery). They may only use data on our instructions and subject to appropriate safeguards. We may disclose data if required by law or to protect rights, safety and security.

6. International transfers

Your data may be processed in Malaysia and other countries where our providers operate. Where we transfer personal data across borders, we take steps that are appropriate for the circumstances.

7. Retention

We keep personal data only as long as needed for the purposes above, including legal, accounting and dispute resolution. Retention periods depend on the type of data and your relationship with us.

8. Security

We implement technical and organisational measures designed to protect personal data. No method of transmission or storage is completely secure; we encourage strong passwords and careful sharing of access within your organisation.

9. Your rights

Subject to applicable law (including the PDPA where it applies), you may have rights to access, correct, limit processing, withdraw consent or object in certain cases, and to lodge a concern with a supervisory authority. To exercise rights, contact us through the Service or the contact details we provide.

10. Cookies

We use cookies and similar technologies for essential operation, preferences, analytics and (where applicable) marketing. You can control cookies through your browser settings; blocking some cookies may affect how the Service works.

11. Children

The Service is not directed at children. We do not knowingly collect personal data from children below the age at which consent is required in your jurisdiction without appropriate parental or guardian involvement.

12. Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and adjust the "Last updated" date. Material changes may be communicated through the Service or by email where appropriate.