Privacy notice

# Privacy notice Version: buildorb-prelaunch-2026-10-10. Approved by the operator on 10 October 2026 for publication before the public pre-launch. Effective when published on the site. Challis Samu trading as Buildorb is responsible for the personal information handled through this service. Privacy requests and complaints can be sent to challis836@gmail.com. Buildorb is based in Tauranga, New Zealand. ## Information and purposes During pre-launch, we collect sign-in details, waitlist choices and provider application details. Customer bookings, payments and business sourcing remain closed. Private file uploads remain unavailable until their storage and cleanup services have been configured and verified. We also record operational and security events needed to protect accounts and track important actions. We use this information to verify access, review provider applications, notify waiting customers when their chosen service opens, investigate issues and maintain the service. A revised notice will explain the additional information needed before bookings and payments open. Please avoid submitting identity documents or unrelated personal information in application text. If you join a waitlist, we keep your email address, the name you give (optional), the service and town you chose and how you found us. We use these only to send one email when that service opens in your town. That email includes a link to remove your details, and you can also ask us to remove them. Waitlist details are deleted 90 days after that email is sent, or 365 days after you join if the service has not opened. To stop automated sign-ups, we keep one-way hashed forms of your email and network address for no more than two days. Information required by a form is needed for that step; without it we may be unable to create an account or arrange the work. Optional marketing preferences are separate from service messages. Request qualification is performed manually at launch; it is not being sent to an AI qualification service. ## Sharing and processing Buildorb's authorised operator can access information needed to administer the service. Provider applications are available to the authorised operator for review. Pre-launch waitlist details are not sent to prospective providers, and the optional business-sourcing service is disabled. Resend sends sign-in and service emails. The application and automation services run on a server in Sydney, Australia. Protected recovery copies are encrypted before they are stored in Cloudflare R2. Backup access credentials are held outside the application containers. Payment processing and private-file storage will be described before they are activated. Some service providers process information outside New Zealand. We assess the purpose, access arrangements and applicable safeguards before sending it. We do not sell customer contact details for third-party marketing. If a page fails in your browser, it sends a short error report: the page address without its query string, the error message and technical details, and the browser type. The reporting code does not add your name, email or account. Please avoid including personal information in error messages. Reports are kept in our protected server logs. Owner error alerts sent through Resend contain only a fixed event name, time and event count; they exclude the error message and raw context. Essential authentication cookies support sign-in and account security. We do not use pre-launch account or application details for third-party advertising. Any future public-page measurement must be described here before it is activated on the production site. ## Protection, retention and your choices Access to account and provider information is restricted by role. Security measures reduce risk but cannot guarantee that a system will never experience an incident. We retain account and provider application details while an application is under review or an account is in use, and for handling related queries. You can ask us to remove information that is no longer needed; these records require an operator review rather than automatic deletion after a fixed number of days. Waitlist retention is described above. Protected backups keep seven daily, four weekly and three monthly snapshots. Information removed from the live application can remain in recovery copies until snapshot retention and storage cleanup complete. We restrict recovery access and do not use those copies for ordinary business activity. You can request access to, or correction of, your personal information and ask about deletion through your account or the contact email. We may need to verify your identity and explain any information that must be retained. You can raise privacy concerns with us and may also contact New Zealand's Office of the Privacy Commissioner.