This Privacy Policy describes how Wundermator (“we”, “us”), operated by ZB Constructions Pty Ltd (ABN 16 618 883 248), handles your personal information.
1. Information we collect
- Account information: email address, hashed password.
- Uploaded files: architectural, engineering, and selections PDFs you upload to generate an estimate.
- Generated estimates: the structured outputs and spreadsheet files produced by the Service.
- Payment information: handled entirely by Stripe — we never see or store your card details. Stripe sends us a non-sensitive transaction record (amount, status, timestamp).
- Usage data: timestamps of estimate runs, error logs, and similar operational information.
2. How we use your information
- To provide the Service (running estimates, returning your XLSX files)
- To authenticate you and keep your account secure
- To process payments and grant credits
- To respond to your support requests
- To comply with legal and tax obligations
We do not sell your information to third parties. We do not use your uploaded plans to train AI models.
3. Third-party services we use
Your data is processed by these services as part of providing Wundermator:
- Anthropic (US) — provides the AI model that interprets your plans. Files are sent for processing and deleted after use, in line with Anthropic’s data handling policy.
- Supabase (US/EU) — stores your account information and credit balance.
- Railway (US) — hosts the application.
- Stripe (US/AU) — processes payments and stores card details directly with them.
- Cloudflare (global) — provides our domain and DNS.
Each of these has its own privacy policy and security practices. By using Wundermator you accept that your data flows through these providers as required to operate the Service.
4. Data retention
- Account information: kept while your account is active.
- Uploaded plans: deleted from our processing pipeline shortly after the estimate is generated (typically within minutes).
- Generated estimates: kept in your account so you can re-download them. Deleted on account closure.
- Payment records: retained for 7 years as required by Australian tax law.
5. Your rights
Under the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your account and associated data
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)
To exercise any of these rights, email kyle@zanettobuilders.com.au.
6. Security
We use industry-standard encryption (HTTPS in transit, encrypted databases at rest) and access controls. No system is perfectly secure — if a data breach occurs, we will notify affected users in accordance with the Notifiable Data Breaches scheme.
7. Cookies
We use only session/authentication cookies necessary for the Service to function. We do not use tracking or advertising cookies.
8. Changes
We may update this Privacy Policy. Material changes will be communicated via email or a notice on the Service.
9. Contact
Privacy questions? kyle@zanettobuilders.com.au