This Privacy Policy describes how Wundermator (“we”, “us”), operated by Wundermator Pty Ltd (ABN 54 697 928 975 · ACN 697 928 975), handles your personal information.

1. Information we collect

Account information: name, email address, hashed password, business name, mobile number, country, and how you heard about us.
Signup and security data: IP address, browser details and the link or ad you arrived from (for example a utm or Facebook click ID). We use these to spot duplicate or fake signups and to measure which ads work.
Uploaded files: architectural, engineering, and selections PDFs you upload to generate an estimate.
Generated estimates: the structured outputs and spreadsheet files produced by the Service.
Payment information: handled entirely by Stripe. We never see or store your card details. Stripe sends us a non-sensitive transaction record (amount, status, timestamp).
Usage data: timestamps of estimate runs, error logs, and similar operational information.

2. How we use your information

To provide the Service (running estimates, returning your XLSX files)
To authenticate you and keep your account secure
To process payments and grant credits
To respond to your support requests
To comply with legal and tax obligations
To send you emails and texts about your account and about Wundermator. Every marketing email has an unsubscribe link and every text accepts STOP.
To improve our estimates. We keep the measurements and costs worked out from your plans (areas, quantities, rates), never the plans themselves, and use them without your name to make future estimates more accurate.

We do not sell your information to third parties. Neither we nor Anthropic use your uploaded plans to train AI models.

Automated decisions. When you sign up, a computer check looks at your email domain, business name and signs of a duplicate account, and either approves you straight away or holds the request for Kyle to review by hand. Ask us if you want a held request looked at again.

3. Third-party services we use

Your data is processed by these services as part of providing Wundermator:

Anthropic (US): the AI model that reads your plans. Anthropic keeps API inputs for up to 30 days for safety checks, then deletes them, and does not train on them.
Supabase (Japan): our database and file storage.
Railway (Singapore): hosts the application.
Stripe (US/AU): processes payments and holds your card details.
Cloudflare (global): our domain and DNS.
Resend (US): sends our emails.
GoHighLevel (US): our customer records and text messages.
Sentry and Better Stack: error and uptime monitoring. They receive technical logs, not your plans.
Meta and Google (US): ad measurement (see Cookies below).
ManyChat (US): replies to Instagram messages.

Each of these has its own privacy policy and security practices. By using Wundermator you accept that your data flows through these providers as required to operate the Service.

4. Data retention

Account information: kept while your account is active.
Uploaded plans: deleted when your estimate finishes, usually within minutes. If a run is cut off by a system fault the files can stay longer, until we clear them.
Generated estimates: kept in your account so you can re-download them. Deleted on account closure.
Payment records: retained for 7 years as required by Australian tax law.

5. Your rights

Under the Australian Privacy Principles, you have the right to:

Access the personal information we hold about you
Correct inaccurate information
Request deletion of your account and associated data
Lodge a complaint with the Office of the Australian Information Commissioner (OAIC), or in New Zealand the Office of the Privacy Commissioner

To exercise any of these rights, email kyle@zanettobuilders.com.au.

6. Security

We use industry-standard encryption (HTTPS in transit, encrypted databases at rest) and access controls. No system is perfectly secure. If a data breach occurs, we will notify affected users in accordance with the Notifiable Data Breaches scheme.

7. Cookies

We use login cookies so the Service works. We also use the Meta Pixel and Google Ads tags, which set cookies to measure whether our ads lead to signups. When you sign up or buy, we send Meta a scrambled (hashed) copy of your email and account ID, your IP address and the ad click ID through Meta’s Conversions API for the same purpose. You can block these cookies in your browser, or opt out of personalised ads at facebook.com/adpreferences and adssettings.google.com.

8. Changes

We may update this Privacy Policy. Material changes will be communicated via email or a notice on the Service.

9. Contact

Privacy questions? kyle@zanettobuilders.com.au