Skip to main content
GDPR Compliant
UK Data Protection Act
ISO 27001 Certified

Your privacyis fundamental.

We protect your data with the same rigour we bring to construction AI. Full transparency, complete control, unwavering security.

Last updated: 14 September 2025

Information we collect

We only collect what's necessary to provide and improve our construction AI services.

Personal Information

Information you provide when creating an account or using our services.

  • • Name and contact details
  • • Company information
  • • Project data you upload
  • • Payment information

Usage Information

Data collected automatically to improve your experience.

  • • Pages visited
  • • Feature usage
  • • Performance metrics
  • • Error logs

Technical Information

Device and browser data for compatibility and security.

  • • IP address
  • • Browser type
  • • Device information
  • • Location (country level)

How we use your information

To Provide Services

  • Deliver AI-powered construction tools
  • Process your project data
  • Provide customer support
  • Process payments

To Improve & Protect

  • Enhance platform security
  • Prevent fraud and abuse
  • Improve AI accuracy
  • Comply with legal obligations

We never: Sell your data • Share with competitors • Use for advertising • Access without permission

Bank-level security.Construction-grade protection.

Your data is protected by multiple layers of security, all certified to international standards.

Encryption

AES-256 encryption at rest and TLS 1.3 in transit

UK Data Residency

All data stored in UK data centres, never offshore

ISO 27001

Certified information security management system

Your rights under GDPR

You have complete control over your personal information. Exercise any of these rights at any time.

Access

Request a copy of all personal data we hold about you

Correction

Update or correct any inaccurate information

Deletion

Request complete deletion of your data

Portability

Export your data in a machine-readable format

Restriction

Limit how we process your personal data

Objection

Object to certain types of data processing

Data retention periods

Account Information

Name, email, company details

Active + 7 years

Project Data

BOQs, quotes, timesheets

Project + 6 years

Financial Records

Invoices, payments

7 years (legal requirement)

Marketing Preferences

Email preferences, consent

Until withdrawn

After retention periods expire, data is permanently deleted using secure erasure methods

UK data stays in the UK

All data is stored and processed within the United Kingdom.

We do not transfer personal information outside the UK unless required for specific services you request, in which case we ensure appropriate safeguards are in place through standard contractual clauses or adequacy decisions.

London

Primary data centre

UK South

Backup location

Zero

Offshore processing

Contact our Data Protection Officer

Questions about privacy? Want to exercise your rights? Our DPO is here to help.

Email: privacy@conaxa.ai

Phone: +44 7777 727706

Response time: Within 30 days

Security Details

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO)