Privacy Policy

TradesStack provides a configurable construction management platform designed around the workflows, people and processes of construction businesses.

References to “TradesStack”, “we”, “us” or “our” in this Privacy Policy mean the entity operating and providing the TradesStack services.

The information we collect depends on how you interact with TradesStack and how your organisation has configured its TradesStack environment.

This may include:

• your name and contact details;
• company and employment information;
• account and login information;
• user roles and permissions;
• project and job information;
• customer, supplier and subcontractor information;
• quotes, purchase orders, variations, payment claims and other commercial records;
• timesheets, tasks and project activity;
• documents, drawings, photos and files uploaded to TradesStack;
• communications and information submitted through the platform;
• device, browser, IP address and usage information;
• support requests and correspondence; and
• information provided when using TradesStack's AI-enabled features.

Your organisation may also choose to store other information within its TradesStack environment.

We may collect information:

• directly from you;
• from the organisation that provides you access to TradesStack;
• when you use the TradesStack platform or applications;
• when information is uploaded or entered into TradesStack;
• when you contact us for support, demonstrations or other enquiries;
• through integrations your organisation has chosen to connect to TradesStack; and
• automatically through normal operation, security and diagnostic systems.

We may use information to:

• provide and operate TradesStack;
• create and manage user accounts;
• provide features and functionality requested by your organisation;
• configure TradesStack around a customer's business;
• authenticate users and manage permissions;
• store and process construction and project information;
• provide AI-enabled functionality;
• provide customer support;
• maintain the security and reliability of our services;
• diagnose technical issues and improve performance;
• improve and develop TradesStack;
• communicate with customers and users;
• meet our contractual and legal obligations; and
• prevent misuse, fraud or security threats.

We do not sell personal information.

Each TradesStack customer may have a dedicated implementation or environment configured for their business.

Customers remain responsible for the information they choose to collect, upload and manage through their TradesStack environment and for ensuring they have appropriate authority to provide that information to TradesStack.

Where TradesStack processes personal information on behalf of a customer, we process that information for the purpose of providing and supporting the TradesStack services, subject to our agreements with that customer and applicable law.

Some TradesStack features may use artificial intelligence to help users work with information contained within the platform.

Depending on the feature being used, relevant information may be processed by AI service providers to generate a response or perform a requested task.

We take steps to limit AI access to information relevant to the authorised user, organisation and functionality being used.

Users should review AI-generated information before relying on it for important commercial, contractual, financial, safety or project decisions.

We may share information with trusted service providers where necessary to operate TradesStack.

These providers may include services used for:

• cloud hosting and databases;
• file storage;
• authentication;
• email and communications;
• application monitoring and security;
• analytics;
• artificial intelligence; and
• other infrastructure required to provide TradesStack.

We may also disclose information where required by law, to protect our legal rights, to investigate security incidents, or as part of a legitimate business transaction such as a merger, acquisition or sale.

We do not allow service providers to use personal information for unrelated purposes where they are processing it on our behalf.

TradesStack and its service providers may store or process information using infrastructure located in New Zealand or other countries.

Where personal information is transferred or processed internationally, we take reasonable steps to ensure appropriate safeguards are in place in accordance with applicable privacy requirements.

We use reasonable technical and organisational safeguards designed to protect information against unauthorised access, loss, misuse, alteration or disclosure.

These may include authentication controls, permissions, access restrictions, isolated customer environments, encryption and security monitoring.

No internet-based system can guarantee absolute security, and users are responsible for keeping their account credentials secure.

We retain information for as long as reasonably necessary to:

• provide TradesStack services;
• meet our contractual obligations;
• comply with legal and regulatory requirements;
• resolve disputes;
• maintain security and audit records; and
• support legitimate business requirements.

Retention periods may vary depending on the type of information and the requirements of the relevant customer.

When information is no longer required, we may delete or anonymise it in accordance with our retention practices and applicable law.

Depending on applicable law, you may have rights relating to your personal information, including requesting access to or correction of personal information held about you.

If you use TradesStack through your employer or another organisation, some requests may need to be directed to that organisation because it controls the information within its TradesStack environment.

You can also contact us if you have questions or concerns about how TradesStack handles personal information.

Our website and services may use cookies and similar technologies to operate the service, maintain sessions, understand usage and improve performance.

You may be able to control certain cookies through your browser settings.

Some cookies may be necessary for the platform to function correctly.

TradesStack may allow customers to connect third-party services or integrations.

When an organisation enables a third-party integration, information may be exchanged with that provider as required to provide the integration.

Third-party services operate under their own terms and privacy policies, and customers should review those policies before enabling an integration.

TradesStack is designed for use by businesses and their authorised users. It is not intended as a consumer service for children.

We may update this Privacy Policy as TradesStack develops or where our legal, technical or operational requirements change.

The latest version will be made available through our website or services, with the date of the most recent update shown at the top of this policy.

If you have questions, requests or concerns regarding privacy or this Privacy Policy, please contact:

If you are not satisfied with our response, you may also have the right to make a complaint to the relevant privacy regulator.