Privacy Policy

1. Information We Collect

• Account information: name, email address, company name, professional role
• Contract and project data you upload for AI analysis, including contract documents, meeting notes, correspondence, and related records
• Usage data: AI query history, feature usage, login activity
• Billing information: name and billing address. We do not collect or store your card details — card payments are processed directly by Peach Payments and Mauritius Commercial Bank (MCB) via their secure, PCI-compliant systems.

2. How We Use Your Information

• To provide and operate the ConstructLogic platform
• To generate AI-assisted contract analysis, notices, reports, and other outputs you request
• To process billing and manage your subscription
• To communicate with you about your account, service updates, and support requests

3. Third-Party Service Providers

We use the following third-party providers to operate ConstructLogic. Each processes data solely to deliver their respective service:

• Cloud infrastructure providers — database hosting, application hosting, authentication, and secure document storage
• Email service providers — transactional email delivery, including account notifications and platform communications
• Peach Payments and Mauritius Commercial Bank (MCB) — payment processing. ConstructLogic does not have access to your full card number
• Our AI provider — processes contract and query data solely to generate the AI outputs you request

We do not name individual infrastructure vendors in this policy as a matter of operational security. Details of any specific subprocessor are available on reasonable request to shan@bluediamond.capital.

4. International Data Transfers

As a Mauritius-incorporated company serving customers primarily in South Africa, your data may be processed and stored on servers located outside your country of residence. We take appropriate steps to ensure any such transfer is subject to safeguards consistent with the Mauritius Data Protection Act 2017 and POPIA.

5. Data Retention

We retain your account and contract data for as long as your subscription is active. Following cancellation, data is retained for a limited period to allow reactivation, after which it is deleted, unless we are required to retain it longer by law.

6. Your Rights

Subject to applicable law, you have the right to access, correct, or request deletion of your personal information, and to object to certain processing. If you are a South African data subject, you also have the right to lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been processed unlawfully. To exercise any of these rights, contact us at shan@bluediamond.capital.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest, to protect your information against unauthorised access, loss, or misuse.

8. Governing Law

This policy is governed by the laws of the Republic of Mauritius, without prejudice to the rights afforded to you under POPIA where you are a South African data subject.

9. Changes to This Policy

We reserve the right to update or amend this Policy at any time. Minor or non-material changes may be made without prior notice, and it is your responsibility to review this Policy regularly. Where a change is material, we will make reasonable efforts to notify you via email or in-app notice. Continued use of ConstructLogic after any change takes effect constitutes your acceptance of the updated Policy.