Privacy Policy
Last updated: July 2026
1. Who We Are
DesignSure is operated by Deemed to Perform Consulting Pty Ltd (ABN 53 659 644 229), a Victorian building surveying consultancy. In this policy, “we,” “us,” and “our” refer to Deemed to Perform Consulting Pty Ltd.
Contact: hello@designsure.com.au
2. Information We Collect
We collect the following personal information:
- Account information: Email address, display name, role (designer, builder, etc.), and referral source
- Building plans: PDF, JPG, and PNG files you upload for compliance checking
- Supplementary form data: Project address, lot dimensions, setbacks, and other building details you enter
- Payment information: Processed securely by Stripe. We do not store your credit card details.
- Support and enquiry content: Messages you send us through support tickets, the contact form, or by email
- Usage and technical data: Page views and interactions (via Plausible Analytics — no cookies, no personal data collected), and limited technical data such as your IP address and browser type, collected by our hosting and bot-protection providers to operate and secure the service
3. How We Use Your Information
- To generate your compliance report
- To process payments and deliver transactional emails (report notifications, account management)
- To maintain an audit trail for professional indemnity and dispute resolution purposes
- To improve the accuracy and reliability of the service
- Where you have opted in, to send you marketing communications and newsletters (see section 5)
4. How Your Plans Are Processed
To produce your compliance report, the plans and project details you submit are processed by trusted third-party service providers that act on our instructions. These providers are contractually bound to process your data only to deliver their service to us — not for their own purposes. The main providers are:
- Anthropic (Claude AI) — United States. Used for document and image processing of your uploaded plans. Anthropic automatically deletes the data it receives and generates within 30 days. If content is flagged by Anthropic's automated trust-and-safety systems as potentially breaching its usage policies, it may be retained for up to 2 years. How Anthropic handles the data it receives, including in relation to model training, is governed by Anthropic's own terms — see Anthropic's Commercial Terms of Service for details.
- Google (Cloud Vision and Maps Platform) — United States. Used for document and image processing of your uploaded plans and to look up your project address. Google processes this data as our service provider and does not use it for its own purposes.
Because these providers are located in the United States, processing your plans involves disclosing personal information overseas. We take reasonable steps to ensure these providers handle your information consistently with Australian privacy law, and we ask for your consent to this overseas processing before your first upload. You will not be asked again unless our data-handling terms change materially.
5. Marketing Communications
If you opt in, we may use your email address to send you marketing communications, newsletters, and other updates from Deemed to Perform Consulting — such as product news, industry updates, and other communications.
- Opt-in only. We send these communications only where you have given express consent — by ticking the optional marketing box at signup, or by enabling the setting in your Account Settings. It is never a condition of creating an account or using DesignSure.
- Unsubscribe any time. Every marketing email includes an unsubscribe link, and you can withdraw consent at any time from Account Settings or by emailing us. We action unsubscribe requests promptly.
- Transactional emails are separate. Essential service emails — report notifications, payment receipts, account and security notices — are not marketing and are sent regardless of your marketing preference.
- We record your preference. We keep a record of when you opt in or out, to comply with the Spam Act 2003 (Cth).
6. Data Storage & Retention
| Data | Storage | Retention |
|---|---|---|
| Uploaded plans | Supabase (Sydney, Australia) | 30 days, then permanently deleted |
| Generated reports | Supabase (Sydney, Australia) | 12 months, then permanently deleted |
| Audit trail | Supabase (Sydney, Australia) | 10 years (de-identified after 12 months) |
| Plans sent to Claude API | Anthropic (United States) | Within 30 days (up to 2 years only if flagged by trust-and-safety) |
| Plans & address sent to Google | Google (United States) | Processed to return results; not used by Google for its own purposes |
7. Data Security
We use industry-standard security measures including:
- Encryption of your data at rest and in transit
- Access controls that ensure you can only access your own data
- Security measures to protect against common web-based attacks
- PII redaction in application logs (emails and names are never logged)
8. Your Rights
Under the Australian Privacy Act 1988, you have the right to:
- Access your personal data — you can export your account and submission data from Account Settings. To request a copy of all personal information we hold about you, email us and we will respond within a reasonable time (usually within 30 days).
- Correct inaccurate data — contact us at hello@designsure.com.au
- Delete your account and data — use the “Delete Account” option in Account Settings (7-day cooling-off period)
- Opt out of marketing — disable marketing emails any time from Account Settings, via the unsubscribe link in any marketing email, or by contacting us
- Complain — if you have a privacy concern, contact us first at hello@designsure.com.au. We will acknowledge your complaint and aim to respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
9. Third-Party Services
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database, auth, file storage | Sydney, Australia |
| Anthropic (Claude API) | Document/image processing | United States |
| Google (Cloud Vision & Maps) | Document/image processing, address lookup | United States |
| Cloudflare (Turnstile) | Bot protection / security | Global (United States) |
| Stripe | Payment processing | United States & global (PCI-DSS compliant) |
| Vercel | Web hosting | United States / global CDN |
| Plausible Analytics | Website analytics (cookieless, no personal data) | European Union (Germany) |
| Sentry | Error monitoring and diagnostics | European Union (Germany) |
| Resend | Transactional email | United States |
10. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email. Continued use of the service after notification constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related inquiries, contact us at hello@designsure.com.au.
Deemed to Perform Consulting Pty Ltd
ABN 53 659 644 229
Victoria, Australia
