Privacy Policy

1. Our Commitment

EngineeredIQ is committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you are in New Zealand or the United Kingdom, Section 10 explains how we handle your information under your local law.

2. What We Collect

• Engineer name, company, professional registration or licence number (if applicable), phone, email
• Project and client names, site addresses
• Specification data, tag registers, I/O declarations and sequence logic
• Supporting project files uploaded during specification
• Generated reports, exports and compiled artifacts
• Account and billing information (payment card data handled by Stripe, not stored by EngineeredIQ)

3. How We Use Your Data

• To provide and operate the EngineeredIQ platform
• To generate AI-assisted specifications and compiled artifacts
• To process billing per Project
• To respond to support requests
• We do not use your data for advertising or marketing to third parties

4. AI Processing

When you generate a specification or compiled artifact, your project data (including tag names, I/O descriptions and sequence logic) is transmitted to Anthropic PBC for AI processing via their API. Anthropic operates a zero-data-retention policy on API calls. Your data is not stored or used for training. For more information see anthropic.com/privacy.

5. Data Storage & Residency

All EngineeredIQ data is stored on servers located in Sydney, Australia (ap-southeast-2) operated by Supabase Inc. Some service providers process limited data outside Australia, as described in Section 10. All data is encrypted at rest (AES-256) and in transit (TLS 1.2+).

6. Data Isolation

Each EngineeredIQ account is completely isolated using Row Level Security. No user can access another user’s data under any circumstances.

7. Your Rights

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and all associated data
• Export all your Projects and generated documents before cancellation

To exercise these rights, contact: hello@engineerediq.io

7a. Data Deletion Policy

Two deletion paths exist, depending on whether you request it or inactivity triggers it.

Deletion on request. Email hello@engineerediq.io from your account email asking to delete your account. We action this within 5 business days and confirm by email once complete. This permanently removes your Projects, specification data, tag registers, generated documents and account details from our production database. It does not remove billing records we’re required to retain under Australian tax law (see Section 7b), and it cannot be undone. Export anything you want to keep before requesting deletion; we cannot recover deleted Projects afterward.

Deletion on inactivity. A Project with no activity for 55 days is automatically deleted, with warning emails at 35 and 45 days (see the Terms of Service, Section 9). This is separate from account deletion: your account and other active Projects are unaffected.

Backup retention. Our production database is backed up nightly and each backup is retained for 90 days before automatic expiry. Deleting a Project or account removes it from production immediately, but a copy may persist in an already-taken encrypted backup for up to 90 days until that backup itself expires. Backups exist solely for disaster recovery, are encrypted at rest and are never restored selectively to reinstate a deleted account.

7b. Records We Retain After Deletion

Australian tax law requires us to keep invoices and payment records for 5 years, so these survive an account deletion request. Stripe, our payment processor, retains payment method and transaction data under its own retention policy regardless of our deletion of your EngineeredIQ account; see stripe.com/privacy. No specification data, tag registers or generated documents are included in these retained records.

8. Your Project Stakeholders’ Data

As an EngineeredIQ subscriber you are a data controller for your clients’ and project stakeholders’ personal information. You are responsible for ensuring you have appropriate authority to collect and process that information, and that you handle it in accordance with the Privacy Act 1988.

9. Contact

Privacy enquiries: hello@engineerediq.io

10. Customers and Contacts Outside Australia

New Zealand. We handle personal information about people in New Zealand in line with the Privacy Act 2020 and its Information Privacy Principles. You can ask us for access to or correction of your information at hello@engineerediq.io. If you are unhappy with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

United Kingdom. For people in the United Kingdom we act as controller under the UK GDPR and the Data Protection Act 2018. We rely on these lawful bases: performing our contract with you, meeting legal obligations such as tax records and our legitimate interests in securing our service and contacting business professionals about our products. You can ask us to access, correct, erase or restrict your information, to move it to another provider and to object to our use of it. We respond within one month. You can complain to the Information Commissioner’s Office at ico.org.uk.

International transfers. Our main database is in Sydney, Australia. Some providers process data elsewhere: Anthropic (AI processing), Stripe (payments), Vercel (hosting), Google (email) and Sentry (error monitoring). Where UK law requires it, we rely on safeguards such as standard contractual clauses or the ICO’s International Data Transfer Agreement.

Business contacts. We may email business contacts at publicly listed business addresses about our products. Every message identifies us and includes a way to opt out. Reply ‘stop’ and we will remove you and keep your address only on a suppression list so we honour your request.