Privacy Policy

WisyPlan Pty Ltd, an Australian company, is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our project management platform.

1. Information We Collect

Personal Information

• Name and contact information (email address, phone number)
• Account credentials and authentication information
• Profile information and preferences
• Payment and billing information

Project Data

• Project files, documents, and attachments
• Task and milestone information
• Team collaboration data
• Usage analytics and performance metrics

Technical Information

• IP address and device information
• Browser type and version
• Log files and usage patterns
• Cookies and similar tracking technologies

2. How We Use Your Information

We use your information to:

• Provide and operate WisyPlan's project management and AI services
• Synchronize and process data from connected platforms such as Gmail and Google Drive (and other document sources you authorize)
• Analyze communications and documents to extract insights, tasks, and risks
• Enable automation features such as email responses and workflow orchestration
• Improve system performance and user experience
• Ensure security, prevent fraud, and enforce platform policies
• Comply with legal and regulatory obligations

3. AI Data Usage Policy

At WisyPlan, your data belongs to you.

• Purpose of use: We only process your data to deliver project management services and generate insights tailored to your projects.
• No training on your data: We do not use your data to train or fine-tune large language models (LLMs).
• Third-party AI providers: When we rely on trusted AI providers (such as OpenAI, Google, Anthropic), your data is processed securely via their APIs to generate outputs. According to their policies, API data is not used for model training.
• Data isolation: Your data is not shared across clients and remains segregated in encrypted storage.

4. Google User Data (Gmail & Google Drive)

WisyPlan is a construction (AEC) project management platform. It integrates with Google services — including Gmail and Google Drive — so teams can connect project email and documents into one searchable workspace. Access to Google user data is granted only with explicit user or organization-administrator consent.

Users can revoke WisyPlan's access to their Google account at any time through WisyPlan connector settings and/or their Google Account permissions page.

Gmail — Data Accessed

When a user connects Gmail, WisyPlan may access the following data:

• Email content (subject and body)
• Email metadata (sender, recipients, timestamps)
• Attachments
• Labels and thread information

WisyPlan only accesses the minimum data necessary to provide its functionality and does not access or process data unrelated to user-authorized features.

Gmail — How Data Is Used

• Synchronizing inbox data within the platform
• Analyzing emails to extract tasks, risks, and project insights
• Supporting AI-powered workflows and decision-making
• Drafting email responses for user review and approval
• Organizing emails using labels and user-defined logic

Gmail — Actions Performed

• Reading email content and metadata
• Drafting emails on behalf of the user (no auto-reply)
• Managing labels and organizing emails
• Deleting emails only when explicitly initiated or confirmed by the user through the platform

Google Drive — Scope and Consent

When an organization administrator connects Google Drive, WisyPlan requests read-only access via the Google OAuth scope drive.readonly, together with basic identity scopes needed to identify the connected account. WisyPlan does not request write, delete, or full Drive manage scopes.

Google Drive — Data Accessed

After consent, WisyPlan accesses only folders and files the administrator selects (typically Shared Drive folders used for a construction project). Depending on that selection, WisyPlan may access:

• File and folder metadata (names, paths, MIME types, modified times, and identifiers)
• File content (bytes) required to index documents for search and AI-assisted project questions
• Change notifications needed to keep the selected folders synchronized

WisyPlan does not browse or index Google Drive content outside the selected folders, and it does not access unrelated Google services through the Drive connection.

Google Drive — How Data Is Used

• Discovering and synchronizing selected project documents into WisyPlan (Knowy)
• Indexing document content so authorized project members can search and ask questions with citations
• Keeping indexed copies up to date when files in the selected folders change
• Supporting project document intelligence features within the connected organization

Google Drive — Actions We Do Not Perform

• We do not create, edit, move, or delete files in Google Drive
• We do not share Drive files with third parties for advertising or unrelated products
• We do not use Drive user data to train generalized AI or machine learning models

Google Drive — Storage, Retention, and Revocation

• Indexed copies and search artifacts derived from selected Drive files are stored in WisyPlan for the connected organization while the connection remains authorized and the files remain in scope
• Disconnecting Google Drive in WisyPlan revokes delegated API access; users may also revoke access in their Google Account settings
• After disconnect or explicit deindex/removal in WisyPlan, Drive-derived content is no longer updated and is removed from active project search according to platform deletion controls

Google API Compliance (Limited Use)

WisyPlan's use of information received from Google APIs (including Gmail and Google Drive) adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We do not use Google user data for advertising purposes
• We do not sell or transfer Google user data to third parties except as necessary to provide the user-facing features described above, or as required by law
• We do not use Google user data to train generalized AI or machine learning models
• Google user data is used solely to provide and improve core WisyPlan application functionality

Human Access to Google User Data

WisyPlan processes Gmail and Google Drive data primarily through automated systems. Human access to user data is strictly limited and only occurs when necessary for technical support, security investigations, or when explicitly requested by the user. All such access is logged and subject to strict confidentiality obligations.

WisyPlan does not use Gmail or Google Drive data for user profiling, surveillance, or any purpose unrelated to the core functionality of the platform.

5. Third-Party Services

WisyPlan relies on trusted third-party service providers to operate its platform. These providers process data only as necessary to deliver functionality and are subject to strict security and confidentiality obligations.

• Google APIs (for Gmail, Google Drive, and authentication services)
• OpenAI and Google (Gemini) APIs for AI processing
• Supabase for database and storage services
• AWS for hosting infrastructure
• Email providers such as Gmail and Outlook

6. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• With your explicit consent
• To service providers who assist in our operations
• When required by law or legal process
• To protect our rights, property, or safety
• In connection with a business transfer or merger

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Employee training on data protection
• Data is stored in secure cloud infrastructure located in Australia and managed through trusted providers such as Supabase and AWS

8. Data Retention and Deletion

WisyPlan retains user data only for as long as necessary to provide its services.

• Gmail data is stored only as part of user-authorized synchronization processes
• Users can control Gmail data scope by selecting synchronization ranges
• Re-synchronizing Gmail data replaces previously stored email data with the newly selected dataset
• Google Drive data is limited to administrator-selected folders; indexed copies are retained while the Drive connection and project indexing remain active
• When a user disconnects their Google account or Google Drive connection, API access is revoked and data is no longer updated; Drive-derived content can be removed via disconnect and deindex controls in WisyPlan
• System logs (such as login, logout, and synchronization events) are retained for audit and security purposes

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access to your personal information
• Correction of inaccurate data
• Deletion of your personal information
• Restriction of processing
• Data portability
• Objection to processing

Newsletter and Enquiries

When you contact us, we retain the details you submit so we can respond. Newsletter subscriptions are stored separately and use email confirmation. You can unsubscribe using the link included in newsletter email.

10. Cookies and Tracking

We use cookies and similar technologies to enhance your experience on our platform. For detailed information about our use of cookies, please see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: