Privacy Policy

Effective Date: 15 September 2026 · EngineeredIQ

1. Our Commitment

EngineeredIQ is committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you are in New Zealand or the United Kingdom, Section 10 explains how we handle your information under your local law.

2. What We Collect

• Engineer name, company, professional registration or licence number (if applicable), phone, email
• Project names, site addresses
• IO list data, tag registers, AOI selections and P&ID/FDS-derived data
• Supporting project files uploaded during document ingestion
• Compiled L5X files and generation audit records
• Account and billing information (payment card data handled by Stripe, not stored by EngineeredIQ)

3. How We Use Your Data

• To provide and operate ScaffIQ
• To compile tag structures, AOI instances and L5X output
• To process billing per Project
• To respond to support requests
• We do not use your data for advertising or marketing to third parties

4. Document Parsing & AI Processing

Document parsing (IO lists, P&IDs, functional descriptions) happens entirely client-side in your browser before any data is transmitted. Only the abstracted, normalised generation payload, confirmed loops, tag mappings and AOI selections, is sent to ScaffIQ's compiler. Where AI-assisted extraction is used, project data is transmitted to Anthropic PBC via their API under a zero-data-retention policy. Your data is not stored or used for training. For more information see anthropic.com/privacy.

5. Data Storage & Residency

All ScaffIQ data is stored on servers located in Sydney, Australia (ap-southeast-2) operated by Supabase Inc. Some service providers process limited data outside Australia, as described in Section 10. All data is encrypted at rest (AES-256) and in transit (TLS 1.2+).

6. Data Isolation

Each ScaffIQ account is completely isolated using Row Level Security. No user can access another user’s data under any circumstances.

7. Your Rights

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and all associated data
• Export all your Projects and compiled files before cancellation

To exercise these rights, contact: hello@engineerediq.io

8. Your Project Stakeholders’ Data

As a ScaffIQ subscriber you are a data controller for your clients’ and project stakeholders’ personal information. You are responsible for ensuring you have appropriate authority to collect and process that information, and that you handle it in accordance with the Privacy Act 1988.

9. Contact

Privacy enquiries: hello@engineerediq.io

10. Customers and Contacts Outside Australia

New Zealand. We handle personal information about people in New Zealand in line with the Privacy Act 2020 and its Information Privacy Principles. You can ask us for access to or correction of your information at hello@engineerediq.io. If you are unhappy with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

United Kingdom. For people in the United Kingdom we act as controller under the UK GDPR and the Data Protection Act 2018. We rely on these lawful bases: performing our contract with you, meeting legal obligations such as tax records and our legitimate interests in securing our service and contacting business professionals about our products. You can ask us to access, correct, erase or restrict your information, to move it to another provider and to object to our use of it. We respond within one month. You can complain to the Information Commissioner’s Office at ico.org.uk.

International transfers. Our main database is in Sydney, Australia. Some providers process data elsewhere: Anthropic (AI processing), Stripe (payments), Vercel (hosting), Google (email) and Sentry (error monitoring). Where UK law requires it, we rely on safeguards such as standard contractual clauses or the ICO’s International Data Transfer Agreement.

Business contacts. We may email business contacts at publicly listed business addresses about our products. Every message identifies us and includes a way to opt out. Reply ‘stop’ and we will remove you and keep your address only on a suppression list so we honour your request.