Skip to content

Legal

Privacy policy

Last updated 23 September 2026 · Astra Digital Pty Ltd (“we”, “us”), operator of Mero Build.

We respect the privacy of builders, their staff and their clients. This policy explains what personal information we collect, why, how we hold it and how you can access or correct it. We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1. What we collect

  • Website visitors: if you request a demo we collect your name, company, email, phone, an estimate of the homes you build a year and anything you write in the message. We also record the page the request came from, your browser type and a hashed form of your IP address for abuse prevention.
  • Account holders (builders and staff): name, email, phone, role, organisation details including ABN and licences, sign-in credentials (passwords are stored hashed; passkeys are stored as public keys), and the activity you perform in the software (which is logged for audit purposes).
  • Owners and other contacts entered by a builder: names, contact details, site and postal addresses, documents, payment records and communications relating to a building project. The builder is the party that collects this information; we process it on their behalf.
  • Technical information: logs, device and browser data, and error reports needed to run and secure the service.

2. Why we collect it

  • To arrange and run a demo and to respond to your enquiry.
  • To provide the Mero Build service to your organisation: estimating, tendering, contracts, variations, claims, invoices, site delivery and the client portal.
  • To send transactional emails such as invitations, password resets, variation and payment notifications.
  • To keep the service secure, prevent abuse and meet legal obligations (including tax records).
  • To improve the product, using aggregated or de-identified information where possible.

We do not sell personal information and we do not use client data entered by a builder for marketing.

3. Who we share it with

Service providers who host infrastructure, deliver email or process payments for us, under contracts that restrict their use of the information; the builder organisation that owns a project (for owner and contact data); and authorities where the law requires.

4. Where it is held

Our hosted service runs on infrastructure located in Australia. Some service providers (for example email delivery) may process limited data overseas; we take reasonable steps to ensure they handle it in line with the Australian Privacy Principles.

5. How we protect it

Encryption in transit, private object storage with expiring links, hashed passwords, passkeys and two-factor authentication, role-based access controls, tenant-scoped data access, audit logging and encrypted backups. No system is perfectly secure; if we become aware of an eligible data breach we will notify affected individuals and the OAIC as required.

6. Cookies and analytics

The application uses cookies for sign-in sessions. The public website uses Google Analytics 4 to understand page visits, trial and demo link clicks, billing-period selections and successful demo requests. These events can include button location, plan and billing interval. We do not include names, email addresses, phone numbers or message content in these analytics events. Google Analytics may use cookies and process usage data on Google’s infrastructure.

7. Your rights

You may ask us to access or correct personal information we hold about you, or complain about how we have handled it, by emailing [email protected]. We will respond within 30 days. If you are not satisfied you may contact the Office of the Australian Information Commissioner (oaic.gov.au). Owners whose information was entered by a builder should contact that builder first; we will assist them.

8. Retention

Demo requests are kept for 24 months. Account and project data is retained while your organisation subscribes and for a reasonable period afterwards so you can export it, after which it is deleted or de-identified, except where we must keep records by law.

9. Changes

We may update this policy; the date above shows the current version. Material changes will be announced in the application.

Contact

Astra Digital Pty Ltd, Sydney NSW, Australia · [email protected]