Privacy Policy

Effective date: 16 March 2026 · Last updated: 4 September 2026

Sabeam Pty Ltd (ABN 44 692 072 021) (“Sabeam”, “we”, “us”, or “our”) is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with the Sabeam platform and services.

1. Information We Collect

1.1 Information you provide

Identity information: Full name, date of birth, residential address
Contact information: Email address, phone number
Business information: ABN, builder licence number, business name (where applicable)
Financial information: BSB and account number for payment purposes (securely handled by our payments provider)
Project information: Project details, milestone descriptions, supporting documentation
Call recordings and transcripts: Recordings of project-related phone calls that a builder chooses to upload for record-keeping, and transcripts and summaries generated from them. Sabeam requires the uploading builder to confirm that everyone on the call knew it was being recorded before a recording can be saved, and keeps a record of that confirmation.
Verification documents: Identity documents provided as part of our regulatory verification obligations

1.2 Information collected automatically

Device information: Browser type, operating system, device identifiers
Usage information: Pages visited, features used, session duration
Log data: IP address, access times, referring URLs

1.3 Information from third parties

We may receive information from our identity verification provider to fulfil our regulatory obligations, and from our payments provider in relation to transaction processing.

2. How We Use Your Information

We use personal information for the following purposes:

Providing and operating the Sabeam platform
Processing escrow transactions and milestone payments
Verifying your identity as required by law
Complying with anti-money laundering and counter-terrorism financing obligations
Communicating with you about your account, projects, and transactions
Maintaining the security and integrity of the platform
Improving the Service and developing new features
Complying with legal obligations and responding to lawful requests

3. Legal Bases for Processing

We process your personal information on the following bases:

Contract performance: To provide the services you have requested
Legal obligation: To comply with AML/CTF, taxation, and other regulatory requirements
Legitimate interest: To maintain platform security, prevent fraud, and improve our services
Consent: For optional communications and marketing (where applicable)

4. How We Share Your Information

We may share personal information with:

Our payments provider: To process transactions and hold funds in trust
Identity verification services: To fulfil our regulatory obligations
The other party to your project: Limited project and milestone information necessary for the escrow service (e.g., milestone status, payment confirmations)
Professional advisers: Legal, accounting, and audit professionals under confidentiality obligations
Service providers: The hosting, AI and email providers we use to run the platform, listed in section 8 below
Regulatory authorities: Where required by law (e.g., AUSTRAC, OAIC)

We do not sell personal information to third parties. We do not share personal information for third-party marketing purposes.

5. Data Security

We implement technical and organisational measures to protect personal information, including:

Encryption of data in transit and at rest
Access controls and authentication requirements
Regular security assessments
Audit logging of access to personal information
Staff training on data protection obligations

While we take reasonable steps to protect your information, no method of electronic transmission or storage is completely secure.

6. Data Retention

We retain personal information for as long as necessary to provide the Service and fulfil our legal obligations:

Account information: Duration of account plus 7 years (AML/CTF record-keeping)
Transaction records: 7 years from the date of the transaction
Identity verification records: 7 years from the end of the business relationship
Usage and log data: Up to 2 years

When personal information is no longer required, we securely destroy or de-identify it.

7. Data Residency and Overseas Disclosure

Sabeam is an Australian company. Some of the service providers we use to run the platform are located overseas. This means some of your personal information is processed and stored outside Australia, and is disclosed to overseas recipients.

Our application and database are hosted by Render in the United States (Oregon). AI drafting of paperwork such as progress claims, variations, and defect reports from your notes, emails, and documents is carried out by Anthropic in the United States. Transcription of voice notes and call recordings is carried out by OpenAI in the United States. Email, including inbound email you forward to us, is sent and received through Resend in the United States. Error reports from the platform, which can include your email address and the page you were on, go to Sentry in the United States. Our website is hosted by Vercel, which serves content from locations around the world. See “Service Providers (Subprocessors)” below for the full list.

Before we disclose personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles that information consistently with the Australian Privacy Principles, including through contractual data protection terms, in accordance with APP 8. If you would like more information about a particular overseas disclosure, contact us at privacy@sabeam.com.

8. Service Providers (Subprocessors)

We use the following service providers (subprocessors) to operate the Sabeam platform. Each provider receives only the personal information it needs to perform its function.

Render (United States): Application hosting and database
Anthropic (United States): AI drafting of progress claims, variations, defect reports, and other paperwork
OpenAI (United States): Transcription of voice notes and call recordings
Resend (United States): Sending outbound email and receiving inbound email you forward to us
Vercel (global): Hosting of our website
Sentry (United States): Error monitoring, so we can find and fix faults in the platform

Our subscription billing provider (Stripe) and phone capture provider (Twilio) will be added to this list when those features go live.

9. Cookies and Tracking

We use essential cookies to operate the platform (e.g., authentication, session management). We do not use third-party advertising cookies. Analytics cookies, if used, collect aggregated, non-identifying usage data to help us improve the Service.

You can control cookie settings through your browser. Disabling essential cookies may affect platform functionality.

10. Your Rights

Under the Australian Privacy Principles, you have the right to:

Access the personal information we hold about you
Correct inaccurate or out-of-date information
Request deletion of your information (subject to our legal retention obligations)
Withdraw consent for optional processing activities
Complain to us or to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached

To exercise these rights, contact us at privacy@sabeam.com. We will respond to access and correction requests within 30 days.

11. Children’s Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on the platform. The “Last updated” date at the top of this page indicates when the policy was most recently revised.

13. Contact Us

For privacy-related enquiries or to make a complaint:

Sabeam Privacy Officer
Email: privacy@sabeam.com
Sabeam Pty Ltd
1 Wandana Street, Mooroolbark VIC 3138, Australia

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.