Legal
Privacy
Last updated
- 01 Collect
- 02 Protect
- 03 Use
- 04 Retain
This policy explains what personal information BIZOMAT collects, why, who else processes it, where it is kept and for how long, and what you can ask us to do. It covers the BIZOMAT website (including Resources and AI search) and the two BIZOMAT applications, Project Management and CAD Automation. We aim to handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Public pages and private applications
The website, including Resources (tools, calculators, books and guides) and AI search, is public: you can use it without an account, and we do not ask who you are. Project Management and CAD Automation are private applications: you need an account, and what you create in them is visible only to you and the people and apps you give access to. Public pages and AI search never show anyone's projects, files or account details.
What we collect
When you visit the website or use Resources
- Calculators run in your browser. The values you enter are not sent to BIZOMAT.
- Your choice of light or dark display, and your progress through a learning path, stay in your browser for the current tab (session storage).
- Like any website, the servers that deliver the pages process technical information such as your IP address and browser details, to deliver the site and protect it from abuse. BIZOMAT's own request logs record the address requested and the response, not your IP address.
When you use AI search
Your question, and a short list of matching public catalogue entries, are sent to the AI provider to turn the question into search terms and suggest which entries fit. Results always come from BIZOMAT's public pages. BIZOMAT does not store your question. Please do not include personal or confidential details. If the AI provider is not available, the search works on keywords in your browser.
When you contact us
The contact form asks for your name, email address, the kind of enquiry and your message, and optionally your organisation, website, phone number and a related tool or resource. The Engineering Problem Assessment form also asks about the problem, its impact and the outcome you want. The forms do not accept files. We use these details only to reply and, if you engage us, to do the agreed work.
When you use Project Management
- Account details: your name, email address and a one-way hash of your password (never the password itself), or the ID of the Google account you sign in with, where Google sign-in is offered.
- Your content: workspaces, boards, tasks, documents, comments, files and time entries that you and your teammates create.
- Usage and sessions: sign-in and sign-out times, last activity, and the general type of device, browser and operating system. While the app is open and in use, your browser sends a small "still active" signal about once a minute, with no content. We record product events such as "created a project", never what the project says.
- Security: the IP address used to sign in and failed sign-in attempts, to protect your account. IP addresses are deleted after 30 days.
When you use CAD Automation
- Account details: your name, email address and a one-way hash of your password, or the ID of the Google account you sign in with.
- Connected AI apps: the name of each assistant you connect, and its sign-in tokens stored only as one-way hashes.
- Paired computers: the name you give each computer, its Windows computer name and version, the public half of its key, and when it was last seen.
- A record of commands: for each command sent to one of your computers, which tool and assistant sent it, when, its status and its result. The command's details are kept only as a fingerprint (a hash).
- Work in passing: while your assistant works, its commands and the shapes SOLIDWORKS sends back (for example a STEP copy of a part, to measure and check it) pass through CAD Automation and are held in memory or for a short time, then dropped. Your SOLIDWORKS files are saved on your computer.
How we use it
To provide the services you use, keep accounts and data secure, fix problems, understand whether the products are useful, and reply to you. We do not sell, rent or trade personal information, we do not use it for advertising, and we do not use your content to train AI models.
Files and attachments
Files attached in Project Management are stored with your workspace and are available only to people with access to that board. Files sent to CAD Automation for import are deleted once imported or after 30 minutes; exports are available through a one-hour link. Please share only files you are entitled to share.
AI assistants you connect
CAD Automation runs no AI of its own. The assistant you connect (for example Claude or ChatGPT) sees what the CAD Automation tools return to it, such as feature lists, measurements and preview images, under that assistant's own privacy terms. It can act only through the tools, only while you keep it connected, and only on computers paired to your account.
Cookies and storage in your browser
The website sets no tracking or advertising cookies. Each application uses one essential cookie to keep you signed in, and a short-lived one during Google sign-in where it is enabled. Display and learning-path preferences are kept in your browser's session storage and never leave your device.
Service providers
These providers process information for BIZOMAT, each under its own terms. Some may process data outside Australia.
- Fly.io: hosts the BIZOMAT platform and its applications, in its Sydney, Australia region.
- Cloudflare: DNS for BIZOMAT's domains, the AI model used by AI search (Workers AI), the spam check on some forms (Turnstile), and, while the move to the BIZOMAT platform is completed, hosting of parts of the website and Project Management on its global network.
- Web3Forms and hCaptcha: deliver contact and assessment form messages to BIZOMAT and check for spam. hCaptcha loads only when you use a form.
- Proton: the meeting booking page, if you choose to book a meeting.
- Google: sign-in, only if you choose Continue with Google. Google tells the application your name, email address, whether it is verified and your Google account ID; no access to Gmail, Drive or anything else is requested.
- GitHub: hosts the CAD Automation installer that you download after signing in.
- Integrations you turn on: if a workspace administrator connects Slack, Microsoft Teams or a webhook, the messages they choose are sent to that service.
Where information is kept
CAD Automation stores its data on servers in Sydney, Australia. Project Management moves to the same Sydney servers with the BIZOMAT platform; until that move is complete, its data is stored on Cloudflare's network (Workers, D1 and R2), which may be outside Australia. Information handled by the other providers above may be processed in other countries, including the United States.
Security
Passwords and sign-in tokens are stored only as one-way hashes; connections use HTTPS; each application keeps its data separate; commands to your computer are signed and checked before they run; and access to data is limited to the people who run the service, for operating and supporting it. No system is perfectly secure: if we become aware of a breach that is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner as the law requires.
How long we keep it
| Information | Kept for |
|---|---|
| Website enquiries you send through the contact or assessment forms | As long as needed to reply and for reasonable record-keeping |
| AI search questions | Not stored by BIZOMAT; sent to the AI provider to produce search terms |
| Project Management account (name, email, settings) | Until you ask for the account to be deleted |
| Project Management content (boards, tasks, documents, comments, files) | Until you or your workspace delete it |
| Project Management usage events and daily activity (no content) | Kept as product history |
| Project Management sign-in sessions (time, last activity, device type, browser, operating system) | 365 days after the session ends |
| IP address of a Project Management sign-in session | 30 days |
| Project Management technical error records (no personal content) | 90 days |
| CAD Automation account, connected AI apps and paired computers | Until you remove them or ask for the account to be closed |
| CAD Automation command record (tool, app, time, status, result; details only as a fingerprint) | With your account |
| Files uploaded to CAD Automation for import | Deleted once imported, or after 30 minutes |
| Files exported from SOLIDWORKS through CAD Automation | Download link valid for one hour, then deleted |
Your choices and rights
You can view and update your profile in each application, end sign-in sessions, disconnect AI apps and remove paired computers. Workspace administrators can export a workspace. You can ask us for access to, correction of, or deletion of your personal information through the contact page or by email at info@bizomat.ai. We will confirm who you are before acting on a request about an account. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Your responsibilities
If you administer a workspace or invite people to an application, you are responsible for having the right to add them and to share the information you put into it. Please do not put sensitive personal information (such as health information) into tasks, documents, files or AI search unless you have a lawful reason and the consent required.
Changes to this policy
We will update this policy as BIZOMAT changes. The date at the top of this page shows when it last changed.