Privacy Policy
Effective date: [2026-10-12]
Last updated: [2026-10-12]
ArchiMAT helps people find materials and solutions, organise projects and manage commercial spaces beyond the build. This Privacy Policy explains how personal information is handled when you visit archimat.io or use our applications and related services that link to this policy (the “Services”).
The Services are operated by ArchiMAT Inc., [CONFIRM LEGAL ENTITY AND JURISDICTION], at [BUSINESS ADDRESS] (“ArchiMAT”, “we”, “us” or “our”).
For privacy questions or requests, contact [PRIVACY EMAIL]. Our designated privacy contact is [NAME OR ROLE; DPO DETAILS IF APPLICABLE]. We determine how personal information is used for purposes such as managing accounts, billing, securing the Services and responding to enquiries. When an organization uploads or manages personal information in its projects or spaces, that organization may determine the purposes of processing, and we may process the information on its behalf under our agreement with it. In that case, contact the organization first about its records; we will assist as required by our agreement and applicable law.You must be at least 18 and legally able to enter into this agreement. Provide accurate account and billing information, keep credentials secure and tell us promptly if you suspect unauthorised access. Each named-user account is for its authorised user unless your plan expressly permits otherwise.
You are responsible for users you authorise, their permissions and their use of your organization’s account. Administrators may manage access and content within their authority. Ensure that any invitation, transfer or access change is authorised by the relevant organization.
We use relevant information to:
- Create accounts, authenticate users and manage permissions.
- Provide discovery, comparison, enquiries and sample-request functions.
- Store and organise project, space, asset, maintenance and handover records.
- Generate requested summaries, calculations and reporting outputs.
- Administer subscriptions, payments and account communications.
- Respond to support requests and investigate problems.
- Protect users and the Services against misuse, fraud and security incidents.
- [IF ENABLED: analyse service usage to improve reliability and usability.]
- Send marketing communications where permitted and consistent with your preferences.
- Meet legal obligations, resolve disputes and enforce agreements.
Where applicable law requires a lawful basis, we rely on the basis appropriate to the purpose: performance of our contract with you; compliance with legal obligations; consent for activities requiring consent; or legitimate interests such as service security, support and improvement, where those interests are not overridden by your rights. When a business customer is the contracting party, processing its representatives’ information may instead rely on legitimate interests. You can contact us for details about a particular use.
Information you choose to publish in a public business profile, material listing, showcase or public map may be accessible to other users, visitors and search engines. Do not include confidential records or personal site details in public content.
Project and space records are accessible according to [DESCRIBE ACTUAL DEFAULT VISIBILITY, ROLE PERMISSIONS AND LINK-SHARING RULES]. Your organization’s authorised administrators may manage memberships, permissions and records within that organization’s account. Inviting collaborators, sharing links or transferring records during handover can give others access.
Removing your individual login does not necessarily remove records controlled by an organization or copies already lawfully received by others. Requests concerning those records will be considered with the organization and applicable retention and privacy obligations.
We disclose relevant information to:
- Authorised collaborators and administrators, to provide the access described above.
- Suppliers and service providers you contact, when you submit an enquiry, sample request or other request requiring your information to be sent to them. They are responsible for their subsequent handling under their own privacy notices.
- Providers supporting ArchiMAT, such as [CONFIRM: hosting, storage, authentication, payment, email, support, analytics and AI providers], for the purposes described in this policy and under appropriate agreements.
- Professional advisers and authorities, where reasonably necessary for advice, legal compliance, lawful requests, safety, dispute resolution or protection of rights.
- Parties to a business transaction, where necessary in a proposed or completed merger, financing or transfer of business, subject to appropriate confidentiality and privacy safeguards.
Sale, advertising and other commercial sharing: [INSERT VERIFIED PRACTICE. STATE WHETHER PERSONAL INFORMATION IS SOLD, SHARED FOR CROSS-CONTEXT BEHAVIOURAL ADVERTISING OR USED FOR TARGETED ADVERTISING; IDENTIFY APPLICABLE CONTROLS. DO NOT INFER “NO” FROM THE ABSENCE OF CASH SALES.]
We use [IDENTIFY ACTUAL TECHNOLOGIES AND PROVIDERS] for [CONFIRMED PURPOSES]. Essential technologies support functions such as sign-in and security. [IF USED: optional analytics, personalisation or advertising technologies operate in accordance with the choices and consent requirements applicable to you.]
You can manage available choices through [WORKING COOKIE-PREFERENCES LINK OR CONTROL] and your browser settings. Blocking essential technologies may affect service functionality. Details of technology providers, purposes and durations are available at [COOKIE DETAILS LINK OR INSERT INVENTORY].
[INCLUDE ONLY IF ENABLED.] Location and media features allow users to record site visits, deliveries or work progress. We collect [PRECISE DATA] when [TRIGGER; EXPLICITLY STATE WHETHER BACKGROUND COLLECTION OCCURS], and make it available to [RECIPIENTS/ROLES] for [PURPOSE]. Records are retained for [PERIOD OR SPECIFIC CRITERIA].
You can manage device permissions in your device settings. Disabling a permission may prevent the related feature from working. It does not automatically delete records already submitted. Photographs may contain people or location metadata; check what you upload and obtain any necessary permission.
[INCLUDE ONLY IF ENABLED.] When you use [FEATURES], [DATA CATEGORIES]
are processed by [ArchiMAT/IDENTIFIED PROVIDERS] to produce [OUTPUTS]. These providers retain information for [PERIOD] and [EXPLAIN TRAINING/SECONDARY USE AND CONTROLS ACCURATELY]. Available choices are [CONTROLS].AI-assisted outputs may contain errors. Do not enter information you are not authorised to share. [DISCLOSE ANY SOLELY AUTOMATED DECISIONS WITH LEGAL OR SIMILARLY SIGNIFICANT EFFECTS, THEIR LOGIC AND SAFEGUARDS IF APPLICABLE; OTHERWISE CONFIRM WHETHER NONE OCCUR.]
Information is stored or accessed in [COUNTRIES/REGIONS], including locations used by our service providers. Privacy laws may differ between countries. Where required, we use [ACTUAL SAFEGUARDS AND TRANSFER MECHANISMS] for international transfers. Contact us for information about the safeguards relevant to your information and how to obtain a copy where applicable.
We retain personal information only for as long as reasonably needed for the stated purposes, including providing the Services, complying with legal requirements and resolving disputes.
- Account and profile: [ACTIVE ACCOUNT PERIOD PLUS DEFINED POST-CLOSURE PERIOD]
- Customer project and space records: [CUSTOMER INSTRUCTIONS, CONTRACT PERIOD AND DELETION/EXPORT WINDOW]
- Billing and tax records: [PERIOD REQUIRED UNDER APPLICABLE LAW]
- Support and security logs: [DEFINED PERIODS]
- Location/check-in records: [DEFINED PERIOD OR CUSTOMER-CONTROLLED SCHEDULE]
- Backups: [BACKUP EXPIRY PERIOD AND RESTRICTIONS ON USE]
Information may be retained longer where legally required, subject to a legal hold or necessary for an ongoing dispute. When it is no longer needed, we delete it or anonymise it so it no longer identifies you. Account closure, subscription cancellation and deletion of organization-controlled records are separate processes.
We use reasonable technical and organizational safeguards designed to protect personal information. No service or transmission method can guarantee absolute security. Protect your login credentials, review access permissions and promptly report suspected unauthorised access to [SUPPORT/SECURITY CONTACT]. Where required by applicable law, we notify affected people and authorities of qualifying personal data breaches.
Depending on applicable law and our role, you may have rights to access, correct, delete or receive a copy of personal information; restrict or object to processing; withdraw consent; request portability; or opt out of certain advertising, sale, sharing or profiling activities. Where applicable, you may appeal a refusal. These rights are subject to legal conditions and exceptions.
Send requests to [PRIVACY EMAIL] or [REQUEST FORM, IF AVAILABLE]. We may need proportionate information to verify your identity or an agent’s authority. We will respond within the period required by applicable law and explain any refusal and applicable appeal route. We will not unlawfully discriminate against you for exercising your rights.
You can unsubscribe from marketing using the unsubscribe link or by contacting us. We may still send necessary account, billing, security and service communications. Withdrawing consent does not affect earlier lawful processing.
You may complain to your relevant data protection authority. Where applicable, this may include Malaysia’s Personal Data Protection Commissioner, Singapore’s PDPC, an EU supervisory authority or the UK ICO.
The Services are intended for adults acting in a business or professional capacity and are not directed to children under 18. If you believe a child has provided personal information without appropriate authorisation, contact us so we can investigate and take appropriate action.
We update this policy when our practices or legal requirements change and revise the date above. We provide additional notice of material changes and obtain consent where legally required. Publishing an updated policy does not itself constitute your consent to new processing that requires consent.
Privacy Contact: [PRIVACY EMAIL]
Company: [CONFIRMED LEGAL ENTITY]
Address: [BUSINESS ADDRESS]