Privacy Policy

Account information, contact details, site photographs, defect data, floor plans, and subcontractor details submitted through the Platform.

The Platform processes customer operational inputs through automated machine learning models to provide defect detection and analytics. This processing occurs only when the “AI Defect Detection” feature toggle is activated by a user or Organisation Administrator.

Defect images and related data submitted for AI classification are processed by Anthropic PBC via its commercial API. According to Anthropic’s published policies, data submitted through its commercial API is automatically deleted from its systems within 30 days of processing and is not used to train Anthropic’s models by default. Cerekon relies on Anthropic’s stated data handling practices as published from time to time; Cerekon shall have no liability for any act, omission, retention practice, or policy change by Anthropic or any other third party subprocessor. The Provider may update or change its third party AI subprocessors from time to time and will update this Privacy Policy accordingly.

• Deactivation: turning the AI Defect Detection toggle to “OFF” halts active processing of new data by the machine learning models.
• Historical Data Logs: analytical logs or defect histories compiled during active processing periods continue to be retained on the Provider’s secure servers to preserve historical reporting integrity.
• Data Management: to permanently remove historical AI generated records, an authorised account administrator must submit a deletion request to the Provider at info@cerekon.com. Deletion requests are processed manually by the Provider.

Customer data is not used to improve or fine tune the Provider’s own models unless a customer has separately and explicitly opted in to such use.

Data is currently hosted on infrastructure located in Singapore. Where customers are based in Australia, data relating to their use of the Platform is processed in Singapore and made accessible to them from Australia.

Site photographs uploaded to the Platform may capture identifiable individuals or third party property incidental to the construction site being documented.

On closure or deactivation of an organisation account, all associated projects and data are disabled and archived, not deleted. Prior to permanent deletion, the customer may download inspection reports generated within the preceding 12 months; retention and safekeeping of these downloaded reports thereafter is the customer’s own responsibility. A customer may submit a specific request to the Provider for permanent deletion of an organisation’s data set. Such requests are considered at the Provider’s discretion, and the Provider reserves the right to decline, delay, or charge a fee for processing a deletion request. Please note that backup copies may retain data for a limited period consistent with the Provider’s backup cycle, even after a deletion request has been actioned or approved.

Individual names are excluded from exported PDF reports by default; role labels are used instead. A named audit trail is retained within the Platform for accountability and compliance purposes.

Data is protected using AES-256 encryption at rest and TLS 1.3 in transit.

Processing is conducted in accordance with Singapore’s Personal Data Protection Act and, where applicable, Australia’s Privacy Act 1988 and the Australian Privacy Principles.

Subcontractor users invited to the Platform by a main contractor are presented with a mandatory consent screen on first login, summarising this Privacy Policy and the Terms of Service as they apply to the subcontractor’s role and data.

You may request access to, correction of, or deletion of your personal data, subject to the archiving arrangements described in Section 8.

Privacy related queries may be directed to the Data Protection Officer at support@vizcheck.co.