Privacy policy
How Paystruct collects, uses, stores and discloses personal information, and what you can ask us to do with it.
Last updated 22 August 2026. This policy applies to the Paystruct website, the Paystruct application, and the support we provide around them.
The short version
We collect what the account and the claims need, we keep it in your organisation's own space, and we do not sell it.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Personal information means information about an individual who is identified, or who is reasonably identifiable from it.
Paystruct is business software. Most of what you put into it is information about companies, contracts and money, but it will often carry personal information as well: the name of the contract administrator a claim is addressed to, the email address it is served to, the mobile number on your own account. This policy explains how all of that is handled.
- We collect only what the account, the claims and the support need.
- Documents you upload sit against your organisation and are not visible to other users.
- We do not sell personal information and we do not use your data for advertising.
- You can ask for a copy of what we hold, or ask us to correct it, at any time.
What we collect
Four kinds of information, collected from you rather than from anyone else.
Account and organisation details
Your name, email address, phone number, and the organisation details you enter: business name, ABN, addresses, licence numbers, logo and the contact people on your account. Passwords are stored as one way hashes, never as readable text.
The contract and claim data you upload
The contracts, schedules of works, payment claims, payment schedules, notices, remittances and other documents you upload or enter, together with the figures and the parties named in them. This is the substance of the service. It regularly contains personal information about people who are not our users, such as the individual named for service of notices under a contract.
Usage and technical logs
Standard log data generated when the service is used: pages and actions, timestamps, IP address, browser and device information, and errors. We use it to keep the service running, to investigate faults, to keep accounts secure and to detect misuse.
Billing and support records
Where fees apply, our payment provider processes the card details and we hold the billing contact, the plan, the invoices and the payment status. We do not store full card numbers. We also keep the emails and in-app messages you send us and our replies, so a question you have raised does not have to be raised twice.
Why we collect it, and what we do with it
To run the service you have asked for, and to keep it working. Nothing else.
Running the service
To create and secure your account, to build, check, store and produce your claims, to work out dates and amounts, to keep the record of what was served and when, to send the emails the account needs, to answer your support requests, and to bill you where fees apply.
Documents processed by AI models
Documents you upload may be sent to third party AI model providers so their models can read them: to extract the contract terms, to weigh the notice provisions, and to review a claim before you serve it. Those providers act as our processors, which means they process the document to return a result to us and not for their own purposes. AI output can be wrong, so every result is shown to you to check rather than applied to your claim on its own. Do not upload documents you are not entitled to share, and do not include sensitive personal information that the claim does not need.
Keeping the product working
We look at aggregated and de-identified usage to understand which parts of the product work and which do not. Where we need to look at your data to investigate a fault or answer a support request, access is limited to the people who need it for that purpose.
What we do not do
We do not sell personal information. We do not disclose your contract data to other users, or to the party on the other side of your contract, except in the documents you choose to serve. We do not use your data for advertising, and we do not send marketing you have not asked for.
Where it is stored, and who it goes to
With the providers needed to run the service, and with the people you serve documents on.
Storage and security
Your data is held with established cloud infrastructure providers, in Australian regions where that is practicable. Traffic between you and the service is encrypted in transit. Access is controlled by authentication on every account and by isolation between organisations, so the documents you upload sit against your organisation and are not visible to other users. No system is impenetrable, so keep your own copies of anything critical, including served claims and evidence of service.
Service providers
We disclose personal information to the providers we need in order to run Paystruct: hosting and database providers, AI model providers, our payment provider, our email delivery provider, and product analytics. Each acts as our processor, for the purpose we engage them for. We also disclose information where the law requires or authorises it, and to our professional advisers where necessary.
Overseas disclosure
Some of those providers process data outside Australia. Where that happens we take the steps that are reasonable in the circumstances, as Australian Privacy Principle 8 requires, to ensure the recipient handles the information consistently with the Australian Privacy Principles.
The people you serve documents on
A payment claim is a document meant to be given to someone. When you export a claim pack and serve it, its contents go to the parties you nominate. That is the point of the service and it is your decision, not ours. Paystruct itself sends only the emails your account needs, such as verification and account notices.
How long we keep it, and what you can ask for
Claim records are evidence, so they are kept while you need them and not longer than we should.
Retention periods
Account information is kept while the account is open. Contract and claim records are kept while the account is open, because they are the evidence behind claims you have served, and for a reasonable period after closure so that you can export them. After that we delete or de-identify what we no longer need, unless we are required to keep it, and backups cycle out on their own schedule.
Access and correction
You can see and correct your account and organisation details in the app at any time. For a copy of the other information we hold about you, or to correct something you cannot change yourself, email support@paystruct.com.au. We will ask you to verify who you are, and we aim to respond within 30 days. If we cannot give access or make a correction, we will tell you why.
Closing an account and deleting data
You can close your account in the app or by writing to us. If you ask us to delete your data we will do so, subject to any records we are required to keep and to backups that expire in the ordinary course. Export anything you need before you close the account.
Cookies
We use cookies to keep you signed in and to keep the session secure. Where product analytics are enabled, they are used to understand how the product is used, not to build an advertising profile of you.
Data breaches, complaints and changes
If something goes wrong, you will hear it from us, and you can take it further.
Notifiable data breaches
We are covered by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth). If a data breach occurs that is likely to result in serious harm, we will notify the individuals at risk and the Office of the Australian Information Commissioner as the scheme requires, and we will tell you what happened and what to do about it.
Complaints
If you think we have mishandled your personal information, email support@paystruct.com.au with the details. We will acknowledge the complaint, investigate it, and give you a written response. If you are not satisfied with that response, you can take the complaint to the Office of the Australian Information Commissioner.
Changes to this policy
We update this policy as the product changes. The current version is the one on this page, and the date it was last updated is at the top of it. Where a change is significant we will tell account holders as well.
Contact us
Privacy questions and requests go to support@paystruct.com.au, or through the contact page. The terms that govern your account are summarised on the terms of use page.