Privacy Policy

1. Who we are

Constell is a product of Plugwish Pty Ltd (ABN 91 675 083 351, ACN 675 083 351), based in the Australian Capital Territory (“Plugwish”, “we”, “us”). This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. It applies to constell.com.au and the Constell portal.

2. Our role

Organisations that use Constell (our customers) decide what information their people put into it — projects, plans, time records, documents and so on. For that information we act on our customer's behalf and under their instructions. For information we collect for our own purposes — such as account details, billing, support and people applying to join the Plugwish contractor pool — we are responsible for it directly.

3. What we collect

• Account details: name, work email, job title, organisation, profile photo (if you add one), and the state and country you work in (used for public holidays).
• Sign-in and security: your password (stored only in scrambled, hashed form), multi-factor authentication settings, and sign-in records such as time, device and IP address.
• Work information your organisation puts into Constell: projects, schedules, resource plans, time entries, rates, change requests, risks, meeting minutes, documents and comments.
• Support and requests: messages you send us through support chat, and customisation requests.
• Contractor pool applicants: what you give us when applying — such as your résumé, skills, experience, availability, rates, work rights, and business details like an ABN.
• Billing details for paying customers (business name, contact and invoices). We do not store full payment card numbers.
• Technical information: browser and device type, pages used and errors, kept to run, secure and improve the service.

4. How we collect it

Mostly directly from you, or from your organisation when an administrator adds you or invites you to a project. Some technical information is collected automatically when you use Constell. We only use cookies and browser storage that the service needs — to keep you signed in and to remember settings such as light or dark mode. We do not use advertising cookies or sell personal information.

5. Why we use it

• to provide Constell: accounts, projects, time, approvals, reports and exports;
• to keep the service and your account secure, and to prevent misuse;
• to answer support requests and consider customisation requests;
• to assess and manage applications to the Plugwish contractor pool, and to introduce suitable people to customers who ask;
• to bill paying customers and keep business records;
• to improve Constell, using aggregated or de-identified information where possible; and
• to meet our legal obligations.

6. Who we share it with

We share personal information only as needed to run the service, and never sell it:

• People in your organisation, according to the roles and permissions your organisation sets.
• Hosting providers who store and run Constell for us — our database and application servers are located in Sydney, Australia.
• Email and payment providers, when we send service emails or take payments.
• Customers, when you are a contractor-pool applicant and they ask to consider you for a role (we share what's relevant, not your full file).
• Professional advisers and authorities, where the law requires or permits it.

We do not send personal information overseas. If that changes we will update this policy first.

7. Keeping it secure

Information is encrypted in transit, every account uses multi-factor authentication, each organisation can see only its own data, and access inside Constell follows each person's role. Changes are recorded in audit logs. No system is perfectly secure; if a data breach is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner as the law requires.

8. How long we keep it

Customer information is kept while the account is active and for 90 days after a trial or subscription ends, then deleted (see our Terms of Service), unless the law requires us to keep it longer — for example, financial records. Contractor-pool information is kept while you remain in the pool; ask us any time to remove it.

9. Your choices and rights

You can ask to access or correct the personal information we hold about you, and you can update much of it yourself on your profile. If the information was put into Constell by your organisation, we may refer your request to them. We will respond within a reasonable time, usually 30 days. You can also ask us to delete information we hold for our own purposes, unless we need to keep it by law.

10. Questions and complaints

Contact us at contact@plugwish.com.au. We will acknowledge a complaint promptly and aim to resolve it within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

11. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with its effective date, and we will tell you in Constell or by email about significant changes.