1. Who is responsible for your information
MorisAi Technologies Ltd, operating BuildMoris, acts as the data controller for platform information where it determines how and why that information is processed. Privacy enquiries may be sent to info@buildmoris.com.
2. Information we may collect
- Account details such as name, email address, telephone number and authentication records.
- Professional or company details, authorised team members, service areas, credentials and verification evidence.
- Homeowner project briefs, approximate locations, requirements, files, invitations and quotation activity.
- Portfolio material, reviews, responses, complaints, appeals and moderation records.
- Subscription, invoice and payment-status information. BuildMoris should not store full payment-card or mobile-wallet credentials.
- Technical and security data such as device, browser, IP address, access logs, consent records and fraud signals.
- Communications with support and notification preferences.
3. Why we use information
Information may be used to create and secure accounts, operate profiles and project workflows, check specific credentials, match relevant services and regions, manage subscriptions, send requested notifications, moderate content, handle complaints, prevent abuse, improve usability and comply with legal obligations.
The legal basis will depend on the activity and may include performing a contract, taking requested pre-contract steps, compliance with law, legitimate interests that do not override individual rights, or consent where consent is required. Consent may be withdrawn for future processing where it is the applicable basis.
4. Public and private information
Approved professional profile details, service areas, scoped verification statements, portfolios and published reviews may be public. Identity documents, private verification evidence, exact homeowner addresses, private project files, personal contact details and non-public communications must not be displayed publicly.
Homeowner locations should be masked before selection or direct handoff. Private files should be accessed only by authorised users using time-limited links and auditable permissions.
5. Who may receive information
Information may be disclosed to the homeowner or professional involved in a requested interaction, authorised BuildMoris staff, and contracted service providers supporting hosting, authentication, storage, email delivery, security, analytics, support and payment-status processing. Providers should receive only the information needed for their role and be bound by appropriate contractual and security safeguards.
Information may also be disclosed where required by law, a competent authority or a lawful process, or where reasonably necessary to protect users, rights or platform security.
6. International processing
Some technology providers may process information outside Mauritius. Before launch, BuildMoris must document hosting regions, vendor terms and any safeguards required for cross-border transfers under the Mauritius Data Protection Act 2017.
7. Retention
Information will be kept only as long as reasonably necessary for the relevant service, security, dispute, legal and accounting purpose. Different periods may apply to active accounts, expired verification evidence, project records, billing records, support cases, audit events and backups. Raw first-party traffic events are automatically removed after 13 months.
8. Security
Planned safeguards include role-based access, database-level row security, multi-factor authentication for privileged users, private file storage, encryption in transit, signed file links, audit events, rate limits, secure backups and recovery testing. No system can guarantee absolute security; suspected incidents should be reported promptly to info@buildmoris.com.
9. Your data-protection rights
Subject to the Mauritius Data Protection Act 2017 and any applicable conditions, a person may request access to personal information, correction of inaccurate information, erasure, restriction, objection or portability, and may withdraw consent where consent is relied on. A person may also complain to the Mauritius Data Protection Office.
Use the privacy request form or email info@buildmoris.com. BuildMoris may need proportionate information to confirm identity before fulfilling a request.
10. Cookies, analytics and notifications
Essential technologies may be used for authentication, security, language choice and session continuity. With a visitor’s choice, BuildMoris uses a random first-party identifier to count basic monthly unique visitors, page views and advertising impressions. The traffic report does not store a raw IP address, browser user-agent or account identity. Advertising link clicks are counted as operational campaign delivery. Visitors may continue without optional analytics. Users may also manage non-essential notification preferences, although service and security notices may still be necessary.
11. AI-assisted processing
Where enabled, AI may help structure an editable project brief, identify missing information, categorise requests or summarise proposal differences. BuildMoris should minimise and redact personal information before model calls, record the model and prompt version, and preserve a non-AI workflow. Private documents must not be used to train a model without a documented legal basis and explicit product decision.
12. Children and changes to this policy
The platform is not intended for children to enter construction contracts or submit project information independently. Material policy changes will be communicated through an appropriate in-product or email notice, and the updated date will be shown above.
Official Mauritius framework
This draft was prepared with reference to the Mauritius Data Protection Act 2017 information published by the Data Protection Office and its official guidance on data-processing principles. Current law and regulator guidance must be checked again before launch.
