Privacy Policy

Personal information is information or an opinion, whether true or not and whether recorded in a material form or not, about an individual who is identified or reasonably identifiable.

The types of personal information we may collect about you include:

• Identity Data including basic identifying and contact information, such as your name, age and gender;
• Contact Data including your email, phone number, address and emergency contact information if required;
• Financial Data — Financial documents uploaded to the Platform may contain confidential personal and financial information. We recognise the sensitive nature of these records and take reasonable technical and organisational measures to protect them from unauthorised access, misuse, interference, loss, modification, or disclosure. Access to financial documents is restricted to authorised users and authorised service providers who require access to operate, maintain, or support the Platform. We implement security controls such as encryption, access management procedures, authentication controls, and secure cloud storage practices designed to protect financial records stored on the Platform.
• Transaction Data including details about payments to you from us and from you to us and other details of products and services you have purchased from us or we have purchased from you;
• Property Data including property plans, specifications, previous planning approvals, and other property-related documents that you choose to upload to our platform;
• Technical and Usage Data when you access any software or websites we make available to you, details about your use of such platforms, which may include username and password details, your internet protocol (IP) address, your search queries or browsing behaviour (including through the use of cookies, tracking pixels, and other analytics tools);
• Interaction Data including information you provide to us when you participate in any interactive features, including surveys, feedback forms, contests, promotions, activities or events;
• Marketing Data including your preferences in receiving marketing from us and our third parties and your communication preferences; and
• Professional Data including where you are a worker of ours or applying for a role with us, your professional history such as your previous positions and professional experience, or whether you hold required authorisations or licences (if applicable).

We collect personal information in a variety of ways, including:

• when you provide it directly to us, including face-to-face, over the phone, over email, online or when you upload property-related information to our platform;
• through communications on our platform between property owners, builders, and contractors;
• when contractors register to be listed in our marketplace;
• when you complete a form, such as registering for any events or newsletters, or responding to surveys;
• when you use any software or website we operate and make available to you (including from any analytics and cookie providers or marketing providers — see the 'Cookies and Analytics' section below for more detail);
• from third parties authorised to interact with the platform, such as builders and contractors. This may include property-related information, communications, and documents shared by these parties as part of their interaction with property owners through our platform; or
• from publicly available sources.

We collect, hold, use and disclose your personal information for the following purposes:

• to work with you as a customer, supplier or contractor of our business;
• to facilitate the storage and management of property-related information for property owners;
• to enable communication between property owners, builders, and contractors;
• to operate a marketplace for contractors offering property-related services;
• to facilitate the transfer of property information between owners during property sales;
• to contact and communicate with you about our business, including in response to any support requests you lodge with us or other enquiries you make with us;
• to contact and communicate with you about any enquiries you make with us via any website we operate;
• for internal record keeping, administrative, invoicing and billing purposes;
• for analytics, market research and business development, including to operate and improve our business, associated applications and associated social media platforms;
• to send you information about our products, services, promotions, and offers and, where you have provided your consent, information about products, services, promotions, or offers provided by selected third-party partners that may be relevant to your property ownership or household management needs. To run promotions, competitions and/or offer additional benefits to you. We will not disclose your personal information to third parties for their direct marketing purposes without your consent or unless otherwise permitted by law.
• if you have applied for employment with us, to consider your employment application; and
• to comply with our legal obligations or if otherwise required or authorised by law.

We will only disclose your personal information to third parties where it is necessary as part of our business, where we have your consent, or where permitted by law. This means that we may disclose personal information to:

• our employees, contractors and/or related entities;
• if you are a property owner, to builders and strata managers connected to your property, for the purpose of communication and property management;
• contractors listed in our marketplace, for the purpose of providing property-related services;
• IT service providers, data storage, web-hosting and server providers;
• marketing or advertising providers;
• professional advisors, bankers, auditors, our insurers and insurance brokers;
• payment systems operators or processors;
• our existing or potential agents or business partners;
• if we merge with, or are acquired by, another company, or sell all or a portion of our assets, your personal information may be disclosed to our advisers and any prospective purchaser's advisers and may be among the assets transferred;
• courts, tribunals and regulatory authorities, in the event you fail to pay for goods or services we have provided to you;
• courts, tribunals, regulatory authorities and law enforcement officers, as required or authorised by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights;
• third parties to collect and process data, such as analytics providers and cookies; and
• any other third parties as required or permitted by law, such as where we receive a subpoena.

Some of the third-party service providers we use may store, process or access personal information outside Australia.

For example, we may use cloud hosting and infrastructure services provided by Amazon Web Services (AWS) and other technology providers. Depending on the configuration of those services, personal information may be stored or processed in Australia and other countries, including the United States, Singapore and other jurisdictions in which our service providers operate data centres or support services.

We may disclose personal information to the following categories of overseas recipients:

• cloud hosting and infrastructure providers;
• analytics and performance monitoring providers;
• customer support and communication service providers;
• payment processing providers; and
• other technology service providers that assist us in operating the Platform.

Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the recipient handles personal information in a manner consistent with the Australian Privacy Principles, including through contractual obligations, security requirements and due diligence processes.

By using the Platform, you acknowledge that your personal information may be transferred, stored or processed outside Australia in accordance with this Privacy Policy.

We are committed to ensuring that the personal information we collect is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure personal information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.

While we are committed to security, we cannot guarantee the security of any information that is transmitted to or by us over the Internet. The transmission and exchange of information is carried out at your own risk.

We retain personal information only for as long as reasonably necessary to provide the Platform, fulfil the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, enforce our agreements, and maintain appropriate business records.

Personal information and user content stored within an active account will generally be retained for as long as the account remains active.

If you close your account, we may retain your personal information and uploaded content for up to 30 days following account closure to allow for account recovery, user-requested reactivation, data export requests, and administrative processing. After this period, we will take reasonable steps to securely delete, destroy, or de-identify personal information unless we are required or permitted by law to retain it for a longer period.

Certain information may be retained for longer where necessary to comply with legal, regulatory, taxation, accounting, security, fraud prevention, or dispute resolution requirements.

Users are encouraged to export any records, documents, or other content they wish to retain before requesting account deletion.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Despite these measures, no method of electronic storage or transmission is completely secure.

If we become aware of a data breach involving personal information, we will promptly investigate the incident and take appropriate steps to contain and remediate any risks.

Where a data breach is likely to result in serious harm to affected individuals and constitutes an eligible data breach under the Privacy Act 1988 (Cth), we will comply with our obligations under the Notifiable Data Breaches scheme. This may include notifying affected individuals and providing a statement to the Office of the Australian Information Commissioner (OAIC) as required by law.

Any notification will include information about the nature of the breach, the kinds of information affected, recommended steps individuals can take to protect themselves, and the measures we are taking in response to the incident.

The Platform is intended for use by individuals who are at least 18 years of age. We do not knowingly collect personal information directly from children or permit individuals under the age of 18 to create an account or use the Platform in their own capacity.

However, users may choose to upload documents or records that contain personal information relating to children, such as information contained in property, estate, insurance, family, or household records. In such circumstances, that information is collected and stored solely as part of the content uploaded by the account holder and is handled in accordance with this Privacy Policy.

If we become aware that personal information has been collected directly from a child in a manner that is inconsistent with this Privacy Policy or applicable law, we will take reasonable steps to delete that information or otherwise address the issue as required by law.

If you believe that a child has provided personal information to us directly, please contact us using the details set out in this Privacy Policy.

Documents, records, photographs, and other content uploaded to the Platform are private and are not publicly accessible by default.

We store user content for the purpose of providing the Platform's record management, storage, organisation, retrieval, sharing, and related services. Access to user content is restricted to the account holder, persons authorised by the account holder, and authorised service providers who require access to operate, maintain, secure, or support the Platform.

We do not make users' property records, financial documents, household records, photographs, building plans, or other uploaded content publicly available unless the user expressly chooses to share that content through a feature provided by the Platform.

We may use cookies, tracking pixels and similar technologies on our website and in our emails from time to time. Cookies are text files placed in your computer's browser to store your preferences. Tracking pixels are tiny, invisible images (typically the size of one pixel) embedded in web pages or emails. Cookies and tracking pixels, by themselves, do not tell us your email address or other personally identifiable information. However, they do recognise you when you return to our online website and allow third parties to cause our advertisements to appear on your social media and online media feeds as part of our retargeting campaigns. If and when you choose to provide our online website with personal information, this information may be linked to the data stored in the cookie or collected by tracking pixels. Unlike cookies, tracking pixels do not store any information on your device, but instead send information to our servers when the pixel is loaded.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies.

You can block tracking pixels by using ad-blocking or privacy-focused browser extensions. Some email providers allow you to block images by default, which can prevent tracking pixels in emails from loading.

However, if you use your browser settings to block all cookies (including essential cookies) and tracking pixels you may not be able to access all or parts of our website and you may not receive personalised content.

Our website and platform may contain links to other parties' websites. We do not have any control over those websites and we are not responsible for the protection and privacy of any personal information which you provide whilst visiting those websites. Those websites are not governed by this Privacy Policy.

If you connect your account with us using a single sign-on account, we will collect your personal information from the single sign-on provider. We will do this in accordance with the privacy settings you have chosen with that provider.

The personal information that we may receive includes your name, ID, username, handle, profile picture, gender, age, language, list of friends or follows and any other personal information you choose to share.

We use the personal information we receive from the single sign-on provider to create a profile for you on our platform and to access our services.

You may choose to create or access your account using a third-party authentication provider, such as Facebook, Google, Apple, or other supported login services.

Where we receive personal information from a third-party authentication provider, we will handle that information in accordance with this Privacy Policy and the permissions you have granted to that provider. You may request access to, correction of, or deletion of personal information obtained through a third-party authentication provider by contacting us using the details set out in this Privacy Policy. Please specify the information you would like deleted or the nature of your request.

Please note that deleting personal information held by us will not automatically delete information held by the relevant authentication provider. You may also need to manage or revoke permissions directly through your account settings with Facebook, Google, Apple, or the relevant provider.

If we are unable to comply with a deletion request, we will explain the reasons for our decision and advise you of any available complaint mechanisms.

We collect your precise or approximate location via our mobile application for the following purposes:

• to display and manage the locations of properties you own;
• to provide location-based services, such as showing nearby contractors or service providers in our marketplace; and
• as permitted by law.

We collect this information when you enable our mobile application to use your device's location services. If you do not want us to use your location for the purposes above, you should turn off the location services in your mobile phone settings. If you do not provide geolocation data to us, it may affect our ability to work with you as a customer or supplier of our business.

We may update this Privacy Policy from time to time to reflect changes to our business practices, legal obligations, technology, or the services we provide.

Any updated version of this Privacy Policy will be published on our website and, where applicable, made available through the Platform. The "Last Updated" date at the top of this Privacy Policy will indicate when changes were made.

If we make material changes to the way we collect, use, disclose, store, or otherwise handle personal information, we will provide reasonable advance notice before those changes take effect. Such notice may be provided by email, through the Platform, by push notification, or by other appropriate means.

Unless a longer period is required by law, material changes will generally take effect no earlier than 14 days after notice is provided.

Your continued use of the Platform after the effective date of any changes constitutes acknowledgement of the updated Privacy Policy.