Privacy Policy

• Account details: your name, email address, phone number (optional), password (stored only as a one-way hash) and whether you’re a member, agent or administrator.
• Enquiries and inspections: messages you send to agents, the listings they’re about, and open homes you register for.
• Listings you post: addresses, descriptions, prices, photos, floor plans and agent contact details.
• Saved items and searches: homes you save and searches you save, which are kept in your browser on your device.
• Location: only if you choose “Near me” or “My location”; your browser asks first, and we use it for that search only.
• Technical information: your IP address and basic request details, used for security and to stop abuse (for example rate limiting).

• To run your account, sign you in securely and verify your email address.
• To pass your enquiries to the agent or agency you contact, and to remind you about inspections you register for.
• To publish and manage listings, including on partner portals when an agency asks us to.
• To provide optional features such as maps, commute times, AI search and AI listing descriptions.
• To keep the service secure, prevent misuse and meet our legal obligations.

We don’t sell personal information. We share it only as needed to provide the service:

• Agents and agencies you enquire with receive your name, contact details and message.
• Google (Maps Platform) receives addresses and map locations to show maps, suggest addresses, find nearby places and calculate routes. Google’s use is covered by the Google Privacy Policy.
• OpenAI receives the text or photos you choose to process with AI features (for example a listing’s details when you use “Write it for me”, a question you ask about a listing, or photos you ask it to tag).
• Domain.com.au receives listing details when an agency publishes a listing to Domain through MS Realty, and enquiries sent to Domain listings.
• Email provider (such as Resend) sends account emails like verification and password reset.
• Hosting and database providers store our data on our behalf.

Some of these providers may store or process information outside Australia, including in the United States. We take reasonable steps to make sure they protect it.

We use one essential cookie to keep you signed in (it’s marked httpOnly so page scripts can’t read it). Saved homes, saved searches, commute places and draft listings are kept in your browser’s local storage on your device. We don’t use advertising cookies.

Passwords are stored as salted hashes, sign-in sessions are signed, and access to administration tools is restricted. Password reset and email links expire and work only once, and resetting your password signs you out on all devices. No online service is completely secure, so please use a strong, unique password.

We keep account information while your account is open and for a reasonable period afterwards to meet legal obligations and resolve disputes. Enquiries and listing records are kept while they’re needed for the service.

You can ask to access or correct the personal information we hold about you, or ask us to delete your account, by emailing [privacy@your-domain.com.au]. We’ll respond within a reasonable time, usually 30 days.

Contact our privacy officer at [privacy@your-domain.com.au] or [Street address, Suburb STATE Postcode]. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy. If we make significant changes, we’ll let you know on the site or by email, and the date at the top will change.