Privacy Policy

1. Introduction

Property32 ("we", "us", or "our") is committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our property portfolio tracking platform and services (the "Service").

By using our Service, you consent to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, phone number (optional)
• Property Data: Property addresses, purchase prices, values, rental income, expenses
• Financial Data: Loan details, income figures, expense records (for calculations only)
• Documents: Any documents you choose to upload
• Communications: Messages you send to us or through our platform

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, referring pages
• Cookies: Session and preference cookies (see Section 9)

2.3 Information We Do NOT Collect

• Bank account numbers or login credentials
• Credit card details (handled by our payment processor)
• Tax File Numbers (TFN)
• Government ID numbers

3. How We Use Your Information

We use your personal information to:

• Provide the Service: Enable property tracking, calculations, and portfolio management
• Communicate: Send service updates, security alerts, and support responses
• Improve: Analyse usage patterns to improve our Service
• Secure: Detect and prevent fraud, abuse, and security incidents
• Comply: Meet legal and regulatory requirements

4. Legal Basis for Processing

Under the Privacy Act 1988, we process your personal information based on:

• Consent: You have given consent for specific purposes
• Contract: Processing is necessary to provide our services to you
• Legal Obligation: We must comply with Australian law
• Legitimate Interests: For improving our services, provided your interests don't override ours

5. Information Sharing

5.1 We May Share Your Information With:

• Service Providers: Cloud hosting, email delivery, payment processing (under contract)
• Legal Requirements: Courts, regulators, or law enforcement when required by law
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5.2 We Do NOT:

6. Data Security

We implement appropriate technical and organisational measures to protect your data:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication
• Monitoring: 24/7 security monitoring and logging
• Data storage: Hosted on secured, access-controlled infrastructure with encryption at rest
• Audits: Regular security assessments and updates

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as:

• Your account is active
• Needed to provide services to you
• Required to comply with legal obligations (e.g., tax records: 7 years)
• Necessary to resolve disputes and enforce agreements

When you delete your account, we will delete or anonymise your personal data within 30 days, except where we need to retain it for legal or business purposes.

8. Your Rights

Under the Privacy Act 1988 and APPs, you have the right to:

To exercise these rights, contact us at privacy@property32.com.au. We will respond within 30 days.

9. Cookies and Tracking

We use cookies and similar technologies for:

You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality.

10. International Transfers and Service Providers

Your personal information is primarily stored and processed in Australia (AWS Sydney region — ap-southeast-2). Some of our service providers may process limited personal information outside Australia. As at the date of this Privacy Policy, our named sub-processors are:

• AWS (Amazon Web Services) — application hosting, database hosting, file storage. Data processed in Australia (ap-southeast-2). Operated by AWS Inc. (United States parent).
• Supabase — managed Postgres hosting. Data processed in Australia (ap-southeast-2). Operated by Supabase Inc. (United States parent).
• Amazon SES — transactional and marketing email delivery. Data processed in Australia (ap-southeast-2).
• Stripe — payment processing for subscriptions. Cardholder data processed in the United States by Stripe, Inc. and held under PCI-DSS Level 1 controls.

All overseas disclosures comply with APP 8 (cross-border disclosure). We require service providers to implement appropriate security and confidentiality controls. We will update this list when sub-processors change.

11. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page
• Sending an email notification to registered users
• Displaying a prominent notice in the Service

13. Contact Us

For privacy-related inquiries or to exercise your rights, contact us:

We aim to respond to all privacy inquiries within 30 days.

14. Complaints

If you believe we have breached the Privacy Act or APPs, you can:

1. Contact us first at privacy@property32.com.au
2. If unsatisfied with our response, lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

15. Public Calculator Tools

When you use a public calculator on this site (under /tools or /agents/tools) and choose to receive a PDF report by email, we collect the email address you provide, the calculator you used, the inputs you entered, and a salted hash of your IP address. We use this information to deliver the report and, if you opt in, to send occasional Property32 marketing emails. You can unsubscribe at any time using the link in the emails. Public-calculator data is retained for 24 months and then deleted.