Privacy Policy

Last updated: 28 July 2026 Status: Draft — pending review by our solicitor prior to commercial launch.

1. Introduction

This Privacy Policy explains how Prop IQ ("Prop IQ", "we", "us", "our") handles your personal information. We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs").

By using Prop IQ you agree to the collection, use and disclosure of your personal information as described in this Privacy Policy.

2. Who we are

Prop IQ is an Australian property intelligence platform. We help homeowners understand their property, prepare it for sale, receive proposals from licensed real estate agents, and access AI-assisted guidance from our assistant "IQ".

Our registered office is in Queensland, Australia. Contact details are set out at the end of this policy.

3. Information we collect

We collect the following kinds of personal information:

• Account information — your name, email, phone number, password (hashed), and any profile details you choose to add.
• Property information — property addresses, features, photos and notes you submit or that we retrieve from property data providers for a property you own or are researching.
• Uploaded documents — contracts of sale, letters of offer, building and pest reports, strata records, council notices, and any other documents you upload to your Property Vault.
• AI conversations — the messages you send to and receive from our AI assistant IQ, along with a rolling summary that helps IQ remember context.
• Device and browser information — IP address, browser type and version, operating system, screen size, referring URL and time zone.
• Cookies and analytics data — see our separate Cookie Policy.
• Payment information — payment card details are collected and processed by Stripe. We store only limited billing metadata (product, price, status, last 4 digits and expiry as returned by Stripe).
• Communications — records of correspondence you send us, including support tickets and complaints.

4. How we collect information

We collect information:

• directly from you when you sign up, complete forms, upload documents or contact us;
• automatically when you use the platform, through cookies and similar technologies;
• from third parties such as licensed property data providers, our identity or address-verification providers, our payment processor (Stripe), and, where applicable, real estate agents you have chosen to engage.

5. Why we collect information

We collect and use your personal information to:

• provide, maintain and improve the Prop IQ platform;
• generate property estimates, reports, checklists and AI insights for you;
• match you with real estate agents in your area, if you request agent proposals;
• process payments and manage subscriptions;
• communicate with you about your account, our services and (if you opt in) marketing;
• protect against fraud, misuse and security incidents;
• comply with our legal obligations.

6. AI processing of uploaded documents

When you upload a document, we may send its text (and, where necessary, images) to an AI provider (such as Google's Gemini via the Lovable AI Gateway) to generate summaries, key facts, risks and solicitor briefs.

• We do not use your documents to train third-party AI models.
• Where the AI provider retains data for abuse-monitoring purposes it does so in accordance with its own privacy terms.
• You can delete uploaded documents at any time from your Property Vault.

7. Third parties we share information with

We share personal information only where necessary to provide the service:

| Third party | Purpose | Location | |---|---|---| | Property data providers (e.g. PropTrack, Cotality, Domain) | Retrieving property attributes, comparable sales and market statistics | Australia | | Google (Maps Platform) | Address autocomplete and mapping | Global | | Lovable AI Gateway / underlying model providers | Generating AI responses and document analysis | Global | | Stripe | Processing payments and managing subscriptions | Australia / United States | | Supabase (Lovable Cloud) | Authentication, database, storage and hosting | Australia / regional cloud regions | | Email and SMS providers | Sending account and (if opted in) marketing communications | Global | | Real estate agents you choose | Delivering appraisal proposals; only shared with your consent | Australia |

We never sell your personal information to any third party.

8. Security

We take reasonable steps to protect your information, including:

• encryption in transit (HTTPS/TLS) and at rest;
• row-level security on our database so that each user can only access their own records;
• private storage buckets with time-limited signed URLs;
• multi-factor authentication for administrators;
• rate limiting, bot protection and audit logging.

No system is perfectly secure. If we become aware of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

9. Data retention

We retain personal information only for as long as we need it for the purposes described in this policy, or as required by law:

• Account and property information: while your account is active and for up to 7 years after closure for tax and accounting records.
• Uploaded documents: until you delete them or close your account.
• AI conversations: until you delete them, subject to short-term backups.
• Payment records: 7 years, as required by Australian taxation law.
• Cookie consent and access logs: 24 months.

10. Accessing and correcting your information

You can access and update most of your personal information from your account settings. If you need help, contact us and we will respond within 30 days.

11. Deleting your information

You can delete uploaded documents, saved properties and AI conversations at any time from your account. You can also request full account deletion — see our Data Management page — which will schedule your account for permanent deletion after a 14-day restoration window.

12. Marketing communications

We will only send you marketing communications where you have opted in. You can withdraw consent at any time from your account settings or by using the unsubscribe link in any marketing email. Transactional messages (billing, security, service notices) are not marketing.

13. Overseas data processing

Some of our providers are located outside Australia (for example, in the United States or the European Union). By using Prop IQ you consent to your personal information being processed overseas by these providers, subject to appropriate contractual protections.

14. Children's privacy

Prop IQ is not directed at children under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently done so, please contact us and we will delete it.

15. Complaints

If you have a privacy complaint, please email us first at privacy@propiq.com.au with the details. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner: oaic.gov.au.

16. Contact us

Prop IQ Privacy Officer Email: privacy@propiq.com.au Post: PO Box —, Gold Coast, Queensland, Australia

17. Updates to this policy

We may update this Privacy Policy from time to time. If we make material changes we will notify you and, where required, ask you to accept the new version before continuing to use affected services. The current version and change summary are always available at /legal/privacy-policy.