BuyerView Privacy Policy

1. Information We Collect

1.1 Information you provide directly

When you create an account:

• Name and display name
• Email address
• Password (stored only as a secure hash; we never see your actual password)
• Date of birth (used only to confirm you are 18 or older)
• The time you accepted our Terms, and your marketing preference

If you sign in with Google: we receive your name, email address and profile picture from Google. We do not receive your Google password.

When you use your workspace:

• Properties you track, your checklist activity and status changes
• Questions you write or adopt, and private notes
• Photos, listing text and documents you provide (for example a Section 32 vendor statement or a building report)

When you verify as an agent:

• Real estate licence or registration number and the issuing state
• Agency name and contact details
• Any supporting documents you provide for verification

1.2 Location and check-in information

• GPS check-in: with your permission, we read your device's location when you choose to verify at a property. Our server compares it to the property's location and records the attempt: whether it succeeded or failed, the coordinates at that moment, the time, and fraud-prevention signals. Live location readings shown on your screen while you line up the check are processed on your device.
• QR check-in: if you scan an agent's inspection QR code, we record that your account attended that property at that time. No GPS reading is taken.
• What we do not do: we do not track your movements, run location in the background, or collect location at any time other than a check-in attempt you initiate.
• Check-in records (including coordinates from GPS attempts) are retained as part of our verification and fraud-prevention records. See section 6.

1.3 Information collected automatically

• IP address, browser type, device type and operating system
• Pages visited, time and date of visits, referral source
• Cookies: session cookies to keep you signed in, and Google Analytics cookies (section 8)
• We do not use advertising cookies or cross-site trackers

2. How We Use Your Information (Including AI)

2.1 To operate the platform

• Verify on-site attendance so public questions come from people who were really there
• Publish your questions with your display name, and agents' answers with their name and agency
• Moderate content before publication
• Run your workspace, including sharing it with the one partner you invite
• Verify agent licences (human review against publicly available licensing register information)
• Give buyers with a verified check-in access to documents the agent has shared for that property

2.2 AI processing (what goes where)

Parts of the service use artificial intelligence providers as our service providers. What each receives:

• Anthropic (question suggestions): the property address, listing text, photos and document contents you choose to provide for generating suggested questions. Not your name or email.
• OpenAI (moderation): the text of questions and answers submitted for publication. Not your name or email.
• Hugging Face (text processing): published question text, for generating summaries and language processing. Not your name or email.

AI-generated question suggestions are clearly part of the product, are prompts for your own due diligence, and are not advice. Moderation decisions can be reviewed by a person on request.

2.3 To communicate with you

Service emails (cannot be opted out of while you hold an account): account verification, security notices, answers to your questions, moderation decisions, and important legal or platform changes.

Marketing emails (only with your consent): property tips and platform updates. You can opt in at signup and unsubscribe at any time using the link in every email. We comply with the Spam Act 2003. Invitations you send to an agent or your partner are sent by you from your own email or messages; we do not send them and do not collect the recipient's address.

2.4 To improve BuyerView and for legal reasons

• Analyse platform usage (Google Analytics), fix bugs, improve moderation accuracy
• Comply with Australian law and respond to valid legal requests
• Prevent fraud and abuse (including detecting falsified check-ins) and enforce our Terms

3. How We Share Your Information

3.1 Publicly visible

• Your questions: published with your display name. Your email, full name and check-in details are not shown. Agents see questions on their listings but are never shown who has checked in at or is tracking a property.
• Agent answers: published with the agent's name and agency.
• Property addresses are visible; they are public information.

3.2 With your workspace partner

If you invite a partner to your workspace, they can see everything in it: tracked properties, checklists, questions, private notes and documents you have uploaded, including activity attributed to you by first name. This sharing is under your control; the workspace owner can remove the partner at any time.

3.3 With service providers

• Supabase (database, authentication, file storage): supabase.com/privacy
• Netlify (website hosting; processes IP addresses): netlify.com/privacy
• Resend (email delivery; email address and name): resend.com/legal/privacy-policy
• Google (address search and maps, sign-in, analytics): policies.google.com/privacy
• OpenAI (moderation), Anthropic (question suggestions), Hugging Face (text processing): see section 2.2 for exactly what each receives

These providers may only use the data to provide services to us and must protect it.

3.4 For legal reasons and business transfers

We may disclose information where required by Australian law, in response to valid court orders, to prevent fraud or protect safety, or (with notice to you) if the business is sold or merged. Where legally permitted, we will tell you before disclosing your information.

4. International Data Transfers

Our service providers store and process data outside Australia, including in the United States. We use reputable providers, encrypt data in transit and at rest, and take reasonable steps required by the Australian Privacy Principles for overseas disclosure. By using BuyerView you acknowledge this transfer.

5. How We Protect Your Information

• Encryption in transit (HTTPS/TLS) and at rest
• Secure password hashing; we never store plain-text passwords
• Row-level access controls in our database, so each account can only read what it is entitled to
• Server-side verification for anything trust-related (check-ins, agent status, document access)
• Access to production data restricted to authorised personnel

Data breaches: if a data breach occurs that is likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.

Your part: use a strong unique password, do not share it, and email privacy@mail.buyerview.ai immediately if you suspect your account is compromised.

6. How Long We Keep Your Information

While your account is active, we keep your account details, content and platform activity so the service works.

7. Your Privacy Rights

Under the Privacy Act 1988 you can:

• Access the personal information we hold about you, how we use it and who we share it with. Email privacy@mail.buyerview.ai; we respond within 30 days. No charge for reasonable requests.
• Correct inaccurate information: update your profile in the app, or email us and we will correct it within 30 days.
• Delete your account and personal information: email privacy@mail.buyerview.ai. We process closure within 30 days. Published public questions may remain, de-identified, as part of the property record; records we are legally required to keep are retained for the required period.
• Opt out of marketing at any time (unsubscribe link in every email). You cannot opt out of check-in verification for public posting or of content moderation; they are how the platform stays honest and lawful. You can always use the private-to-agent lane instead.
• Complain: email privacy@mail.buyerview.ai first; we aim to resolve complaints within 30 days. If you are not satisfied, contact the Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992.

8. Cookies and Analytics

• Essential cookies: keep you signed in and secure. These cannot be disabled.
• Google Analytics: helps us understand how the platform is used (pages visited, device type, city-level location). You can opt out with the Google Analytics opt-out or by blocking analytics cookies in your browser.
• We do not use advertising cookies or sell data to ad networks.

9. Age Requirement

BuyerView is for adults. You must be 18 or older to hold an account; we check your date of birth at signup and do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact privacy@mail.buyerview.ai and we will remove it.

10. Changes to This Policy

We will notify you of significant changes to this policy by email or on the platform before they take effect. The version and date at the top of this page tell you what you are reading.