BuyerView Privacy Policy
Last Updated: 27 February 2026
Effective Date: 1 March 2026
What This Policy Covers
This Privacy Policy explains how COSTAPPLE PTY LTD (trading as BuyerView) collects, uses, stores, and protects your personal information when you use our property inspection query platform.
Our Details:
- Legal Entity: COSTAPPLE PTY LTD
- ABN: 15 673 435 491
- Trading Name: BuyerView
- Address: 308 Waverley Rd, Mount Waverley VIC 3149
- Email: privacy@mail.buyerview.ai
- Website: buyerview.ai
We're committed to protecting your privacy in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
1. Information We Collect
1.1 Information You Provide Directly:
When you create an account:
- Name (first and last)
- Email address
- Password (encrypted, we never see your actual password)
When you submit a query:
- Property address you're querying about
- Your query text
- Date and time of submission
When you verify as an agent:
- Real estate license details
- Agency name and contact information
- Professional credentials
1.2 Information We Collect Automatically:
Location Data:
- GPS coordinates when you submit a query (to verify you're at the property)
- We only verify you were there, we don't track your movements
- We delete precise GPS coordinates after verification (within 24 hours)
- We keep only the property address, not your exact location
Device & Usage Information:
- IP address
- Browser type and version
- Device type (mobile, desktop, tablet)
- Operating system
- Pages you visit on BuyerView
- Time and date of visits
- How you found us (referral source)
Cookies & Similar Technologies:
- Session cookies (keeps you logged in)
- Google Analytics cookies (see section 1.3)
- We don't use advertising cookies or trackers
1.3 Information From Third Parties:
Google Maps:
Google Analytics:
- We use Google Analytics to understand how people use BuyerView
- This helps us improve the platform
- Google Analytics collects: pages visited, time on site, device type, general location (city level, not precise)
- You can opt out: tools.google.com/dlpage/gaoptout
OpenAI (Content Moderation):
- We send query text (not your name or email) to OpenAI for automated moderation
- This helps us detect inappropriate content before publishing
- OpenAI's privacy policy applies: openai.com/policies/privacy-policy
2. How We Use Your Information
2.1 To Operate the Platform:
For Buyers:
- Verify you physically attended property inspections (location check)
- Publish your queries (anonymously - first name only)
- Notify you when agents answer your queries
- Moderate content to keep the platform safe and legal
For Agents:
- Verify your real estate license
- Notify you of queries about your listed properties
- Display your answers publicly
- Process disputes if buyers flag your responses
2.2 To Communicate With You:
Transactional Emails (you can't opt out):
- Account verification
- Password resets
- Query submission confirmations
- Answer notifications
- Moderation decisions
- Important platform updates (security, legal changes)
Optional Marketing Emails (you can opt out anytime):
- Property tips and buying advice
- Platform updates and new features
- Educational content and resources
You control marketing emails:
- Opt-in during signup (checkbox)
- Unsubscribe anytime (link in every email)
- We'll never send marketing without your consent
2.3 To Improve BuyerView:
- Analyze how people use the platform (via Google Analytics)
- Fix bugs and technical issues
- Develop new features based on usage patterns
- Improve content moderation accuracy
2.4 For Legal & Safety Reasons:
- Comply with Australian law
- Respond to legal requests (court orders, subpoenas)
- Prevent fraud, abuse, or illegal activity
- Enforce our Terms of Service
- Protect our rights and other users' safety
3. How We Share Your Information
We don't sell your personal information. Ever.
3.1 Publicly Visible Information:
Your Queries:
- Published with your first name only (e.g., "Sarah asked...")
- Property address is visible (it's public information anyway)
- Your full name and email are NOT visible to other users
Agent Answers:
- Published with agent's full name and agency
- Agent license details are visible (publicly verifiable information)
3.2 With Service Providers:
We share data with trusted third parties who help us operate BuyerView:
Supabase (Database Hosting):
Netlify (Website Hosting):
- Hosts the BuyerView website
- Processes your IP address and browser data
- Privacy policy: netlify.com/privacy
Resend (Email Delivery):
Google (Maps & Analytics):
OpenAI (Content Moderation):
These providers:
- Are contractually obligated to protect your data
- Can only use data to provide services to us
- Must comply with applicable privacy laws
3.3 For Legal Reasons:
We may disclose information if:
- Required by Australian law
- Responding to a valid court order or subpoena
- Protecting BuyerView's legal rights
- Investigating fraud or illegal activity
- Protecting user safety (e.g., preventing harm)
We'll notify you if legally permitted before disclosing your information.
3.4 Business Transfers:
If BuyerView is sold or merged:
- Your data may transfer to the new owner
- We'll notify you before any transfer
- New owner must honor this Privacy Policy
- You can delete your account before transfer if you wish
4. International Data Transfers
Your data may be stored and processed outside Australia.
Why: Our service providers (Supabase, Netlify, Resend, Google, OpenAI) use international servers, including in the United States and Singapore.
How we protect your data internationally:
- We only use reputable providers with strong security
- All transfers comply with Australian Privacy Principles
- Data is encrypted in transit and at rest
- Providers are contractually bound to protect your data
You acknowledge and consent to this international transfer when you use BuyerView.
5. How We Protect Your Information
5.1 Security Measures:
We use industry-standard security:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest (database encryption)
- Secure password hashing (bcrypt)
- Regular security updates
- Access controls (only authorized personnel)
- Firewall protection
- Regular backups
5.2 What We DON'T Do:
- ✗ Store credit card details (we don't process payments yet)
- ✗ Store your precise GPS location long-term
- ✗ Share your email with third parties for their marketing
- ✗ Sell your data to anyone
5.3 Your Responsibility:
Keep your account secure:
- Use a strong, unique password
- Don't share your password
- Log out on shared devices
- Enable two-factor authentication (when available)
- Report suspicious activity immediately
If your account is compromised:
- Email us immediately: privacy@mail.buyerview.ai
- Change your password
- We'll investigate and take appropriate action
6. How Long We Keep Your Information
6.1 While Your Account is Active:
We keep all your data while you use BuyerView:
- Account details (name, email)
- All queries you've submitted
- All interactions with the platform
6.2 After You Delete Your Account:
Immediately:
- Your queries are anonymized (your name removed, shows as "Anonymous User")
- You can't log in anymore
Within 30 days:
- Your email address and personal account details are deleted
- Location data is deleted
7 years (legal retention):
- Anonymized queries remain on the platform (other buyers find them useful)
- We may keep records for legal/compliance purposes (Australian requirement)
Why 7 years? Australian tax and business law requires us to keep business records for 7 years.
6.3 Specific Data Types:
| Data Type |
Retention Period |
| Account details (name, email) |
Until deletion + 7 years (legal) |
| Queries (content) |
Forever (anonymized after deletion) |
| GPS coordinates |
24 hours (deleted after verification) |
| IP addresses |
12 months |
| Analytics data |
26 months (Google Analytics default) |
| Email logs |
12 months |
7. Your Privacy Rights
Under the Australian Privacy Act 1988, you have the right to:
7.1 Access Your Data:
You can request:
- All personal information we hold about you
- How we're using it
- Who we've shared it with
How to request:
- Email: privacy@mail.buyerview.ai
- We'll respond within 30 days
- Free for first request (may charge reasonable fee for excessive requests)
7.2 Correct Your Data:
If information is wrong or outdated:
- Update it yourself in account settings
- Or email us: privacy@mail.buyerview.ai
- We'll correct it within 30 days
7.3 Delete Your Data:
You can:
- Delete your account anytime (settings page)
- Request full data deletion: privacy@mail.buyerview.ai
What gets deleted:
- Your name and email (after 30 days)
- Your login access (immediately)
- Location data (immediately)
What stays (anonymized):
- Your queries (valuable to other buyers, but your name removed)
- Legal records (7 years - Australian requirement)
7.4 Object to Processing:
You can object to:
- Marketing emails (unsubscribe link in every email)
- Analytics tracking (use Google Analytics opt-out)
- Data processing that's not essential to the service
You can't opt out of:
- Location verification (required to submit queries)
- Content moderation (required for legal compliance)
- Transactional emails (account security, query notifications)
7.5 Data Portability:
You can request:
- A copy of your data in machine-readable format (CSV, JSON)
- Transfer it to another service
Email: privacy@mail.buyerview.ai
7.6 Complain:
If you're unhappy with how we handle your data:
Step 1: Email us: privacy@mail.buyerview.ai
- We'll try to resolve within 30 days
Step 2: Complain to the Office of the Australian Information Commissioner (OAIC)
- Website: oaic.gov.au
- Phone: 1300 363 992
- Email: enquiries@oaic.gov.au
8. Cookies & Tracking
8.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help us remember you and improve your experience.
8.2 Cookies We Use:
Essential Cookies (can't be disabled):
- Session cookie: Keeps you logged in
- Security cookie: Prevents cross-site attacks (CSRF)
Analytics Cookies (can be disabled via browser):
- Google Analytics: Tracks how you use BuyerView
- Helps us improve the platform
- Doesn't identify you personally
We DON'T use:
- Advertising cookies
- Third-party tracking cookies (except Google Analytics)
- Social media tracking pixels
8.3 Managing Cookies:
Browser settings:
- Chrome: Settings → Privacy → Cookies
- Firefox: Preferences → Privacy → Cookies
- Safari: Preferences → Privacy → Cookies
Disabling cookies may affect:
- Ability to stay logged in
- Platform functionality
Google Analytics opt-out:
9. Children's Privacy
BuyerView is not for children under 18.
We don't knowingly collect data from under-18s:
- Terms of Service require users to be 18+
- Property buying/inspection is an adult activity
If we discover a user is under 18:
- We'll delete their account immediately
- We'll delete all their personal data
- Queries will remain (anonymized) if already published
Parents/guardians:
- If you believe your child has created an account, email: privacy@mail.buyerview.ai
- We'll investigate and delete if confirmed
10. Data Breaches
If we discover a data breach that may harm you, we will:
Within 30 days:
- Notify you via email
- Notify the Office of the Australian Information Commissioner (OAIC)
- Publish a notice on our website
What we'll tell you:
- What data was affected
- When the breach occurred
- What we're doing about it
- Steps you should take (e.g., change password)
Our commitment:
- We take security seriously
- We'll investigate thoroughly
- We'll be transparent about what happened
- We'll take steps to prevent future breaches
11. Third-Party Links
BuyerView may contain links to external websites:
- Domain.com.au
- REA.com.au
- Council websites
- Real estate agency websites
We don't control these sites:
- They have their own privacy policies
- We're not responsible for their practices
- Read their policies before sharing information
12. Marketing & Communications
12.1 Transactional Emails (Required):
You'll receive these regardless of marketing preferences:
- Account verification
- Password resets
- Query submissions and status updates
- Answer notifications from agents
- Moderation decisions
- Critical security alerts
- Material changes to Terms or Privacy Policy
Why you can't opt out: These emails are essential to the service you've requested.
12.2 Marketing Emails (Optional):
We may send (only if you opt in):
- Property tips and buying advice
- Educational resources
- Platform updates and new features
- Occasional surveys for feedback
You control this:
- Opt-in checkbox during signup
- Unsubscribe link in every marketing email
- Update preferences in account settings
- Email us: privacy@mail.buyerview.ai
12.3 Frequency:
Marketing emails (if opted in):
- Maximum: 1-2 per month
- We won't spam you
- Quality over quantity
Transactional emails:
- Sent as needed (based on your activity)
- Can't be controlled (essential service communications)
12.4 Compliance with Spam Act 2003:
All our marketing emails:
- Include clear unsubscribe link
- Identify us as the sender
- Include our contact details
- Comply with Australian anti-spam laws
13. Changes to This Policy
We may update this Privacy Policy from time to time.
When we make changes:
- We'll update the "Last Updated" date at the top
- We'll notify you via email (if material changes)
- We'll post a notice on the platform
Material changes:
- How we collect data
- How we use data
- Who we share data with
- Your rights
Non-material changes:
- Clarifications
- Contact detail updates
- Legal requirement updates
Your continued use after changes means you accept the updated policy.
If you don't agree: You can delete your account and stop using BuyerView.
15. Definitions
Key terms used in this policy:
- "Personal information" = Information that identifies you or could reasonably identify you
- "We," "us," "our," "BuyerView" = COSTAPPLE PTY LTD trading as BuyerView
- "You," "your" = Users of BuyerView (buyers or agents)
- "Query" = Content submitted by buyers about properties
- "Platform" = BuyerView website and services
- "OAIC" = Office of the Australian Information Commissioner
- "Privacy Act" = Privacy Act 1988 (Cth) and Australian Privacy Principles
16. Governing Law
This Privacy Policy is governed by:
- Australian Privacy Act 1988 (Cth)
- Australian Privacy Principles (APPs)
- Spam Act 2003 (Cth)
- Victorian and Australian law
Jurisdiction: Courts of Victoria, Australia
END OF PRIVACY POLICY
Version 1.0 | Last Updated: 27 February 2026 | Effective: 1 March 2026