Privacy Policy

1. Introduction

PropRadar Pty Ltd (ABN 80 697 007 140) ("PropRadar", "we", "us", or "our") is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services at propradar.com.au.

By accessing or using PropRadar, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not access the site.

2. Information We Collect

2.1 Personal Information You Provide

We may collect personal information that you voluntarily provide when you:

• Register for an account (name, email address)
• Subscribe to our services (billing details processed by Stripe, we do not store your full card number)
• Sign up for our newsletter or free reports (email address)
• Contact us with enquiries (email address, message content)
• Post in our community forum (forum content, display name, timestamps)
• Save properties to watchlists or track owned properties (property preferences and selections)
• Use features that require authentication

2.2 Automatically Collected Information

When you access our website, we may automatically collect:

• Device information (browser type, operating system, screen resolution)
• IP address and general location data
• Usage data (pages visited, features used, time spent, search and filter preferences)
• Cookies and similar tracking technologies (see Section 10)

2.3 Session Recording Data

We use PostHog to record a sample of user sessions, for both logged-in users and anonymous visitors. Most sessions are not recorded; a session is more likely to be recorded if it encounters an error or visits a pricing, sign-up or comparison page. Session recordings capture:

• Mouse movements, clicks, and scroll behaviour
• Pages viewed and navigation patterns
• Properties you view, search for, or interact with

Session recordings do not capture:

• Text typed into input fields (all text inputs are masked by default)
• Passwords, payment details, or other sensitive form data

Recordings of anonymous visitors are not linked to an identity; only logged-in users are identified. You may opt out of session recording by contacting support@propradar.com.au (see Section 9).

2.4 Property Data

PropRadar processes property-market information such as property addresses, listing details, suburb statistics, and valuation signals. We collect and use this information because it is reasonably necessary for our business function of providing property analytics (APP 3). We practise data minimisation and do not collect property owner personal details beyond what is necessary for our services.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your account registration and manage your account
• Process payments and manage subscriptions
• Send you service-related communications (account notifications, security alerts, billing updates)
• Send you marketing communications where you have opted in (you may opt out at any time via the unsubscribe link in each email or by contacting us)
• Respond to your enquiries and provide customer support
• Monitor and analyse usage patterns to improve user experience
• Generate property analytics, investment scores, and valuations using algorithmic processing
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We may share information with third-party vendors who perform services on our behalf (e.g., hosting, analytics, payment processing). See Section 4.1 for details.
• Legal Requirements: We may disclose information if required by law or in response to valid legal requests
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction
• With Your Consent: We may share information for any other purpose with your explicit consent

4.1 Third-Party Service Providers

We use the following third-party services to operate PropRadar. Each processes data as described below:

• WorkOS (authentication): Manages user sign-in, sign-up, and session management. Processes your name, email address, and authentication tokens. WorkOS is based in the United States. WorkOS Privacy Policy
• Stripe (payment processing): Processes subscription payments. Handles your payment card details, billing address, and transaction history directly, and we do not store your full card number. Stripe is based in the United States. Stripe Privacy Policy
• Cloudflare (CDN and security): Routes all web traffic through its network for performance and protection against attacks. Processes IP addresses, request URLs, and may set security cookies. Cloudflare operates globally with servers in multiple countries including the United States, Europe, and Asia-Pacific. Cloudflare Privacy Policy
• Microsoft Azure (hosting and database): Our application and database are hosted on Microsoft Azure in Australia East (Sydney). Your data is stored within Australia. Microsoft Privacy Statement
• PostHog (analytics and session recording): Tracks page views, feature usage, and records user sessions to help us improve the product. Session recordings mask all text input fields by default to protect sensitive data. We only identify logged-in users (not anonymous visitors). PostHog processes your user ID, email, name, and behavioural data. We use PostHog's European Union cloud region, so this data is processed and stored in the EU. PostHog Privacy Policy
• Axiom (logging and monitoring): Receives application logs for error detection and performance monitoring. Logs may contain IP addresses and general usage information but not passwords or payment details. Axiom is based in the United States. Axiom Privacy Policy

5. Automated Decision-Making

PropRadar uses automated algorithms to generate property analytics, including:

• Investment scores: Algorithmic rankings based on property data, suburb statistics, and market conditions
• Property valuations: Estimated values calculated from property-market inputs and proprietary algorithms
• Yield calculations: Estimated rental returns based on algorithmic estimates
• Data quality flags: Automated detection of potentially unreliable data points

These automated processes use property data (not your personal information) to generate analytics. The results are presented as estimates only and do not constitute professional advice. No automated decisions are made that significantly affect your legal rights or interests. For any questions about our automated processes, contact support@propradar.com.au.

6. Cross-Border Data Transfers

Your personal information may be transferred to, and processed in, countries other than Australia. Specifically, our third-party service providers are located in:

• United States: WorkOS, Stripe, Axiom
• European Union: PostHog (we use its EU cloud region)
• Global (multiple countries): Cloudflare (edge servers distributed worldwide)
• Australia: Microsoft Azure (primary database and application hosting)

Where we transfer personal information overseas, we take reasonable steps to ensure that the recipient handles your information in accordance with the Australian Privacy Principles (APP 8). Our primary database is hosted on Microsoft Azure in Australia.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction (APP 11). These measures include:

• Encryption of data in transit (TLS/HTTPS) and at rest (Azure PostgreSQL encryption)
• Authentication tokens are encrypted using industry-standard encryption
• Payment details are handled entirely by Stripe and never stored on our servers
• Access controls and monitoring on our infrastructure
• Regular security updates and patching of server infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary for the purposes described in this policy, or as required by law. Specific retention periods:

• Account data (name, email): Retained while your account is active and for 90 days after account closure
• Payment records: Retained by Stripe in accordance with their retention policy and applicable tax and financial record-keeping laws (generally 7 years)
• Session recordings (PostHog): Retained for 30 days, then automatically deleted
• Analytics data (PostHog): Retained for up to 24 months for trend analysis
• Application logs (Axiom): Retained for up to 30 days for error detection and monitoring
• Forum posts: Retained indefinitely as part of the community discussion, unless you request deletion (see Section 9)
• Newsletter subscriptions: Until you unsubscribe
• Property watchlists and preferences: Retained while your account is active and deleted within 90 days of account closure

When personal information is no longer required, we will take reasonable steps to destroy or de-identify it in accordance with APP 11.2.

9. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you (APP 12)
• Request correction of inaccurate or incomplete information (APP 13)
• Request deletion of your personal information (subject to legal requirements)
• Opt out of marketing communications at any time (via unsubscribe links or by contacting us)
• Opt out of session recording - contact support@propradar.com.au and we will disable session recording for your account
• Request a copy of your data in a portable format
• Lodge a complaint (see Section 9.1)

9.1 How to Make a Request or Complaint

To exercise any of the above rights, contact us at support@propradar.com.au. We will verify your identity before processing your request. We will respond to access and correction requests within 30 days (as required by APP 12 and APP 13).

If you have a complaint about how we handle your personal information:

• Contact us at support@propradar.com.au with details of your complaint
• We will acknowledge your complaint within 7 days
• We will investigate and respond within 30 days
• If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992

10. Cookies and Tracking

We use cookies and similar technologies to operate our service. The cookies we use include:

• Authentication cookies (wos-session): An encrypted, HttpOnly cookie that maintains your login session. Essential for the service to function.
• Theme preference (propradar-theme): Stores your light/dark mode preference in localStorage.
• Cloudflare cookies: Set by Cloudflare for security and performance purposes (e.g., bot detection).
• PostHog cookies: Used for product analytics and session recording. Stored in localStorage and cookies to identify returning users.

We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings, but disabling essential cookies will prevent you from using authenticated features.

11. Data Breach Notification

In the event of a data breach that is likely to result in serious harm to affected individuals, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required under the Notifiable Data Breaches (NDB) scheme of the Privacy Act 1988 (Cth).

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on the Service at least 30 days before the changes take effect. For minor changes, updated policies will be posted on this page with an updated "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

15. Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or wish to make a complaint, please contact us: