1. Introduction
Buyfinder Australia Pty Ltd (ACN 696 397 903, ABN 30 696 397 903) ("BuyFinder", "we", "us", "our") is committed to handling personal information responsibly and in accordance with the Privacy Act 1988 (Cth) ("Privacy Act") and the Australian Privacy Principles ("APPs") contained in that Act.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the BuyFinder platform ("Platform"). BuyFinder is an APP entity and the Privacy Act applies to our handling of personal information.
By accessing or using the Platform, you acknowledge that we may collect, use and disclose your personal information as described in this Privacy Policy.
2. Information We Collect
- •Full name
- •Email address
- •Phone number
- •Password (encrypted)
- •Profile photo (optional)
- •Agency name and details
- •Professional role (agent, homeowner, administrator)
- •Specialisation areas and suburbs
- •Other professional details you choose to add
- •Property addresses and details you upload
- •Listing information and photos
- •Pricing and commission details (where you enter them)
- •Open home schedules
- •Messages sent through the Platform
- •Email and SMS communications
- •Document signing records and timestamps
- •Full name, email address, and IP address recorded at the time of signing
- •Date and time of signing (UTC)
- •Phone number used for one-time SMS verification (OTP) prior to signing
- •Cryptographic hash of the signed document content
- •Login history and session information
- •Pages visited and features used
- •Device information and browser type
- •IP address and approximate location
- •Cookies and similar technologies
- •Per-listing and other platform fees paid
- •Payment details processed by Stripe (BuyFinder does not store card numbers)
- •Billing history and invoice records
- •Buyer and vendor names and contact details entered by agents
- •Notes and registration records relating to buyer introductions
- •Other personal information agents upload or transmit through workflow features
We may collect certain categories of personal information depending on how you use the Platform and what features are enabled. This may include:
Account Information:
Professional Information:
Property and Listing Information:
Communication Data:
Electronic Signature Data:
Usage Data:
Transaction Information:
Third-Party Personal Information (uploaded by users):
Agents who upload third-party personal information act as the primary collector for that information. BuyFinder processes it on their behalf to operate the Platform.
Consequences of not providing information:
If you choose not to provide certain personal information, we may not be able to create your account, verify your identity, send you OTP verification codes required for signing documents, process payments, or provide full access to Platform features. Where providing information is optional, you can decline without affecting your access to that feature.
3. Source of Information
- •Directly from you when you register, use the Platform or contact us
- •From agency administrators or colleagues who create or manage accounts on your behalf
- •From your activity on the Platform
- •From integrated service providers (for example, authentication or payment providers)
- •From public or professional sources where reasonably necessary for platform operations
- •Operate the BuyFinder agent directory
- •Display agent profiles to platform users
- •Match agents to relevant conjunction opportunities in the areas they service
- •Send listing-specific conjunction invitations and outreach by SMS and email, including invitations initiated by other platform users, whose details may be pre-filled from the directory
Personal information may be collected:
Publicly available agent professional information:
BuyFinder collects publicly available professional information about licensed real estate agents — such as name, agency, profile photo, business phone number, business email address, and details of properties they currently have listed for sale — from public real estate listing websites and other public professional sources. We use automated collection tools (provided by Apify) for this purpose.
We use this information to:
Because this information comes from public sources, it may not always be complete or current. We take reasonable steps to keep it accurate and up to date, and we will correct it promptly on request.
If you are an agent whose details we have collected from public sources and you do not want your information used in this way, you can ask us to correct, remove or suppress it at any time — see the "Direct Marketing and Outreach" section below.
4. How We Use Your Information
- •Create and manage your account
- •Enable property listings and agent connections
- •Process conjunction agreements and document signing
- •Enable messaging between users
- •Send email and SMS notifications requested by users
- •Deliver platform updates and alerts
- •Provide customer support
- •Detect and prevent fraud or abuse
- •Comply with legal obligations
- •Enforce our Terms and Conditions
- •Process payments and subscriptions
- •Send invoices and receipts
- •Analyse usage patterns and trends
- •Develop new features and services
- •Fix bugs and improve performance
- •Respond to lawful requests
- •Investigate misuse or enforce terms
We use personal information for the following purposes:
Provide and administer the Platform:
Enable invitations, collaboration and communications:
Maintain records and security:
Process payments:
Troubleshoot, analytics and product improvement:
Comply with legal obligations and investigate misuse:
5. How We Share Your Information
- •Cloud hosting and data storage (Google Cloud, Firebase)
- •Authentication services (Google, Firebase Auth)
- •Email and SMS delivery (Twilio, SendGrid)
- •Messaging infrastructure (Stream)
- •Payment processing (Stripe)
- •Analytics (Google Analytics)
BuyFinder does not sell your personal information.
We may share your information with:
Other Platform Users:
Certain profile, contact and transaction-related information may be visible to other users as part of core platform functionality. Contact details may be shared when you accept an invitation or enter an agreement.
Users are responsible for only uploading personal information they are authorised to share. BuyFinder is not responsible for how another user handles information once lawfully shared through core platform functions, except to the extent required by law.
Service Providers:
We engage third-party service providers to help operate our Platform:
These providers are contractually obligated to protect your information and use it only for the services they provide to us.
Legal and Regulatory Authorities:
We may disclose information where required by law, court order, or regulatory request.
Business Transfers:
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
6. Agent Obligations for Third-Party Data
- •Comply with the Privacy Act 1988 (Cth) and applicable state privacy legislation
- •Have a lawful basis to collect and use that information (for example, consent or a legitimate transaction purpose)
- •Only use information for the property transaction or workflow purpose for which it was collected
- •Not upload sensitive information unless strictly necessary and lawfully permitted
- •Honour any access, correction or deletion requests they receive in relation to data they collected
Licensed agents and agency users who upload, register or share personal information about buyers, vendors or other third parties through the Platform must:
BuyFinder provides workflow tools only. Agents remain responsible for their own privacy compliance, collection notices, and communications with data subjects.
7. Business Contact Information
Since this is a platform for real estate professionals, some information we collect and disclose may be business contact information and professional profile information used to operate the network and platform functionality. This helps frame how we handle information in the context of our business model.
9. Data Security
- •Encryption of data in transit (HTTPS/TLS)
- •Secure password hashing
- •Access controls and authentication
- •Secure cloud infrastructure
- •Employee training on data protection
- •Keep your login credentials confidential
- •Use a strong, unique password
- •Log out of shared devices
- •Report any suspected security breaches
BuyFinder implements safeguards appropriate to the nature of the information and risk profile, including:
Your Responsibilities:
No Absolute Guarantee:
We cannot guarantee absolute security. No method of electronic transmission or storage is 100% secure.
Data Breach Response:
If BuyFinder becomes aware of a data incident affecting personal information, we will assess the incident and take steps required under applicable law, including notification where legally required.
10. Data Retention
- •Active account data: retained while your account remains open and for a reasonable period after closure
- •Signed conjunction agreements and audit trails: retained for 7 years from the date of signing (consistent with standard legal and tax obligations)
- •OTP verification and signing records: retained as part of the document audit trail for the same period as the signed agreement
- •Payment and billing records: retained for at least 5 years as required by Australian tax law
- •Communications and messaging data: retained while your account is active and for up to 2 years after closure
- •Marketing preferences and opt-out records: retained indefinitely to honour opt-out requests
We retain personal information for as long as reasonably necessary for the purposes described in this policy. The following are indicative timeframes for common categories of data:
Typical retention periods:
Extended retention:
Information may be retained beyond these periods where required for ongoing legal proceedings, regulatory investigations, security reviews, or other legitimate legal or business reasons.
When information is no longer required, it will be de-identified or securely deleted, subject to backup cycle timelines and legal retention obligations.
Account Deletion:
You may request deletion of your account by contacting us at admin@buyfinder.com.au. Deletion of signed agreement records, payment records and audit trails may not be possible where retention is required by law or for dispute resolution.
11. Your Rights
Where applicable under Australian privacy law, you may have the right to:
Access Your Information:
Request access to the personal information we hold about you. Requests are subject to identity verification and legal limitations.
Correct Your Information:
Request correction of any inaccurate, incomplete, or outdated information.
Opt-Out of Marketing:
You may unsubscribe from marketing communications at any time using the unsubscribe link in our emails or by contacting us at admin@buyfinder.com.au.
Please note that opting out of marketing does not affect service-related communications. We will continue to send account alerts, OTP verification codes, document signing notifications, billing receipts, security notices and other transactional messages that are necessary for the operation of your account and the Platform.
Withdraw Consent:
Where we rely on your consent, you may withdraw it at any time, though this may affect your ability to use certain features.
Request Deletion:
Request deletion of your personal information. Deletion may not be possible where data must be retained for security, legal, billing, dispute or audit purposes.
Lodge a Complaint:
If you believe we have breached applicable privacy law, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
How to Exercise Your Rights:
Contact us at admin@buyfinder.com.au with your request. Response timeframes may vary depending on complexity, though we will respond within a reasonable period.
12. Direct Marketing and Outreach
- •Listing-specific conjunction invitations and outreach to licensed real estate agents, by SMS and email, based on their publicly listed professional details, service areas and current listings
- •Platform updates, feature announcements and other marketing communications to account holders who have opted in to marketing
- •Reply STOP to any SMS from BuyFinder
- •Use the unsubscribe link in any BuyFinder email
- •Email admin@buyfinder.com.au with your name and contact details
This section explains how we use personal information for direct marketing under Australian Privacy Principle 7.
What we send:
How to opt out at any time:
Opt-out requests are actioned promptly (and in any case within 5 business days). Your contact details are added to our suppression list and your opt-out is honoured indefinitely — we retain suppression records for as long as needed to make sure we do not contact you again.
Opting out of marketing does not affect essential service communications for active accounts, such as OTP codes, document signing notifications and billing receipts.
If you are not a BuyFinder user (correction and removal rights for non-users):
If we have collected your professional details from public sources and you do not hold a BuyFinder account, you may still ask us to correct, remove or suppress your information at any time by emailing admin@buyfinder.com.au. If any of your details are inaccurate, incomplete or out of date, we will correct them promptly. If you ask to be removed, we will suppress any further outreach to you and remove your details from our agent directory, retaining only the minimum suppression record needed to honour your request.
13. Third-Party Services
- •Google Sign-In: governed by Google's Privacy Policy
- •Twilio (SMS): governed by Twilio's Privacy Policy
- •SendGrid (Email): governed by Twilio SendGrid's Privacy Policy
- •Stream (Messaging): governed by Stream's Privacy Policy
- •Stripe: governed by Stripe's Privacy Policy
- •Vercel (website hosting): governed by Vercel's Privacy Policy
- •Google Cloud / Firebase (data storage and authentication): governed by Google's Privacy Policy
- •Apify (collection of publicly available listing and agent data): governed by Apify's Privacy Policy
- •OpenAI (data processing and enrichment): governed by OpenAI's Privacy Policy
- •Google Analytics: governed by Google's Privacy Policy
Our Platform integrates with third-party services that have their own privacy policies:
Authentication:
Communications:
Payments:
Hosting and infrastructure:
Data collection and processing:
Analytics:
We encourage you to review the privacy policies of these third-party services.
External Links:
The Platform may contain links to external websites. We are not responsible for the privacy practices of these websites.
14. International Data Transfers
- •United States: Google (Firebase, Google Cloud, Google Analytics, Google Sign-In), Twilio (SMS), SendGrid (email), Stripe (payments), Stream (messaging), Vercel (hosting), OpenAI (data processing)
- •Ireland and European Union: Google Cloud infrastructure (certain regions), Apify (data collection)
- •Other jurisdictions where our service providers operate their infrastructure
BuyFinder uses third-party service providers who may store or process personal information outside Australia. Under Australian Privacy Principle 8, we are required to disclose this and take reasonable steps to ensure overseas recipients handle your information appropriately.
Countries where your data may be processed:
What this means for you:
These overseas recipients may be subject to the laws of their own countries, which may differ from Australian privacy law. In some cases, foreign laws may require disclosure to government authorities without equivalent protections to those available under the Privacy Act 1988 (Cth).
BuyFinder takes reasonable contractual steps to ensure overseas providers protect personal information to a standard comparable to the APPs, including relying on data processing agreements and standard contractual clauses where applicable.
By using the Platform, you acknowledge and consent to your personal information being transferred to and processed in the countries listed above for the purposes described in this Privacy Policy.
If you do not consent to overseas transfer, you should not use the Platform, as these transfers are necessary for core platform functions including authentication, messaging, payments and document signing.
15. Children's Privacy
The Platform is intended for use by adults and licensed real estate professionals.
We do not knowingly collect personal information from children under 18 years of age.
If we become aware that we have collected information from a child, we will take steps to delete it promptly.
If you believe a child has provided us with personal information, please contact us at admin@buyfinder.com.au.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
Material changes:
For changes that materially affect how we collect, use or disclose personal information — such as new data types collected, new third-party recipients, or new overseas transfers — we will provide active notice by email or Platform notification at least 14 days before the change takes effect. You will have the opportunity to review the changes before they apply to your data.
Minor changes:
For minor updates such as clarifications, formatting corrections or changes to contact details, we will update the "Last updated" date. Continued use of the Platform after such changes constitutes acceptance.
We encourage you to review this Privacy Policy periodically. If you do not agree to a material change, you may close your account before the change takes effect by contacting us at admin@buyfinder.com.au.
17. Contact Us
- •Website: www.oaic.gov.au
- •Phone: 1300 363 992
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Email:
Legal entity:
Buyfinder Australia Pty Ltd (ACN 696 397 903, ABN 30 696 397 903)
Office of the Australian Information Commissioner (OAIC):
If you are not satisfied with our response to a privacy concern, you may contact the OAIC:
Questions about your privacy?
If you have any questions about this Privacy Policy or how we handle your data, please contact us.
admin@buyfinder.com.auBuyfinder Australia Pty Ltd · ACN 696 397 903 · ABN 30 696 397 903
