Your Privacy Matters

Privacy Policy

How we collect, use, and protect your personal information

Last updated: August 2026

Privacy at a Glance

We don't sell your data

Your information is never sold to third parties

Encrypted & Secure

Data protected with industry-standard encryption

You're in control

Access, correct, or delete your data anytime

Australian privacy law

Privacy practices aligned with applicable Australian privacy law

1. Introduction

    Buyfinder Australia Pty Ltd (ACN 696 397 903, ABN 30 696 397 903) ("BuyFinder", "we", "us", "our") is committed to handling personal information responsibly and in accordance with the Privacy Act 1988 (Cth) ("Privacy Act") and the Australian Privacy Principles ("APPs") contained in that Act.


    This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the BuyFinder platform ("Platform"). BuyFinder is an APP entity and the Privacy Act applies to our handling of personal information.


    By accessing or using the Platform, you acknowledge that we may collect, use and disclose your personal information as described in this Privacy Policy.

2. Information We Collect

    We may collect certain categories of personal information depending on how you use the Platform and what features are enabled. This may include:


    Account Information:

  • Full name
  • Email address
  • Phone number
  • Password (encrypted)
  • Profile photo (optional)

  • Professional Information:

  • Agency name and details
  • Professional role (agent, homeowner, administrator)
  • Specialisation areas and suburbs
  • Other professional details you choose to add

  • Property and Listing Information:

  • Property addresses and details you upload
  • Listing information and photos
  • Pricing and commission details (where you enter them)
  • Open home schedules

  • Communication Data:

  • Messages sent through the Platform
  • Email and SMS communications
  • Document signing records and timestamps

  • Electronic Signature Data:

  • Full name, email address, and IP address recorded at the time of signing
  • Date and time of signing (UTC)
  • Phone number used for one-time SMS verification (OTP) prior to signing
  • Cryptographic hash of the signed document content

  • Usage Data:

  • Login history and session information
  • Pages visited and features used
  • Device information and browser type
  • IP address and approximate location
  • Cookies and similar technologies

  • Transaction Information:

  • Per-listing and other platform fees paid
  • Payment details processed by Stripe (BuyFinder does not store card numbers)
  • Billing history and invoice records

  • Third-Party Personal Information (uploaded by users):

  • Buyer and vendor names and contact details entered by agents
  • Notes and registration records relating to buyer introductions
  • Other personal information agents upload or transmit through workflow features

  • Agents who upload third-party personal information act as the primary collector for that information. BuyFinder processes it on their behalf to operate the Platform.


    Consequences of not providing information:

    If you choose not to provide certain personal information, we may not be able to create your account, verify your identity, send you OTP verification codes required for signing documents, process payments, or provide full access to Platform features. Where providing information is optional, you can decline without affecting your access to that feature.

3. Source of Information

    Personal information may be collected:

  • Directly from you when you register, use the Platform or contact us
  • From agency administrators or colleagues who create or manage accounts on your behalf
  • From your activity on the Platform
  • From integrated service providers (for example, authentication or payment providers)
  • From public or professional sources where reasonably necessary for platform operations

  • Publicly available agent professional information:

    BuyFinder collects publicly available professional information about licensed real estate agents — such as name, agency, profile photo, business phone number, business email address, and details of properties they currently have listed for sale — from public real estate listing websites and other public professional sources. We use automated collection tools (provided by Apify) for this purpose.


    We use this information to:

  • Operate the BuyFinder agent directory
  • Display agent profiles to platform users
  • Match agents to relevant conjunction opportunities in the areas they service
  • Send listing-specific conjunction invitations and outreach by SMS and email, including invitations initiated by other platform users, whose details may be pre-filled from the directory

  • Because this information comes from public sources, it may not always be complete or current. We take reasonable steps to keep it accurate and up to date, and we will correct it promptly on request.


    If you are an agent whose details we have collected from public sources and you do not want your information used in this way, you can ask us to correct, remove or suppress it at any time — see the "Direct Marketing and Outreach" section below.

4. How We Use Your Information

    We use personal information for the following purposes:


    Provide and administer the Platform:

  • Create and manage your account
  • Enable property listings and agent connections
  • Process conjunction agreements and document signing

  • Enable invitations, collaboration and communications:

  • Enable messaging between users
  • Send email and SMS notifications requested by users
  • Deliver platform updates and alerts
  • Provide customer support

  • Maintain records and security:

  • Detect and prevent fraud or abuse
  • Comply with legal obligations
  • Enforce our Terms and Conditions

  • Process payments:

  • Process payments and subscriptions
  • Send invoices and receipts

  • Troubleshoot, analytics and product improvement:

  • Analyse usage patterns and trends
  • Develop new features and services
  • Fix bugs and improve performance

  • Comply with legal obligations and investigate misuse:

  • Respond to lawful requests
  • Investigate misuse or enforce terms

5. How We Share Your Information

    BuyFinder does not sell your personal information.


    We may share your information with:


    Other Platform Users:

    Certain profile, contact and transaction-related information may be visible to other users as part of core platform functionality. Contact details may be shared when you accept an invitation or enter an agreement.


    Users are responsible for only uploading personal information they are authorised to share. BuyFinder is not responsible for how another user handles information once lawfully shared through core platform functions, except to the extent required by law.


    Service Providers:

    We engage third-party service providers to help operate our Platform:

  • Cloud hosting and data storage (Google Cloud, Firebase)
  • Authentication services (Google, Firebase Auth)
  • Email and SMS delivery (Twilio, SendGrid)
  • Messaging infrastructure (Stream)
  • Payment processing (Stripe)
  • Analytics (Google Analytics)

  • These providers are contractually obligated to protect your information and use it only for the services they provide to us.


    Legal and Regulatory Authorities:

    We may disclose information where required by law, court order, or regulatory request.


    Business Transfers:

    In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

6. Agent Obligations for Third-Party Data

    Licensed agents and agency users who upload, register or share personal information about buyers, vendors or other third parties through the Platform must:


  • Comply with the Privacy Act 1988 (Cth) and applicable state privacy legislation
  • Have a lawful basis to collect and use that information (for example, consent or a legitimate transaction purpose)
  • Only use information for the property transaction or workflow purpose for which it was collected
  • Not upload sensitive information unless strictly necessary and lawfully permitted
  • Honour any access, correction or deletion requests they receive in relation to data they collected

  • BuyFinder provides workflow tools only. Agents remain responsible for their own privacy compliance, collection notices, and communications with data subjects.

7. Business Contact Information

    Since this is a platform for real estate professionals, some information we collect and disclose may be business contact information and professional profile information used to operate the network and platform functionality. This helps frame how we handle information in the context of our business model.

8. Cookies and Tracking Technologies

    We use cookies and similar technologies to enhance your experience on the Platform.


    Types of Cookies We Use:


    Essential Cookies:

  • Authentication and session management
  • Security features
  • User preferences

  • Analytics Cookies:

  • Google Analytics may collect usage and device data to understand how users interact with the Platform
  • Usage patterns and feature adoption
  • Performance monitoring

  • Functional Cookies:

  • Remember your settings and preferences
  • Personalise your experience

  • Managing Cookies:

    Cookie settings can be managed in your browser controls. Disabling certain cookies may affect platform functionality.


    Do Not Track:

    We do not currently respond to "Do Not Track" signals, as there is no industry standard for this feature.

9. Data Security

    BuyFinder implements safeguards appropriate to the nature of the information and risk profile, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password hashing
  • Access controls and authentication
  • Secure cloud infrastructure
  • Employee training on data protection

  • Your Responsibilities:

  • Keep your login credentials confidential
  • Use a strong, unique password
  • Log out of shared devices
  • Report any suspected security breaches

  • No Absolute Guarantee:

    We cannot guarantee absolute security. No method of electronic transmission or storage is 100% secure.


    Data Breach Response:

    If BuyFinder becomes aware of a data incident affecting personal information, we will assess the incident and take steps required under applicable law, including notification where legally required.

10. Data Retention

    We retain personal information for as long as reasonably necessary for the purposes described in this policy. The following are indicative timeframes for common categories of data:


    Typical retention periods:

  • Active account data: retained while your account remains open and for a reasonable period after closure
  • Signed conjunction agreements and audit trails: retained for 7 years from the date of signing (consistent with standard legal and tax obligations)
  • OTP verification and signing records: retained as part of the document audit trail for the same period as the signed agreement
  • Payment and billing records: retained for at least 5 years as required by Australian tax law
  • Communications and messaging data: retained while your account is active and for up to 2 years after closure
  • Marketing preferences and opt-out records: retained indefinitely to honour opt-out requests

  • Extended retention:

    Information may be retained beyond these periods where required for ongoing legal proceedings, regulatory investigations, security reviews, or other legitimate legal or business reasons.


    When information is no longer required, it will be de-identified or securely deleted, subject to backup cycle timelines and legal retention obligations.


    Account Deletion:

    You may request deletion of your account by contacting us at admin@buyfinder.com.au. Deletion of signed agreement records, payment records and audit trails may not be possible where retention is required by law or for dispute resolution.

11. Your Rights

    Where applicable under Australian privacy law, you may have the right to:


    Access Your Information:

    Request access to the personal information we hold about you. Requests are subject to identity verification and legal limitations.


    Correct Your Information:

    Request correction of any inaccurate, incomplete, or outdated information.


    Opt-Out of Marketing:

    You may unsubscribe from marketing communications at any time using the unsubscribe link in our emails or by contacting us at admin@buyfinder.com.au.


    Please note that opting out of marketing does not affect service-related communications. We will continue to send account alerts, OTP verification codes, document signing notifications, billing receipts, security notices and other transactional messages that are necessary for the operation of your account and the Platform.


    Withdraw Consent:

    Where we rely on your consent, you may withdraw it at any time, though this may affect your ability to use certain features.


    Request Deletion:

    Request deletion of your personal information. Deletion may not be possible where data must be retained for security, legal, billing, dispute or audit purposes.


    Lodge a Complaint:

    If you believe we have breached applicable privacy law, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).


    How to Exercise Your Rights:

    Contact us at admin@buyfinder.com.au with your request. Response timeframes may vary depending on complexity, though we will respond within a reasonable period.

12. Direct Marketing and Outreach

    This section explains how we use personal information for direct marketing under Australian Privacy Principle 7.


    What we send:

  • Listing-specific conjunction invitations and outreach to licensed real estate agents, by SMS and email, based on their publicly listed professional details, service areas and current listings
  • Platform updates, feature announcements and other marketing communications to account holders who have opted in to marketing

  • How to opt out at any time:

  • Reply STOP to any SMS from BuyFinder
  • Use the unsubscribe link in any BuyFinder email
  • Email admin@buyfinder.com.au with your name and contact details

  • Opt-out requests are actioned promptly (and in any case within 5 business days). Your contact details are added to our suppression list and your opt-out is honoured indefinitely — we retain suppression records for as long as needed to make sure we do not contact you again.


    Opting out of marketing does not affect essential service communications for active accounts, such as OTP codes, document signing notifications and billing receipts.


    If you are not a BuyFinder user (correction and removal rights for non-users):

    If we have collected your professional details from public sources and you do not hold a BuyFinder account, you may still ask us to correct, remove or suppress your information at any time by emailing admin@buyfinder.com.au. If any of your details are inaccurate, incomplete or out of date, we will correct them promptly. If you ask to be removed, we will suppress any further outreach to you and remove your details from our agent directory, retaining only the minimum suppression record needed to honour your request.

13. Third-Party Services

    Our Platform integrates with third-party services that have their own privacy policies:


    Authentication:

  • Google Sign-In: governed by Google's Privacy Policy

  • Communications:

  • Twilio (SMS): governed by Twilio's Privacy Policy
  • SendGrid (Email): governed by Twilio SendGrid's Privacy Policy
  • Stream (Messaging): governed by Stream's Privacy Policy

  • Payments:

  • Stripe: governed by Stripe's Privacy Policy

  • Hosting and infrastructure:

  • Vercel (website hosting): governed by Vercel's Privacy Policy
  • Google Cloud / Firebase (data storage and authentication): governed by Google's Privacy Policy

  • Data collection and processing:

  • Apify (collection of publicly available listing and agent data): governed by Apify's Privacy Policy
  • OpenAI (data processing and enrichment): governed by OpenAI's Privacy Policy

  • Analytics:

  • Google Analytics: governed by Google's Privacy Policy

  • We encourage you to review the privacy policies of these third-party services.


    External Links:

    The Platform may contain links to external websites. We are not responsible for the privacy practices of these websites.

14. International Data Transfers

    BuyFinder uses third-party service providers who may store or process personal information outside Australia. Under Australian Privacy Principle 8, we are required to disclose this and take reasonable steps to ensure overseas recipients handle your information appropriately.


    Countries where your data may be processed:

  • United States: Google (Firebase, Google Cloud, Google Analytics, Google Sign-In), Twilio (SMS), SendGrid (email), Stripe (payments), Stream (messaging), Vercel (hosting), OpenAI (data processing)
  • Ireland and European Union: Google Cloud infrastructure (certain regions), Apify (data collection)
  • Other jurisdictions where our service providers operate their infrastructure

  • What this means for you:

    These overseas recipients may be subject to the laws of their own countries, which may differ from Australian privacy law. In some cases, foreign laws may require disclosure to government authorities without equivalent protections to those available under the Privacy Act 1988 (Cth).


    BuyFinder takes reasonable contractual steps to ensure overseas providers protect personal information to a standard comparable to the APPs, including relying on data processing agreements and standard contractual clauses where applicable.


    By using the Platform, you acknowledge and consent to your personal information being transferred to and processed in the countries listed above for the purposes described in this Privacy Policy.


    If you do not consent to overseas transfer, you should not use the Platform, as these transfers are necessary for core platform functions including authentication, messaging, payments and document signing.

15. Children's Privacy

    The Platform is intended for use by adults and licensed real estate professionals.


    We do not knowingly collect personal information from children under 18 years of age.


    If we become aware that we have collected information from a child, we will take steps to delete it promptly.


    If you believe a child has provided us with personal information, please contact us at admin@buyfinder.com.au.

16. Changes to This Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.


    Material changes:

    For changes that materially affect how we collect, use or disclose personal information — such as new data types collected, new third-party recipients, or new overseas transfers — we will provide active notice by email or Platform notification at least 14 days before the change takes effect. You will have the opportunity to review the changes before they apply to your data.


    Minor changes:

    For minor updates such as clarifications, formatting corrections or changes to contact details, we will update the "Last updated" date. Continued use of the Platform after such changes constitutes acceptance.


    We encourage you to review this Privacy Policy periodically. If you do not agree to a material change, you may close your account before the change takes effect by contacting us at admin@buyfinder.com.au.

17. Contact Us

    If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:


    Email:

    admin@buyfinder.com.au


    Legal entity:

    Buyfinder Australia Pty Ltd (ACN 696 397 903, ABN 30 696 397 903)


    Office of the Australian Information Commissioner (OAIC):

    If you are not satisfied with our response to a privacy concern, you may contact the OAIC:

  • Website: www.oaic.gov.au
  • Phone: 1300 363 992

Questions about your privacy?

If you have any questions about this Privacy Policy or how we handle your data, please contact us.

admin@buyfinder.com.au

Buyfinder Australia Pty Ltd · ACN 696 397 903 · ABN 30 696 397 903