Legal
Privacy policy
Effective 2026-04-01
1
What we collect
When you sign up we collect your email address. When you make a payment, our payments provider (Stripe) collects billing details on our behalf — we never see or store your card number. We also collect anonymous usage analytics (page views, feature interactions) via PostHog when consented.
2
What we don't collect
We do not collect your name, address, phone number, or any personal information beyond your email and payment status. We do not collect data about the properties you research — your postcode lookups are not associated with your account in any persistent way.
3
How we use your data
Your email is used solely to: (a) send you transactional notifications (welcome, payment receipts, alerts you opt into); (b) authenticate your account. We do not send marketing emails unless you explicitly opt in. We do not sell or rent your data to anyone.
4
Cookies & tracking
We use one essential cookie (
pp_session) to keep you signed in. With your consent, we additionally load PostHog analytics for aggregate usage measurement. You can decline analytics in our cookie banner.5
Data retention
Your account data is retained for as long as you have an active account. After cancellation, we delete your personal data within 90 days, except for billing records we are legally required to retain (typically 7 years under Australian tax law).
6
Third parties we use
- Vercel — hosts the website (USA)
- Supabase — stores account data (Sydney AU region)
- Stripe — processes payments (USA, GDPR + AU compliant)
- Resend — sends transactional emails
- PostHog — anonymous usage analytics (only with consent)
- Cloudflare — DNS + DDoS protection
7
Your rights
You can request a copy of all data we hold about you at any time, or request deletion, by emailing support@proppulse.dev. We comply with the Australian Privacy Act and GDPR (where applicable).
8
Data location
Your account data lives in Supabase's Sydney region. Backups are encrypted at rest. Source property data comes from public Australian Government open datasets and is not personal data.
9
Security
All data in transit is encrypted via TLS 1.3. All data at rest is encrypted. We use industry-standard access controls and audit logging. Payment data is handled exclusively by Stripe (PCI DSS Level 1 certified).
10
Changes
We may update this policy as our service evolves. Material changes will be communicated via email. Continued use after changes constitutes acceptance.
Privacy contact
support@proppulse.dev