Privacy Policy.

PROPA Homes Pty Ltd. ABN 80 694 460 127. PO Box 41, Rural View QLD 4740, Australia. support@propahomes.com.au.

1. About this policy

PROPA Homes Pty Ltd (Propa, we, us, our) is a property marketing platform for Australians selling their own home. This policy explains what personal information we collect, why we collect it, who we share it with, and what you can do about it.

It applies to propahomes.com.au, the Propa web application at app.propahomes.com.au, and every related dashboard, form, listing page and email we send.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Words used in this policy have the same meaning as in our Terms of Use and Service.

If you do not agree with this policy, please do not use the Platform.

2. What we collect

2.1 Information you give us

When you create an account: your name, email address, and phone number. You can sign in with Apple, Google, or an email address. When you use Apple or Google we receive the name and email address they pass to us, and nothing else from that account.

When you list a property: the property address, property details you enter (bedrooms, bathrooms, land size, features, price expectations), photographs and video you upload, and any disclosure documents you choose to attach. Remember that a published listing is public. Everything you put in it can be seen by anyone, including search engines.

When you contact a seller or make an enquiry: your name, email address, phone number, and the content of your message. On Premier listings a buyer can enquire without an account, in which case we collect the name, email address and phone number entered on the form and pass them to the seller so they can reply directly.

When you request an inspection or send a Propa Offer: the details of the request or offer, and any notes attached to it.

When you contact support: your name, email address, phone number, subject and message.

When you buy something: your purchase is processed by Stripe. Propa does not receive or store your full card number. We receive a record that a payment succeeded, the amount, and the email address associated with the purchase.

2.2 Information we collect automatically

When you use the Platform we collect:

• your IP address, browser type and version, device type and operating system;
• pages you view, links and buttons you click, how far down a page you scroll, and how long you stay;
• the website or advertisement you arrived from, and any campaign tags on the link you followed;
• a first-party session identifier stored in a cookie, so we can tell one visit apart from another;
• which listings you view, shortlist, favourite or enquire about.

Some of this is stored against your account when you are signed in. Some of it is collected before you sign in and is not linked to a person.

In one part of the Platform, the seller claim flow, we store a one-way hashed version of the IP address rather than the address itself.

2.3 Information we do not collect

We do not collect government identity documents, tax file numbers, or bank account details. We do not ask for your date of birth. We do not buy personal information from data brokers, and we do not build profiles of you from sources outside the Platform.

3. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, measure how the Platform is used, and measure whether our advertising works.

The measurement tools we use are Google Analytics, the Meta (Facebook and Instagram) advertising pixel and its server-side equivalent, and PostHog product analytics. These tools set their own cookies and receive information about your visit, including your IP address and the pages you view.

PostHog identifies signed-in users by an internal account identifier only. We do not send it your email address or your name.

Where we send information to Meta about an action you took, we send it from your browser and, for some actions, also from our server so the measurement is accurate when your browser blocks the first. We do not send your email address or phone number to Meta.

You can block or delete cookies in your browser settings. Some parts of the Platform will not work properly if you do.

4. Why we use your information

We use personal information to:

• create and administer your account, and keep you signed in;
• publish your listing and show it to buyers;
• pass enquiries, inspection requests and offers between buyers and sellers;
• send you transactional messages such as enquiry notifications, inspection confirmations, receipts and password resets;
• provide the seller dashboard, including the demand figures shown against your listing;
• process payments and keep records of them;
• provide support and answer your questions;
• send marketing and educational email where you have not opted out, always with an unsubscribe link;
• measure and improve the Platform, and measure our advertising;
• detect and prevent fraud, abuse, and misuse of the Platform;
• comply with our legal obligations.

Where we rely on your consent, for example marketing email, you can withdraw it at any time.

5. Who we share it with

5.1 Other users

This is the main one, so it is worth being direct. Publishing a listing makes its content public. When you send an enquiry, an inspection request, or an offer, the seller receives your name, your message, and the contact details you provided. On Premier listings, a guest enquiry passes your name, email address and phone number to the seller so they can reply to you directly, outside Propa.

Propa does not control what a seller or a buyer does with contact details once they have them.

5.2 Service providers

We use third parties to run the Platform. Each receives only what it needs:

If a seller embeds a third-party virtual tour, that provider will also receive information from your browser when you view it.

5.3 Others

We may disclose personal information where we are required or permitted by law, to a regulator or law enforcement body acting lawfully, to our professional advisers, to enforce our Terms, or to protect someone's safety. If Propa is ever sold or merged, personal information may transfer with the business, and this policy will continue to apply until you are told otherwise.

We do not sell your personal information.

6. Where your information goes

Your account and listing data is stored in Australia, in Supabase's Sydney region.

Several of the providers listed above operate overseas, including in the United States and the European Union. When we share information with them it may be stored or processed outside Australia. We take reasonable steps to make sure they handle it consistently with the Australian Privacy Principles, but overseas providers may be subject to laws different from Australia's.

7. Direct marketing

We send marketing email about Propa's products and educational content about selling a home. Every marketing email has an unsubscribe link, and unsubscribing takes effect for all marketing email.

Transactional messages are different. If you have an active listing or an open enquiry, we will still send you the messages needed to run it, such as a new enquiry notification or an inspection confirmation. You cannot unsubscribe from those while the underlying activity is live, though you can close your account.

We do not send marketing email on behalf of anyone else, and we do not give your email address to other companies for their marketing.

8. How long we keep it

We keep personal information for as long as we need it for the purpose it was collected, and then for as long as we are required to keep it by law.

In practice:

• account information is kept while your account is open;
• listing content is kept while the listing is live and for a period afterwards, so sold and withdrawn listings can be reported on;
• enquiries and messages are kept so both sides retain a record of the conversation;
• payment records are kept for seven years, as required by Australian tax law;
• analytics data is kept in aggregate.

When we no longer need personal information and are not required to keep it, we delete it or de-identify it.

9. Security

We protect personal information with access controls, encryption in transit, database-level row security so one user cannot read another's data, and hosted infrastructure from established providers.

No online service is perfectly secure, and we cannot guarantee absolute security. If we become aware of a data breach that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

10. Accessing and correcting your information

You can see and edit most of your information in your Propa account at any time.

You can also ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that is wrong or out of date;
• delete your account and the personal information attached to it.

Email support@propahomes.com.au. We will respond within 30 days. There is no fee to make a request, though we may charge a reasonable fee for a large or complex request, and we will tell you before we do.

We may need to verify who you are before we act on a request. If we refuse a request we will tell you why in writing.

Some information cannot be deleted on request. For example we must keep payment records for seven years, and we will keep enough information to enforce a suspension or ban.

11. Children

The Platform is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

12. Complaints

If you think we have mishandled your personal information, email support@propahomes.com.au with the detail. We will acknowledge your complaint within 5 business days and respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner:

• Website: oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

13. Changes to this policy

We may update this policy. When we do we will change the version number and effective date at the top, and publish the new version on this page. If a change materially affects how we handle your personal information, we will tell you by email or a notice on the Platform before it takes effect.

14. Contact us

PROPA Homes Pty Ltd ABN 80 694 460 127 PO Box 41, Rural View QLD 4740, Australia support@propahomes.com.au