Privacy Policy

This policy applies to:

• Agents — real estate professionals and businesses who create accounts and use PropConnect to manage property portals and capture leads.
• Buyers / Visitors — individuals who visit a PropConnect-generated property portal and submit their details to access documents.

From Agents (account holders):

• Name, email address, and password (or Google OAuth credentials)
• Billing and payment information (processed by third-party providers)
• Property listings, uploaded documents (LIM reports, building reports, floor plans), and portal configurations
• Usage data and analytics relating to your account activity

From Buyers / Visitors (via agent property portals):

• Name, email address, and phone number (as required by the agent's portal settings)
• IP address, browser type, and device information
• Document access and download activity
• Engagement data such as time spent on portal pages

For Agents:

• To provide, maintain, and improve the Service
• To process payments and send account-related communications
• To send product updates, feature announcements, and support messages
• To comply with legal obligations

For Buyers / Visitors:

• To provide access to gated property documents as requested
• To deliver the buyer's contact details to the agent who operates the portal
• To send transactional emails (e.g. document access confirmation) where applicable

We collect and process personal information where:

• You have given your consent (e.g. submitting your details on a property portal)
• It is necessary to perform a contract with you (e.g. providing the Service to agents)
• We have a legitimate business interest that does not override your rights
• We are required to by law

We use cookies and similar technologies to operate the Service, remember your preferences, and analyse usage patterns. You may disable cookies in your browser settings; however, some parts of the Service may not function correctly if you do so.

We may use third-party analytics tools (such as Google Analytics or equivalent) to understand how users interact with our platform. These tools may set their own cookies and collect data subject to their own privacy policies.

We do not sell your personal information. We may share information with:

• Service providers — including cloud hosting (Vercel, Supabase), email delivery (Resend), and payment processors — who process data on our behalf under appropriate data processing agreements
• Agents — buyer contact details submitted via an agent's portal are shared with that agent as the core function of the Service
• Law enforcement or regulators — where required by New Zealand law or a valid legal order
• Successors — in the event of a business merger, acquisition, or sale of assets

Data is stored on infrastructure located in Australia (AWS ap-southeast-2 region) and the United States. We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews.

No method of electronic storage or transmission is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security and accept no liability for unauthorised access that occurs despite these measures.

We retain personal information for as long as necessary to provide the Service and meet our legal obligations:

• Agent account data is retained for the duration of the account, plus up to 7 years for tax and legal compliance purposes
• Buyer lead data is retained on our systems for as long as the relevant agent account is active, and deleted within 90 days of account closure unless otherwise required by law
• Analytics and log data may be retained in aggregated, anonymised form indefinitely

You have the right to:

• Access the personal information we hold about you
• Correct any personal information that is inaccurate or out of date
• Request deletion of your personal information, subject to our legal retention obligations
• Complain to the Office of the Privacy Commissioner (OPC) if you believe we have breached your privacy rights

To exercise any of these rights, please contact us using the details below. We will respond within 20 working days as required by the Privacy Act 2020.

The Service is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.

Property portals may contain links to external websites or listing platforms. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

We may update this Privacy Policy from time to time. Material changes will be notified by email (to registered agents) or by a prominent notice on our website at least 14 days before taking effect. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.