← Back to Propilot

Privacy Policy

Last updated: 2 July 2026

1. Overview

Avensi Pty Ltd (ABN 49 687 245 398) ("we", "us", "our") operates Propilot ("the Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

2. Information We Collect

Account Information

  • Name and email address (provided at registration or via Google sign-in)
  • Password (hashed, for email/password accounts)

Address Reports (no account needed)

  • The property address you search and its map coordinates
  • If you purchase a report: the email address you provide at Stripe checkout (used to deliver your report link and receipt; we never see or store card numbers)
  • The compiled report itself (public-data findings about the address you chose) is retained so your access link keeps working

Profile Information

  • Home address (for commute calculations and timezone detection)
  • Buyer preferences (budget, target suburbs, property type, bedrooms)
  • Commute destination

Property Data

  • Properties you add, including addresses and inspection times
  • Visit notes, ratings, and inspection plans you create
  • AI analysis results generated for your properties
  • Documents you upload (such as building reports, strata reports, and contracts of sale) for AI analysis

Location Data

  • GPS location (only when you use the "Replan Now" feature, with your explicit permission)
  • Location data is used in real-time for route planning and is not stored permanently

Usage Data

  • Pages visited, features used, and interaction patterns (via our analytics tooling)
  • Device type, browser, and operating system
  • Error reports and performance data (via Sentry)

3. How We Use Your Information

  • Provide and improve the Service (property tracking, inspection planning, AI analysis, Address Reports)
  • Send transactional emails (report delivery, inspection reminders, account notifications)
  • Calculate commute times and optimise inspection routes
  • Generate AI-powered property analysis, report summaries, offer strategy, and document reviews
  • Process payments via Stripe (subscriptions and one-off Address Reports)
  • Monitor and fix errors to improve service reliability
  • Analyse usage patterns to improve features (aggregated, non-personal)

4. Third-Party Services

We share data with the following third-party services only as necessary to operate the Service:

  • Supabase: database, authentication, and file storage (hosted in Australia)
  • Google Maps Platform: route planning, commute times, address autocomplete and geocoding
  • AI service providers: property data, report contents, and uploaded documents are sent to third-party AI services to generate analysis, summaries, and recommendations. Content is processed per-request and is not retained by the AI provider beyond the request or used to train their models.
  • Stripe: payment processing (we do not store credit card details)
  • Vercel: application hosting
  • Resend: transactional email delivery
  • Sentry: error tracking and performance monitoring
  • PostHog: anonymous product analytics (page views, feature usage)

5. Uploaded Documents

When you upload documents (such as building and pest reports, strata reports, or contracts of sale), they are stored securely in our database and are only accessible by you. Document text is sent to our AI service providers to generate analysis. We do not share your uploaded documents with any other third party.

6. Data Retention

Account data is retained for as long as your account is active; you may delete your account and all associated data at any time by contacting us. Property data, visit notes, and uploaded documents are deleted when you untrack the associated property or delete your account. Unpurchased Address Report previews are automatically deleted after 30 days; purchased reports are retained so your access link keeps working, and you may request deletion at any time.

7. Data Security

We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), encrypted data at rest, Row Level Security (RLS) ensuring users can only access their own data, and OAuth 2.0 for third-party authentication. Purchased reports are protected by long, unguessable access tokens and excluded from search-engine indexing.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access your personal information held by us
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Opt out of marketing communications
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

9. Cookies and Analytics

We use essential cookies for authentication, language preference, and session management. We also use privacy-respecting product analytics to collect usage data (such as page views and feature usage) to help us improve the Service. We do not use advertising cookies or sell your data to advertisers.

10. Children

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.

12. Contact

For privacy inquiries or to exercise your rights, contact our Privacy Officer at info@propilot.com.au.

You may also contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au if you have concerns about how we handle your personal information.