Privacy Policy

This policy explains how BuyDNA handles personal information when you visit the BuyDNA website, create an account, or analyse a property. It is written to reflect Australian privacy expectations, including the Australian Privacy Principles where they apply to us.

Account information: your name, email address and password credentials (passwords are stored only as salted hashes by our authentication provider, never in readable form).

Property activity: the listing links and addresses you submit, the reports generated for you, and preferences you choose to save such as a buyer brief or saved properties.

Usage information: pages viewed, features used, device and browser type, approximate location derived from your IP address, and diagnostic logs used to detect errors and abuse.

Payment information: if and when paid products are enabled, card details are collected and processed by our payment provider. BuyDNA does not store full card numbers.

Support correspondence: messages you send us and our replies.

To identify a property and produce the analysis you asked for.

To create and secure your account, and to keep your reports available to you when you return.

To provide support, investigate errors, and correct data problems you report.

To operate, protect and improve the service, including detecting misuse and fair-use limits.

To process payments and manage access to paid products where applicable.

To send service communications. We do not sell your personal information.

We use third-party providers to run BuyDNA, including cloud hosting and database services, authentication, property and market data providers, government data services, analytics, error monitoring, email delivery and payment processing.

Providers may process data outside Australia. We share only what a provider needs to perform its function. Property and market data providers receive property identifiers and addresses, not your account details, except where a request must be attributed for fair-use purposes.

We use aggregate product analytics to understand which features are used and where the service fails. We do not use analytics to build advertising profiles of you.

Account information is retained while your account is open. Generated reports are retained so you can return to them, and so we can honour access entitlements and investigate corrections.

Diagnostic logs are retained for a limited period for security and reliability purposes. Records we are required to keep for tax or legal reasons are retained for the period the law requires.

Data is transmitted over encrypted connections and stored in access-controlled managed services. Access to production data is limited to personnel who need it to operate the service. No system can be guaranteed absolutely secure, and we encourage you to use a unique password.

You can request access to the personal information we hold about you, ask us to correct it if it is wrong, or ask us to delete your account and associated personal information.

Deleting your account removes your saved properties, briefs and report access. Aggregate, de-identified usage records and records we must retain by law may remain.

You can also ask us to correct a factual error in a report. Where the underlying source supports the correction, we apply it and the report can be regenerated.

We use cookies and browser storage to keep you signed in, remember interface preferences, and measure aggregate usage. Blocking them may prevent sign-in from working.

If you believe we have mishandled your personal information, contact us and we will investigate. If you are not satisfied with our response, you may refer the matter to the Office of the Australian Information Commissioner.