Privacy policy

AiTrader.com Pty Ltd, ABN 69 673 396 097, of Sydney, New South Wales, Australia, operates truebuy.ai. We are the entity responsible for the personal information described here. Our privacy contact is privacy@truebuy.ai.

We collect only what the service needs to work.

• Account information. Your email address, and a phone number if you sign in with one. Authentication is handled by our identity provider; we never see your password.
• Property information. Addresses you search or add, listing links you paste, and the guide price you tell us.
• Documents you upload. Contracts of sale, strata reports, building and pest inspections, certificates and searches. These routinely contain personal information about other people - vendors, agents, solicitors, tenants and inspectors - which we hold only as part of your document.
• What the review produced. Findings, quoted passages, page references, extracted text and the negotiation plan.
• Payment information. Amounts, dates, status and a Stripe identifier. We never receive or store your card number.
• Support conversations. What you write to support and what we answer.
• Technical information. Ordinary server logs, and the time you last used the service.

We do not collect sensitive information as the Privacy Act defines it, and you should not send it to us.

• To run the service: estimate a price, read your documents, write your report and let you share it.
• To take payment and keep the records the law requires us to keep.
• To answer you when you ask for support.
• To keep the service secure and to investigate misuse.
• To improve the service, using aggregate information rather than your documents.

We do not use your documents or your reports to train AI models, and the AI providers we use are engaged on terms that do not permit them to either. We do not sell personal information, and we do not use it for advertising.

Two parts of the service are automated. A model produces the price estimate from comparable sales data, and a model reads your documents and writes the findings. Both are described on the terms page.

These are informational outputs. They do not make a decision about you, they do not affect your legal rights, and no automated decision is made about your eligibility for anything. You can ask a person to look at any output, and you can ask us to correct it.

We share personal information only with providers who help us run the service, and only what they need:

• Our hosting, database and file storage provider, which stores your account, documents and reports.
• Our identity provider, which handles sign-in.
• Stripe, which processes payments.
• Anthropic, whose models read your documents and write findings, under terms that prohibit training on your data.
• Our email provider, which delivers notifications and the reports you ask us to send.
• Google, when you use address autocomplete, which receives what you type into that field.

Some of these providers store or process data outside Australia, including in the United States. We take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles.

We will also disclose information where the law requires it, or where it is necessary to protect someone’s safety or our legal rights. If our business is sold, information may transfer with it, subject to this policy.

When you share a report, the person you share it with sees the findings and the numbers for that property. They never receive your documents. You control the link and can revoke it.

• Documents are held in private storage that is not publicly reachable, and are served only to you, to someone you have shared a report with, or to our staff where support or accuracy checking requires it.
• Every request for your data is checked against your account.
• Traffic is encrypted in transit.
• Access by our staff is limited to those who need it.

No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

• Documents: until you delete them, or until you close your account. Deletion is immediate and real.
• Reports and findings: while your account is open, so you can go back to them.
• Payment records: seven years, because tax law requires it.
• Support conversations: three years.
• Server logs: twelve months.

Extracted document text is stored against a fingerprint of the file so the same document is never read twice. When the last copy of a document is deleted, that text is deleted with it.

You can:

• Ask what personal information we hold about you and get a copy.
• Correct anything that is wrong.
• Delete a document at any time from the property page, immediately and without asking us.
• Ask us to delete your account and everything in it, subject to records we must keep by law.
• Ask a person to review anything a model produced.
• Complain about how we have handled your information.

Write to privacy@truebuy.ai. We will respond within 30 days. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

We use cookies that are necessary for the service: keeping you signed in, keeping an administrator signed in, and remembering whether you chose the light or dark theme. We do not use advertising cookies and we do not track you across other sites.

The service is for adults buying property. It is not directed at children and we do not knowingly collect information from anyone under 18.

If we change this policy we will update the date at the top, and we will tell you directly if the change materially affects how we handle your information.