Privacy Policy

1. Introduction

Jade Estate (ABN 13 460 748 489) ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property investment management platform and services (the "Service").

By using our Service, you consent to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly to us, including:

• Account Information: Name, email address, and contact details when you create an account
• Property Information: Details about your investment properties including addresses, purchase prices, and settlement dates
• Financial Information: Transaction records, income and expense data, and bank account information when you connect your accounts
• Documents: Files you upload such as invoices, bank statements, and receipts
• Payment Information: Billing details processed through our payment provider

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Device information (browser type, operating system)
• Log data (IP address, access times, pages viewed)
• Usage information (features used, actions taken)

2.3 Information from Third Parties

We may receive information from third-party services you connect to your account:

• Banking Data: Account balances and transaction history via Basiq
• Email Data: Property-related emails when you connect your email account via Google OAuth
• Authentication Data: Basic profile information from Google or Facebook when you sign in with these providers

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Track income, expenses, and generate financial reports for your properties
• Extract and categorise transaction data from uploaded documents using AI
• Send you technical notices, updates, and support messages
• Respond to your comments and questions
• Detect, investigate, and prevent fraudulent or unauthorised activity
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services to provide our Service:

4.1 Basiq

We use Basiq to securely connect to your bank accounts and retrieve transaction data. Basiq is an authorised data recipient under Australia's Consumer Data Right (CDR) framework. Your banking credentials are never shared with us directly.

4.2 Stripe

Payment processing is handled by Stripe. Your payment card details are collected and processed directly by Stripe and are not stored on our servers. See Stripe's Privacy Policy.

4.3 Google Services

We use Google Cloud Platform for secure document storage and Google OAuth for authentication and email integration. See Google's Privacy Policy.

4.4 AI Services

We use AI services (including OpenAI, Anthropic, and Google Gemini) to extract and categorise financial data from documents you upload. Document content is processed by these services to identify transactions. We do not use your data to train AI models.

5. Data Storage and Security

Your data is stored on secure servers located in Australia and the United States. We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication using industry-standard protocols
• Regular security assessments and updates
• Access controls limiting employee access to personal data

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. We may retain certain information for longer periods as required by law (e.g., tax records for 7 years) or for legitimate business purposes.

When you delete your account, we will delete or anonymise your personal information within 90 days, except where we are required to retain it by law.

7. Your Rights

Under Australian Privacy Law, you have the right to:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Data Portability: Request a copy of your data in a portable format
• Withdraw Consent: Withdraw consent for optional data processing
• Complain: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise these rights, contact us at legal@jade.estate.

8. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings, but disabling them may affect the functionality of our Service.

9. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected information from a child under 18, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Jade Estate
ABN: 13 460 748 489
Email: legal@jade.estate