Privacy Policy.

01Who handles your information

Tugadot Pty Ltd operates RentInAustralia at rentinaustralia.com.au. In this policy, “we”, “us” and “our” mean Tugadot Pty Ltd. This policy covers personal information handled through the website, account workspaces and correspondence with us.

Contact our privacy contact at info@rentinaustralia.com.au for questions, access or correction requests, deletion requests and privacy complaints. For ordinary account help, use support@rentinaustralia.com.au. We handle personal information in accordance with the privacy laws that apply to us. This policy does not limit any rights you have under those laws.

02Information we collect

What we hold depends on how you use RentInAustralia:

• Account information: your email address, display name, timezone, account identifiers, verification status and security settings. Our authentication provider handles passwords in hashed form, sessions and verification or recovery processes.
• Your home search: saved listing references, private notes, saved-search names, filters, preferences and whether a search is active or paused.
• Advertiser workspace information: organisation details, membership and permissions, property and listing information, images, import files and records of changes. Listings may contain personal information such as an individual’s name, contact details or property address.
• Consent and operational records: the policy versions accepted, acceptance times, account and request identifiers, and records needed to track changes and security events.
• Technical information: IP address, browser and device information, requested pages or URLs, timing, errors and security or access logs generated by our hosting and authentication services.
• Correspondence: the contact details, message content and attachments you send when requesting support or making a complaint.

We do not currently ask for passports, driver licences, payslips, bank statements, payment-card details or tenancy applications. Avoid putting these, health details or other sensitive information into notes or messages. An accessibility preference can reveal personal circumstances; provide only what you need for your search.

03Rental enquiries and your choices

When you submit an enquiry, we collect your message, profile name, verified account email, optional phone number, the listing and advertiser references, and the time and sharing consent you confirm. We also keep status, staff assignment and change records so you and permitted advertiser staff can manage the enquiry. We use this information to provide the contact you requested, prevent abuse and keep an accountable record of sharing.

The review step names the advertiser and shows the exact message and contact details to be shared. Submission requires your separate confirmation; accepting this Privacy Policy alone does not authorise an enquiry. A name, verified email and message are required for this feature. You can leave the phone field empty or choose not to submit and continue browsing. We do not accept attachments or an alternative recipient address in this feature.

The enquiry becomes available to staff of the named advertiser with current permission to handle it. It is not public. We send the advertiser an automated email alert with a link to the protected inbox. Resend processes the advertiser’s routing email address, the generic email content, enquiry and organisation identifiers in that link, and delivery metadata such as provider identifiers, status, attempt times and errors. The alert contains no renter name, message, contact details, property address or login token. The link requires the advertiser’s usual authorised account access. Email acceptance does not confirm inbox delivery, reading or a response. The advertiser may use the email or phone details you share to contact you about the enquiry. Advertisers handle information they receive under their own privacy responsibilities and practices. Your private notes, saved homes and searches are not included.

You can withdraw the enquiry in your account. This clears its message and contact details from the active portal enquiry record and prevents further handling there. Minimal listing, consent, status and operational records remain for accountability, security and disputes. Withdrawal cannot recall an alert already in transit or remove information an advertiser already saw or copied, and deleted content may remain in restricted backups until normal expiry. Contact us about retained platform records, and contact the advertiser about copies it holds independently.

04Inspection bookings and attendance

For an inspection booking we collect your profile name, verified account email, group size, optional phone number, chosen session, sharing confirmation and booking history. Required fields are needed to reserve places; a phone number is optional. We do not ask for the names or contact details of other people in your group. The review shows the exact advertiser, contact details, group size and local inspection time, and requires a separate sharing choice.

We use these details to reserve attendee places, manage changes and cancellation, show your bookings and prevent misuse. Authorised staff of the named advertiser can view booking contact details, manage sessions, and record attendance or a no-show. Your private notes and searches are not included. Accepting this policy alone does not authorise a booking or marketing. We keep a minimal receipt of the consent and booking changes.

When a booking is cancelled, its shared contact snapshot is cleared from the active booking record. Session references, group size, consent and status history remain for accountability and disputes; attended and no-show records are retained according to the security and retention section. Cancellation cannot recall information an advertiser previously saw or copied, and restricted backups follow their ordinary expiry. We send booking confirmation, rescheduling and cancellation emails to your verified account address through Resend. Delivery records retain identifiers, delivery state and a one-way recipient hash; check your account for the latest session details even if an email is delayed or missing. Contact us about access, correction or deletion of retained platform records, and the advertiser about its independent copies.

05Application handoffs and shared progress

If you start application tracking, we collect your profile name, verified account email, the listing and advertiser references, provider name and destination, sharing confirmation and progress history. The review identifies the recipient and exact fields, and requires a separate sharing choice. Accepting this Privacy Policy alone does not authorise a handoff. You may decline and continue browsing or contact the advertiser about how to apply.

We use these records to show progress to you and authorised staff of the named advertiser, prevent duplicate active records and misuse, and retain an accountable record of consent. Status updates may be supplied by you or the advertiser; we show that source and the time recorded. Private saved homes, notes and searches are not included. We do not collect full application answers, identity documents, financial evidence or applicant scores in this feature.

External providers handle the information you give them independently, under their own privacy practices. No contact details, documents or account identifiers are added to the outbound link. The provider still receives ordinary connection information when you visit, such as your IP address and browser details. Check its privacy policy before providing information. This feature does not synchronise provider records. We send transactional status emails to your verified account address through Resend when tracking starts or its reported status changes; those emails do not independently verify the update.

Withdrawing tracking clears the contact snapshot from the active application record and stops further handling there. Minimal listing, destination, consent and status records remain for accountability, security and disputes under our retention practices. Withdrawal does not withdraw a provider application, remove copies an advertiser already holds or immediately remove restricted backups. Contact us about retained platform records or correction of reported progress, and contact the advertiser or provider about independent copies.

06AI search and service providers

When you submit an AI search, we send the text you enter, your current search criteria, timezone, current date and limited search context to OpenAI to interpret the request. When a display choice is needed, TypeSafe/Jev receives your request, interpreted intent, result counts and allowed display choices. This processing helps you find and compare public rental listings.

We do not automatically include your account contact details, private notes, saved searches or application records. Anything you type into the search field is part of the request, so leave out names, contact information, identity documents, financial records and sensitive personal details. You can use ordinary filters without sending a natural-language request to these AI providers.

We do not save a chat transcript in our application database. Your browser holds the current view and encrypted, session-bound search context; the context expires after 30 minutes. An essential, short-lived cookie binds that context to your browser. Our operational logs record request identifiers, timing and outcomes rather than raw search text.

OpenAI and TypeSafe process requests on our behalf and may retain information for security, abuse prevention and other purposes described in their service terms. We request that OpenAI not store responses for later retrieval; this is not a promise of zero retention. OpenAI documents that API data is not used for training by default, and TypeSafe states it does not train on input. Their processing can take place overseas, including in the United States; we do not promise Australian-only processing or special zero-retention controls.

See OpenAI’s API data controls and TypeSafe’s Privacy Policy for their current practices. Contact info@rentinaustralia.com.au with questions about information sent through this feature. AI search does not itself share contact details with an advertiser or authorise a booking, enquiry or application.

07How we collect it and your choices

We collect information directly when you create or use an account, save a search, manage a listing, upload a file or contact us. Advertisers or authorised organisation members may provide information about a property or their organisation. Our service providers generate technical and security records as you use the site.

You can browse and compare public listings without an account or giving us your name, although technical information is still processed. Account features need an email address, verification and the required profile fields. If you do not provide them, we cannot provide those account features. You can use a display name that does not reveal your full legal name, provided you do not impersonate someone else.

We do not use device GPS to track your location. Search locations are the suburbs, states or other criteria you choose. Public search criteria are included in page URLs, so take care when sharing a search link or using a shared device.

08Why we use information

We use information to authenticate accounts, provide the searches and workspace features you request, publish authorised listings, manage organisation access, respond to support requests, fix faults, prevent abuse and keep the service secure. We also use aggregated website usage information to understand which pages and features are useful and improve the service.

We also use necessary records to demonstrate policy acceptance, investigate complaints, resolve disputes and meet legal obligations. We do not sell personal information or use private notes and saved searches for targeted advertising.

Account verification, recovery and essential service communications are separate from marketing. You can expressly enable or disable a daily saved-search digest for each search. We use that search’s criteria to find newly published matching homes and send up to ten public listing summaries through Resend; the criteria remain in your private workspace and are not sent to advertisers. Accepting this policy does not subscribe you to alerts or marketing.

09Who can receive information

• Other website visitors: information you authorise for publication in a listing can be seen by the public. It may also be indexed or copied outside our control.
• Your organisation: authorised members can access organisation records according to their permissions. Organisation membership does not give access to your private renter notes or searches.
• People operating the service: authorised Tugadot Pty Ltd personnel and contractors may access information where needed for support, security, administration and the purposes in this policy.
• Service providers: Supabase provides our hosted database and authentication, Vercel hosts and delivers the website, Resend sends account, enquiry, inspection, application and saved-search notification emails, Google Workspace handles company email correspondence, and Google Analytics processes website usage data. These providers and their relevant service providers process information to perform those services.
• Legal and professional recipients: we may disclose necessary information to professional advisers, regulators, courts or law enforcement where required or authorised by law, or to establish or defend legal rights.

Saved homes, private notes and saved searches are not published or automatically shared with advertisers. Enquiries share only the message and contact details you review and expressly agree to send, as explained in the rental enquiries section above. Application handoffs share only the contact and progress details separately confirmed in the application tracking review; full applications are handled by the external provider. If you follow a third-party link and provide information there, that recipient’s privacy practices apply.

10Storage in Australia and overseas processing

Our primary Supabase database is hosted in Sydney, Australia. This does not mean that all processing takes place in Australia. Website delivery, authentication support, security operations, email services and optional analytics can involve overseas providers and personnel.

Overseas processing may occur in the United States and Singapore through our infrastructure providers, and in other locations used by their relevant service providers. Google Workspace’s published support locations also include Argentina, Bulgaria, Canada, Colombia, India, Ireland, Israel, Japan, Malaysia, Mexico, the Philippines, Romania and Switzerland. Support access depends on the service and the assistance requested; this does not mean every message is sent to every location.

The providers publish further information in the Supabase subprocessor list, Vercel Trust Center, Google Workspace subprocessor list, Resend Privacy Policy and Google Privacy Policy. Locations can change. Contact us for further information about the providers relevant to your request.

We use provider agreements and access controls to protect information handled for us, and take any steps required by applicable law for overseas disclosure. Overseas laws may differ from Australian law. This policy is not a request to waive protections that apply to an overseas disclosure.

11Cookies, analytics and browser storage

We use essential authentication cookies to keep account sessions working. Your browser also keeps the identifiers of homes selected for comparison in session storage, so the selection can persist while you use the site in that tab. Comparison storage does not contain your private notes.

Google Analytics receives information about the pages you visit, referral source, approximate location derived from your IP address, and browser or device information, and can set analytics cookies. We remove URL query strings from the page information we send and do not send your account name, email address, private notes, enquiry or application content, or the words entered in AI search. Google advertising signals and advertising personalisation are disabled.

You can restrict or clear analytics cookies through your browser settings or use Google’s Analytics opt-out add-on. Blocking essential cookies will prevent sign-in and account features from working. You can remove homes from comparison using the controls on the site.

12Security and retention

We use HTTPS, authenticated account access, database permissions and controls that separate users’ private workspace records. Access is limited according to role and purpose. No online service can guarantee absolute security. Report suspected unauthorised access to support@rentinaustralia.com.au without sending your password or verification codes.

We keep personal information for as long as reasonably needed to provide the service, support your account, meet legal obligations, protect security and resolve disputes. Retention depends on the record and its purpose; we do not keep everything for one fixed period.

You can delete saved homes and searches through the workspace. Removing a saved home removes its note from the active workspace database. Our change-tracking records store identifiers and versions rather than copies of private note text or saved-search criteria. Account and listing records, consent receipts and relevant security or business records may need to be retained separately for the purposes above.

Removed information may remain in backups until they expire through the normal backup cycle. We restrict use of retained copies to the reason for retention, recovery or a legal requirement. When information is no longer needed and there is no requirement to retain it, we take reasonable steps to delete or de-identify it. If a breach occurs, we will assess it and notify affected people and authorities where required by law.

13Access, correction and deletion

You can review and edit available profile details, saved homes, notes and searches in your account. For other information, or to request account closure or deletion, email info@rentinaustralia.com.au. Explain what you need and include the email address associated with your account. You do not need to use a special form.

We may ask for proportionate information to verify your identity before releasing or changing account information. Do not send identity documents unless we have explained why they are necessary and how to provide them securely.

We aim to respond within 30 days. We do not charge you to make a request or to correct your information. If a permitted charge for providing access is necessary, we will explain it beforehand. If we cannot comply in full, we will explain the reason, any information we need to retain and how you can challenge the decision, unless law prevents us from doing so.

You can ask to withdraw a consent. We will explain the effect on services that depend on it. Withdrawal does not undo earlier lawful processing or necessarily require deletion of a record showing that consent was previously given.

14Privacy complaints

Send a privacy complaint to Tugadot Pty Ltd at info@rentinaustralia.com.au with a description of what happened and the outcome you are seeking. We will investigate, seek relevant information and explain our response. We aim to acknowledge your complaint within five business days and respond within 30 days. If more time is needed, we will keep you informed.

If you are dissatisfied or have not received a response within a reasonable time, you can contact the Office of the Australian Information Commissioner to ask about your options. The OAIC can explain whether it can deal with your complaint. This does not limit other rights or complaint pathways available to you.

15Changes to this policy

This policy is effective from 25 September 2026 and describes the service at that date. We will publish a new dated version when our practices materially change, keep previous published versions available at their dated links, and provide notice or seek additional consent where required. Check this page for the current policy.