Privacy Policy

Consulting Cadets Pty Ltd (“we”, “us”, “our”) operates BuyerPocket at buyerpocket.com.au. This policy explains how we collect, use, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using BuyerPocket you consent to the practices described in this policy. If you do not agree, please do not use the service.

We collect the following categories of personal information:

• Account information: Your name, email address, mobile number, agency name, and state.
• Buyer records: Names, phone numbers, email addresses, property preferences, notes, and reminders that you enter about your clients. You are the data controller for this information.
• Usage data: Pages visited, features used, timestamps, and device information (collected via PostHog analytics and server logs).
• Payment information: Processed by Stripe. We do not store card numbers or full payment details.
• Push notification tokens: Device identifiers used to deliver push notifications.

We use personal information to:

• Provide and improve the BuyerPocket service
• Send reminders and notifications you have configured
• Process billing and subscriptions
• Respond to support requests
• Comply with legal obligations
• Detect and prevent fraud or misuse

We do not sell your personal information or your buyers' information to third parties. We do not use buyer data for advertising or AI model training.

BuyerPocket is a tool for real estate agents to manage their own client relationships. The buyer records you enter are your responsibility. You must:

• Have a lawful basis to collect and store your buyers' personal information
• Comply with the Privacy Act and any applicable state legislation
• Obtain consent where required before contacting buyers
• Not enter information about individuals without their knowledge where consent is required

We process buyer records on your behalf as a data processor. Our data processing agreement is incorporated into our Terms of Service.

We share information with:

• Supabase: Database and authentication hosting (servers located in Australia — ap-southeast-2)
• Stripe: Payment processing
• Resend: Transactional email delivery
• Firebase (Google): Push notification delivery
• Vercel: Web hosting and CDN
• PostHog: Product analytics (anonymised)

We require all service providers to protect personal information in accordance with Australian privacy law. We will disclose information if required by law, court order, or to protect the safety of individuals.

Your data is stored in Supabase's Sydney region (AWS ap-southeast-2). We implement row-level security so each user can only access their own data. All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

Despite our precautions, no internet transmission is 100% secure. You are responsible for maintaining the security of your account credentials.

We retain your account data for as long as your account is active. If you delete your account, your data is retained for 30 days (to allow recovery) then permanently deleted. You may email hello@consultingcadets.com within 30 days to cancel a deletion request.

Billing records may be retained for up to 7 years to meet our legal obligations under Australian tax law.

Under the Privacy Act, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Ask us to correct inaccurate information
• Deletion: Request deletion of your account and data via Settings → Your data
• Portability: Export your buyer data as CSV at any time from Settings
• Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

To exercise any right, email hello@consultingcadets.com. We will respond within 30 days.

BuyerPocket uses cookies and similar technologies for authentication (Supabase session cookies) and analytics (PostHog). We do not use advertising cookies or cross-site tracking.

BuyerPocket is not directed at children under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact hello@consultingcadets.com.

We may update this policy from time to time. Material changes will be notified by email or in-app notice at least 14 days before they take effect. Continued use of BuyerPocket after the effective date constitutes acceptance.

Privacy enquiries: hello@consultingcadets.com

Consulting Cadets Pty Ltd (ABN 73 683 393 508)
Australia