Privacy Policy

Effective date: 23 May 2026

This Privacy Policy explains how buyerlab, a brand of LS Property Trading Pty Ltd (nextprop au) ("we", "us", "our"), ABN 79 682 707 017, collects, uses, stores, and protects your personal information when you use our website and services. We are committed to handling your personal information responsibly and in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By creating an account or using the buyerlab platform, you consent to the collection and use of your information as described in this policy.

1. Who We Are

buyerlab is a property intelligence service operated by LS Property Trading Pty Ltd (nextprop au), a licensed buyer's agent based in Australia. If you have any questions or concerns about how we handle your personal information, please contact us at luke@nextprop.au.

2. Information We Collect

We collect personal information that is reasonably necessary to provide our services. The categories of information we collect include:

• Account information: your name and email address when you create a buyerlab account
• Property information: the property address, price guide, inspection details, and any other information you submit via the report intake form
• Payment information: payment is processed securely by Stripe - we do not receive or store your full card number, CVV, or bank account details
• Usage data: pages visited, features used, report credits purchased and consumed, and interactions with the dashboard (collected via analytics tools)
• Device and technical data: browser type, operating system, IP address, and similar technical identifiers collected automatically when you access our platform
• Communications: any messages, emails, or support requests you send to us, and our responses
• Glen AI chat data: messages you submit to our Glen AI assistant on the landing page or within the dashboard. These messages may be processed by Anthropic's Claude AI API.

We only collect information that is necessary for the purposes described in this policy. We will not collect sensitive personal information (such as health information, financial account details, or government identifiers) beyond what is strictly required.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create, verify, and manage your buyerlab account
• To process your payment and allocate report credits to your account
• To prepare and deliver your property intelligence report
• To send transactional emails, including order confirmation, report delivery notifications, and account-related communications
• To respond to your support requests or enquiries
• To improve and develop our platform, reports, and services
• To monitor and prevent fraud, abuse, or violations of our Terms of Service
• To comply with our legal obligations under applicable Australian law

We do not use your personal information for direct marketing purposes without your explicit consent. We will never sell your personal information to third parties.

4. Disclosure of Your Information

We do not sell, rent, or trade your personal information. We may share your information with third parties only in the following circumstances:

• Service providers: We share information with third-party service providers who assist us in operating the platform (see Section 5 below). These providers are bound by confidentiality obligations and are not permitted to use your information for their own purposes.
• Legal requirements: We may disclose your information where required by law, court order, or government authority, or where we reasonably believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred to the acquiring entity, subject to equivalent privacy protections.

5. Third-Party Services

We use the following third-party services to operate the buyerlab platform. Each provider is subject to their own privacy policies:

• Stripe - payment processing. Your payment card details are handled directly by Stripe and are subject to Stripe's Privacy Policy. We receive only a payment confirmation token, not your card details.
• Google Firebase - user authentication and database storage. Subject to Google's Privacy Policy. Your account data and order history are stored in Firebase Firestore.
• Resend - transactional email delivery. We use Resend to send you order confirmation and report delivery emails. Your email address is shared with Resend for this purpose.
• Anthropic (Claude AI) - powers Glen, our AI chat assistant on the landing page and within the dashboard. Messages you submit to Glen may be processed by Anthropic's API. Please refer to Anthropic's Privacy Policy. We recommend not submitting sensitive personal information through the Glen chat.
• Advanced institutional-grade data platforms - property data sourced from leading institutional data providers is used to prepare your report. The property address you submit in your intake form may be queried against these platforms as part of report preparation.

6. Cookies and Local Storage

Our platform uses cookies and browser local storage to support the following functions:

• Authentication: to keep you logged in to your account across sessions
• Session management: to maintain your session state while using the dashboard
• Analytics: to understand how users interact with the platform so we can improve it

We do not use third-party advertising cookies or tracking pixels. We do not participate in cross-site behavioural advertising networks. If you disable cookies in your browser, some parts of the platform (including account login) may not function correctly.

7. Data Storage and Security

Your data is stored on Google Firebase infrastructure, which operates on Google Cloud servers. We take the following steps to protect your personal information:

• All data in transit is encrypted using HTTPS/TLS
• Firestore database access is protected by Firebase security rules requiring authenticated access
• Payment data is never stored on our own servers - it is handled exclusively by Stripe
• Access to the admin dashboard and production systems is restricted to authorised personnel only

Despite these measures, no system is completely secure. We cannot guarantee the absolute security of information transmitted to or stored on our platform. If you become aware of any security vulnerability or suspected data breach, please notify us immediately at luke@nextprop.au.

8. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide our services and meet our legal obligations. Specifically:

• Account data (name, email) is retained while your account is active and for a reasonable period after closure for legal and audit purposes
• Order and report data is retained indefinitely so you can access your past reports at any time
• Payment records are retained for a minimum of 7 years as required under Australian taxation law
• Support communications are retained for up to 2 years

You may request deletion of your personal data at any time (see Section 9 below). Note that we may retain certain records where required by law, even after a deletion request.

9. Your Rights

Under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: ask us to correct any personal information that is inaccurate, incomplete, or out of date
• Deletion: request that we delete your account and associated personal data, subject to any legal retention obligations
• Portability: request that we provide your data in a commonly used format where technically feasible
• Complaint: lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au if you believe we have mishandled your personal information

To exercise any of these rights, contact us at luke@nextprop.au. We will respond to your request within 30 days. We may need to verify your identity before processing certain requests.

10. Children's Privacy

The buyerlab platform is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it.

11. Links to Other Websites

Our platform may contain links to third-party websites (for example, Stripe or Firebase). Once you leave the buyerlab platform, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices of those sites.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or for other operational reasons. The effective date at the top of this page will always reflect the most recent version. We encourage you to review this policy periodically. Your continued use of the platform after any update constitutes your acceptance of the revised policy.

13. Contact

For any privacy-related questions, access requests, or complaints, contact us at luke@nextprop.au. We take all privacy concerns seriously and will respond within 2 business days.