myPropIQ (“we”, “us”, “our”) is an independent property research service for Australian investors, operated by JM2T Consulting, an Australian sole-trader business. The service is delivered via mypropiq.com.au and the myPropIQ mobile apps. This policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it. It is written to comply with the Australian Privacy Act 1988, the GDPR (for any EU visitors), and the Apple App Store / Google Play disclosure requirements.
Who runs this service
myPropIQ is operated by JM2T Consulting (an Australian sole trader). Contact jawad@mypropiq.com.au for any privacy question or to exercise the rights below.
What we collect
- Account data — your email address and name (provided at sign-up or via OAuth with Google or Apple).
- Profile data — optional phone number, avatar, subscription plan and report quota counters.
- Usage data — the suburbs and addresses you research, the comparisons you run, the calculator inputs you enter. We store report history so you can come back to past reports.
- Device + log data — IP address, browser/app version, error logs. Used for service reliability, fraud prevention and abuse mitigation.
- Payment data — handled by Stripe. We never see or store your card number; we receive only the last 4 digits and the subscription status.
- Approximate location (mobile app) — only when you grant the system prompt and only to centre maps on your area. We do not track your background location.
- Cookies — strictly necessary cookies for authentication. We do not run third-party advertising cookies.
We do not collect sensitive personal information (health, racial origin, sexual preference, etc.) and have no need for it.
How we use your data
- To provide the core service — generate reports, run comparisons, surface suburb data.
- To send transactional emails (sign-up confirmation, password reset, payment receipts) and, if you opt in, our weekly investor newsletter.
- To enforce quotas, prevent abuse and detect fraud.
- To improve the platform — aggregated, de-identified usage statistics inform what we build next. We do not use your data to train any third-party AI model.
We do not use your personal data for advertising or sell it to data brokers.
Who we share it with
- Supabase (data hosting, authentication) — production database is hosted in Australia (ap-southeast-1).
- Vercel (application hosting + edge functions) — request logs only, no PII stored long-term.
- Stripe (payments) — handles card processing under PCI-DSS.
- Anthropic (Claude API) — short-lived prompts for AI report summaries and the weekly newsletter. Inputs are not retained by Anthropic for training.
- Resend (transactional email).
- HTAG, ABS, Valuer General, Infrastructure Australia, OpenStreetMap, Google Places — read-only data sources that power reports. We send only the suburb/address being researched, never your account identity.
We choose vendors with strong privacy practices and do not share more data with them than is necessary for the service.
Retention
We keep your account data for as long as you have an active account. Report history and comparisons are retained so you can come back to them. If you delete your account (see below) we permanently remove your data from our production database at the end of any paid period. Backups roll off within 30 days. Anonymised aggregate statistics may be retained indefinitely.
Your rights — including account deletion
You have the right to:
- Access the personal data we hold about you — email jawad@mypropiq.com.au and we will provide a copy within 30 days.
- Correct inaccurate data — update your profile from the Account page, or email us.
- Delete your account and associated data — open the Account page (or the Settings screen in the mobile app), scroll to Danger zone and tap Delete my account. If you have an active subscription your access continues until the end of your current paid period; we then permanently delete the account. You can cancel a pending deletion any time before that date.
- Object or restrict processing — email us and we will action it within 30 days.
- Lodge a complaint — with the Office of the Australian Information Commissioner, or, for EU residents, your local data-protection authority.
Children
The service is intended for users aged 18 and over (consistent with Australian property investment laws). We do not knowingly collect data from anyone under 13. If you believe a minor has used the service please contact us so we can remove the account.
Security
All traffic is TLS-encrypted. Passwords are hashed by Supabase Auth. Database access is restricted via Row-Level Security policies; staff access is logged. Payments are PCI-DSS compliant via Stripe. We will notify affected users within 72 hours of any confirmed data breach involving personal information.
International transfers
Production data is stored in Australia (ap-southeast-1). A small number of vendors (Stripe, Anthropic, Resend, Vercel edge) may process data in the United States. All such vendors operate under their own equivalent privacy and security standards.
Changes to this policy
If we make a material change to how we handle personal information we will notify users via email and update the “last updated” date at the top of this page. Continued use of the service after the change indicates acceptance.
Contact
Privacy queries, access requests, deletion requests, complaints: jawad@mypropiq.com.au.