Privacy Policy

Collection & use of your information

We collect the information you give us directly — your email address, and the property details you choose to enter (addresses, purchase price, current valuation, rent, loan balance, and related notes). From those figures, the app computes derived values like equity, loan-to-value ratio, and rental yield.

If you add a contact for a property — for example a property manager, real estate agent, or other person associated with that property — we also store the name, role, and email address and/or phone number you provide for them. This helps you manage your property team and communicate with those contacts from within the app. These contacts are not Property Command users or account holders, and this policy does not apply to them the way it applies to you.

This data is used strictly to provide the app’s functionality to you: displaying your portfolio, running the calculations you see on screen, and letting you use Georgia, our AI assistant (parts of which need your separate opt-in consent — see “Georgia and AI processing” below). We do not sell your personal or financial information, and we do not use it for advertising.

Marketing emails

At signup you can opt in to product updates, property insights, and news. That box is unticked by default and entirely optional — your account works exactly the same either way, and we do not treat creating an account as agreement to receive marketing.

If you opt in, we record that you did, when, and which version of these documents was current at the time. Every marketing email we send identifies us as the sender and carries a working unsubscribe link, as the Spam Act 2003 requires. You can also withdraw consent at any time in the app, and we stop sending. Withdrawing does not affect service emails you still need — a password reset, a confirmation you asked us to send, or a billing notice.

Payments and subscriptions

Subscriptions are purchased and billed through the Apple App Store or Google Play, not by us directly. We never receive or store your card or payment details — those are handled entirely by Apple or Google under their own privacy policies.

What we do store is your subscription state: which plan your account is on, whether it is currently active, and the identifier the store gives us for the purchase, so the app knows what your account is entitled to. Refunds and cancellations are handled by the store — see “Subscriptions, billing and refunds” in the Terms of Service.

Storage & security

Your data is encrypted in transit (TLS) and at rest, consistent with the security practices of our infrastructure provider. We use the following categories of third-party infrastructure and processors to run the app:

• Database, authentication & file storage — Supabase (hosted Postgres database, login, and photo storage).
• Transactional email — Resend (sends account emails such as password resets and email confirmations).
• AI features (opt-in only)— Georgia can answer many questions directly from your Property Command data without this. When a request genuinely needs external AI processing and you’ve enabled AI data processing in Settings, relevant information is sent to a third-party AI model provider (e.g. OpenRouter, OpenAI, or Anthropic, depending on configuration) — see “Georgia and AI processing” below for what that includes. Never used to train their models.
• App delivery & push notifications — Expo/EAS (builds and delivers the app, and delivers push notifications if you enable them).
• Crash reporting — Sentry (receives a report when the app crashes or hits an error: the error itself, where in the app it happened, your device type and OS version, and your account identifier so we can tell how many people a fault affects). We do not send your property data, addresses or figures in these reports.
• Product analytics— PostHog (records which features you use and when — for example that a property was created, or which screen you opened — tied to your account identifier, so we can understand how the app is used and find problems). Events carry identifiers and counts, not content: a property’s internal ID, never its address, its financial figures, or your contacts.

Georgia and AI processing

Georgia is the AI assistant built into Property Command. Many of Georgia’s answers — checking a stored figure, a definition, or your rent confirmation status, for example — are generated directly from your Property Command data and don’t require AI data processing to be turned on. When a request genuinely needs external AI processing instead (only available if you’ve turned on AI data processing in Settings), the app sends a third-party AI model provider (e.g. OpenRouter, OpenAI, or Anthropic, depending on configuration) what’s relevant to your specific request — which may include:

• the message you send to Georgia;
• information retrieved from your Property Command data that’s relevant to answering it, such as figures for the property or portfolio in question.

Property Command is designed to send only what’s relevant to the specific request, not your whole portfolio or your entire contact list. We don’t guarantee that no other data could ever be included, and we don’t claim this information is anonymised or redacted before sending it — treat anything you or Property Command sends to an AI provider as processed in the same way any other data you enter is.

Not every question you ask Georgia is sent to an AI provider. Where Property Command can answer directly from data already in your account — for example, checking whether a rent confirmation has actually been received — the app retrieves and reports that from Property Command’s own records rather than asking an AI model. Georgia does not independently determine or invent facts like this; she reports what’s on record and can help you act on it, but she doesn’t decide it.

• Data Usage: Your inputs are processed in real-time solely to deliver app functionality. Your data is NOT used to train public AI models.
• Opt-Out: Consent to process data via AI tools is optional. You can enable or disable AI features at any time in your Account Settings.

Your privacy rights

This policy is intended to meet our obligations under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Consistent with APP 12 (access) and APP 13 (correction), you can request to:

• Access a copy of the personal and financial information we hold about you.
• Correct any information that is inaccurate, out of date, or incomplete.
• Deleteyour account and associated personal and financial data — including property contacts, confirmation requests, and recorded responses. You can do this yourself at any time, without contacting us: go to Settings, then “Delete my account”. Deletion is immediate and permanent, and removes your data except where we are required to retain it by law. You can also ask us to action a deletion request using the contact details below. See also Delete your account.

Note that deleting your account does not cancel an active subscription, because subscriptions are billed by the Apple App Store or Google Play rather than by us. Cancel in your store account settings first if you do not want to be billed again.

If you are in the EU, the UK, or Switzerland

The sections above describe what we do for every user. This section adds what the GDPR and UK GDPR require, and applies to you if you are in the European Economic Area, the United Kingdom, or Switzerland. Where anything here conflicts with the rest of this policy, this section governs for those users.

We are the data controller for the information described in this policy. Our contact details are at the end.

Why we are allowed to process your data (lawful bases). We rely on:

• Performance of a contract — to create and run your account, store the properties and figures you enter, and provide the features your subscription entitles you to. Without this we cannot provide the app.
• Your consent — for AI data processing by Georgia (off unless you turn it on in Settings) and for push notifications. You can withdraw either at any time in Settings, without affecting anything processed before you withdrew.
• Our legitimate interests — to keep the service secure, prevent abuse, fix faults, and understand which features are used (see PostHog above). We have considered your rights in doing so, and you can object at any time using the contact details below.

Your rights. In addition to the access, correction, and deletion rights described above, you have the right to: restrict processing; object to processing carried out on the basis of legitimate interests; receive the data you gave us in a portable, machine-readable form; withdraw consent where we rely on it; and not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. Georgia does not make decisions of that kind — she reports what is on record and proposes actions that you confirm.

International transfers.Property Command is operated from Australia, and our processors (listed under “Storage & security”) host and process data in Australia, the United States, and other countries. This means your data will be transferred outside the EEA, the UK, and Switzerland. Where we do so we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses (and the UK Addendum where relevant) with our processors, or a transfer to a country the European Commission has found to provide an adequate level of protection. You can ask us for details of the safeguards that apply.

How long we keep your data. We keep your account data for as long as your account exists. When you delete your account it is removed immediately and permanently, except where we are required to retain records by law (for example, tax records relating to a subscription).

Complaints. You can lodge a complaint with your local supervisory authority. We would appreciate the chance to address your concern first, using the contact details below.

Contact

To exercise any of the rights above, or with any privacy question or complaint, contact our privacy compliance contact at info@propertycommand.io. You can also reach us through the “Send feedback” option in the app. If you’re not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.