Legal

Privacy policy

Last updated 21 October 2026
Draft wording, pending legal review.

This policy explains how [legal entity name, ABN to be added] ("WIBI", "we", "us") handles personal information. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

In short: we collect what we need to produce your report, we keep your documents private to your account, we don't sell personal information, and you can ask us to delete it.

What we collect

  • Addresses you search and the property details we look up for them.
  • Your email address, if you give it to us to save your report, sign in, or join our waitlist (with how you heard about us, if the link you used says).
  • Documents you upload and the text we read from them. These often include other people's personal information, such as owners' or vendors' names, which we collect only because it's in the document.
  • Technical information, such as your browser type, IP address and the pages you use, for security and to keep the service running.
  • Payment details, if you buy a report. These are handled by our payment provider; we don't store full card numbers.

How we use it

  • to produce your report and keep it, and your documents, available to you;
  • to run your account and contact you about your report;
  • to improve accuracy, using general lessons that never contain your documents or personal information;
  • to build anonymous building statistics: figures read from strata documents, such as a building's age, number of lots, fund balances and levies (with the date of each figure), are kept without names, contact details or the documents themselves, and are only ever shown as typical ranges across many buildings, never as another building's figures;
  • to keep WIBI secure and prevent misuse, and to meet our legal obligations;
  • if you joined our waitlist or agreed to hear from us, to send you launch news and occasional property tips and offers. Every email has an unsubscribe link;
  • to advertise WIBI: we may show WIBI ads to people who visited our website, and we may give advertising platforms (such as Meta and Google) a scrambled (hashed) copy of your email address so they can show you WIBI ads, or stop showing them once you've signed up. You can opt out at any time by emailing us.

We don't sell personal information. We never share your documents, your reports or the addresses you check with advertisers, and we don't use your documents to train AI models.

Who we share it with

We use service providers to run WIBI. They process information on our behalf and only for that purpose:

  • Hosting and storage: our database, file storage and website hosting providers (currently Supabase and Vercel), and a private backup copy of uploaded documents in Google Cloud Storage in Sydney.
  • AI document reading: documents you upload are read and checked by AI services from Google and Anthropic, which may process them in the United States. We use their business services, not consumer chat products. If we add another AI provider, we'll name it here before your documents are sent to it.
  • Maps and places: the property address or its location is sent to Google Maps Platform to find the address, nearby places and walking times.
  • Public records: the property location is sent to NSW Government map and data services. Your documents are never sent to them.
  • Payments and email: our payment and email providers, when you pay or we email you.
  • Advertising: Meta and Google, through the advertising tags on our public pages and, if you're on our list, a hashed copy of your email address (see How we use it).
  • Website analytics: Google Analytics, which measures visits to our public pages (pages viewed, the device and browser used, and approximate location). It never runs on your reports or documents.

Mortgage broker introductions: only if you ask and tick the consent box, we share your name, contact details, the property address and the price you entered with the named broker, who handles them under their own privacy policy. We may receive a referral fee. You can withdraw consent for future sharing at any time.

Professional accounts: when a buyer's agent, solicitor, conveyancer or broker uploads documents for a client, they collected that information and are responsible for the client's consent. We process it on their instructions to produce the report.

Real estate agents' contact details: we keep a list of the business mobile numbers and email addresses that agents publish on their agencies' websites, so a buyer can message the selling agent from WIBI. We use it only to fill in the buyer's own message; we don't send messages to agents or use the list for marketing. An agent can ask us to remove their details at any time.

We may also disclose information where the law requires it.

Information processed overseas

Our database, file storage, document backups and website servers are set up to run in Sydney where the provider allows it. Our AI providers (Google and Anthropic) and Google Maps Platform services may process information in the United States and other countries where Google operates; email and analytics providers may do the same. We choose providers with strong security and contractual privacy commitments, and we limit what we send to what each step needs.

How we protect it

Information is encrypted in transit. Documents are kept in private storage that only your account (or your private guest session) can reach, and our server keys are never sent to your browser. No system is perfectly secure, so please tell us straight away if you think your account has been accessed without permission.

How long we keep it

We keep your reports and documents, and their backup copies, so you can come back to them, until you ask us to delete them. You can ask us to delete your documents, reports or account at any time by emailing us, and we'll do so, including the backup copies, within 30 days unless the law requires us to keep something. Anonymous building statistics contain no personal information, so they stay after your documents are deleted. Broker and other introduction requests are kept for 2 years; payment records are kept for 7 years because tax law requires it.

We don't use your documents to train AI, and we use our AI providers' business services, whose terms don't allow them to train their models on your documents. [Solicitor to confirm against the provider terms.]

Automated processing: WIBI uses computer programs to read documents and rank findings about properties. It doesn't make decisions about you, such as credit or eligibility decisions.

Access, correction and complaints

You can ask to see or correct the personal information we hold about you, or ask us to delete it, by emailing hello@wibi.com.au. We'll respond within 30 days.

If you have a privacy complaint, contact us first. We'll acknowledge it promptly and aim to resolve it within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Cookies and browser storage

We use browser storage for things WIBI needs to work, such as keeping you signed in and remembering where you were.

Our public pages may also use advertising tags from Meta (the Meta Pixel) and Google, which set cookies to measure our ads and to show WIBI ads to people who have visited. They're never used on your report or documents pages. You can block or delete these cookies in your browser, and adjust your ad settings with Meta and Google.

General information only, not legal, financial or building advice. See our Terms of use.