Privacy Policy

REA Hub Pty Ltd ("REA Hub", "we", "us", or "our") is committed to protecting the privacy of our customers and their team members. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our compliance management platform and website (together, the "Service").

This policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Service you consent to the practices described in this policy.

REA Hub is a compliance management facilitation tool. The Service provides record-keeping, checklist tracking, and document management features to assist real estate agencies in organising their compliance activities.

REA Hub does not provide legal advice, compliance advice, or guarantee that use of the platform will result in compliance with any legislation. The accuracy and completeness of all data entered into the platform is entirely the responsibility of the user. REA Hub does not verify, audit, or certify any information entered by users.

We collect information you provide directly when you:

• Create an account (name, email address, phone number, ABN)

• Add team members (name, email, licence class, CPD records)

• Enter trust account data, property records, or policy documents

• Submit an enquiry through our contact form (name, email, mobile, state, message)

• Contact us for support

We also collect certain information automatically when you use the Service, including IP address, browser type, device identifiers, pages visited, and actions taken within the platform. This is used solely for security, performance monitoring, and product improvement.

We use the information we collect to:

• Provide, operate, and maintain the Service

• Send compliance deadline reminders and alerts to authorised users

• Generate audit exports and compliance reports on your behalf

• Respond to support requests, enquiries, and contact form submissions

• Improve the platform and develop new features

• Comply with our own legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

All data is stored in Australia using Supabase infrastructure hosted on AWS ap-southeast-2 (Sydney). Data is encrypted at rest (AES-256) and in transit (TLS 1.3).

Access to your organisation's data is restricted to team members you authorise. REA Hub staff access is logged and limited to support and security purposes. We conduct regular security reviews and maintain appropriate technical and organisational measures to protect your data.

We may share your information only in the following circumstances:

• With service providers who assist us in operating the platform (Supabase, Vercel, Stripe) under strict data processing agreements

• When required by law, court order, or a government authority with lawful jurisdiction

• To protect the rights, property, or safety of REA Hub, our customers, or others

• In connection with a merger, acquisition, or sale of assets, with advance notice to affected customers

We do not share compliance records, staff data, or property information with any third party for commercial purposes.

Under the Australian Privacy Principles you have the right to:

• Access the personal information we hold about you

• Request correction of inaccurate or incomplete information

• Request deletion of your personal information (subject to legal retention obligations)

• Opt out of non-essential communications

• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au

To exercise any of these rights, contact us at privacy@reahub.com.au.

We retain your data for as long as your subscription is active. If you cancel, your data is retained for 90 days to allow export, then permanently deleted. Certain records may be retained longer where required by law (e.g. financial records under the Corporations Act 2001).

Enquiries submitted via our contact form are retained for a reasonable period to allow us to respond and for internal records purposes.

We use essential session cookies required to authenticate users and maintain security. For details on all cookies used, see our Cookie Policy.

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the updated policy with a revised effective date. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact:

REA Hub Pty Ltd

privacy@reahub.com.au

Sydney, NSW, Australia