1. What we collect
- The address you query. Typing an address into the search box sends it to our server so we can look it up in government registers. A property address on its own is public information; we treat it carefully anyway.
- The email you give at checkout. Stripe collects it during payment; we read it from Stripe to send your report link and any refund notice. We never see your card details.
- A report record. For each paid report we keep a log row: the address, the state, which pre-release checks passed, refund status, and a compressed copy of the report data as generated. This is our evidence of exactly what you were shown, and it backs the correction promise in our Terms.
- An email address, only if you ask us to send you a free result. The free check works without it. If you use the optional box under your flag counts, we store that address alongside the address you checked and the counts, so we can send you that result and one reminder the next morning. If you arrived through a link with a referral tag, we store the tag too, so we know which channel brought you.
We collect nothing else: no account, no tracking pixels of our own, and no marketing list. The optional email above is used for that one result and one reminder, nothing further, and both emails carry an unsubscribe link.
2. Who processes it
Delivering the service involves a small set of providers, each seeing only what its job requires:
- Stripe processes payment and holds your email and receipt.
- Resend delivers our transactional emails (report link, refund notice).
- Supabase stores the report record described above.
- Anthropic receives the generated report data (not your email) to write the plain-English summary.
- Vercel hosts the site and keeps standard server logs.
The report itself is built from queries to Australian government data services; those queries contain the property coordinates and address, never your identity.
3. How long we keep it
- The compressed report snapshot is deleted automatically after 90 days. That window covers the correction and dispute process in our Terms.
- The remaining log row (address, checks passed, refund status) is kept for bookkeeping and dispute history.
- If you asked us to email you a free result, that row (your address, the property you checked and the counts) is deleted automatically after 30 days.
- If you unsubscribe, we keep your email address on a do-not-email list and nothing else. That list is permanent on purpose. It is the only way we can be sure we never email you again, and it is not used for anything but blocking.
- Payment records live with Stripe under their retention rules.
4. Your choices
Email hello@propertyflags.com.au to ask what we hold that is linked to your purchase, or to ask us to delete the report snapshot earlier than the 90-day window. Include your Stripe receipt so we can find the record.
To stop the free result emails, use the unsubscribe link in either email. It works in one click and takes effect immediately. You can also email us and we will do it for you.
We do not sell personal information, and we do not use your queries or reports to build marketing profiles.