Privacy Policy

Effective: 1 July 2026 | Affinity Property Buyers Pty Ltd

1. Who we are

Affinity Property Buyers Pty Ltd ("we", "us", "our") operates APB OS, a property investment and development operating system for Australian property professionals ("Service"). We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What information we collect

Account data – name, email address, hashed password, role, and company name provided at signup or by invitation.
Usage data – pages visited, features used, timestamps, and IP address for security and rate-limiting.
Property and financial data – property details, cashflow figures, borrowing capacity inputs, and portfolio information that you or your team enter into the Service.
Communications – emails you send us and feedback submitted via the in-app Help Centre.

We do not collect sensitive information (as defined by the Privacy Act) unless you voluntarily provide it.

3. How we use your information

To provide, operate and improve the Service.
To send transactional emails (invitations, password resets, welcome messages) where SMTP is configured.
To detect and prevent fraud, abuse, and security incidents.
To comply with our legal obligations under Australian law.

We do not sell, rent, or trade your personal information to third parties.

4. Data storage and security

Data is stored on servers located in Australia or the United States (Render.com infrastructure). We use TLS in transit, bcrypt password hashing, HTTP security headers, and server-side session management. No system is 100% secure; we encourage you to use a strong unique password.

5. Cookies

We use a single session cookie (connect.sid) strictly necessary for authentication. We do not use advertising cookies or third-party tracking cookies. You can block cookies in your browser but the Service will not function without the session cookie.

6. Third-party services

We use Render.com for hosting. When email is enabled we may use an SMTP relay (e.g. Postmark or SendGrid). These providers process data under their own privacy policies. We do not share your data with any other third parties.

7. Access, correction and deletion

You may access and update your account information via My Account in the app. To request deletion of your data or a copy of the information we hold, contact us at support@affinitypropertybuyers.com.au. We will respond within 30 days as required by the Privacy Act.

8. Complaints

If you believe we have breached an APP, please contact us at support@affinitypropertybuyers.com.au in the first instance. If not resolved, you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

9. Changes to this policy

We may update this policy from time to time. We will post the new version at https://apb-os.onrender.com/privacy and update the effective date. Continued use after changes constitutes acceptance.

10. Contact

Affinity Property Buyers Pty Ltd
Email: support@affinitypropertybuyers.com.au