Privacy Policy

Insitive, operated by Applied AI Pty Ltd (ABN 90 668 168 830) ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our property intelligence platform and services.

We comply with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), and where applicable, the General Data Protection Regulation (GDPR) for European users.

Personal Information

We collect information that you provide directly to us, including:

• Name, email address, and contact details
• Account credentials (username and password)
• Billing and payment information
• Property search history and saved searches
• Communication preferences
• Professional information (if you're a real estate professional)

Automatically Collected Information

When you use our platform, we automatically collect:

• Device information (browser type, operating system, IP address)
• Usage data (pages viewed, features used, time spent)
• Location data (if you enable location services)
• Cookies and similar tracking technologies
• Log data and analytics information

Documents and Plans You Upload

Where our services let you send us a document — most commonly an architectural, floor or site plan submitted for a design rating — we collect and store the following. Document upload is being released in stages, so this category describes what we will hold once upload is available to you, not something we already hold.

• the file itself, and its filename, format, size and upload time
• any personal information that appears on the drawing — for example a client or owner name, a site address, or the designer's or draftsperson's name and contact details in the title block
• data we derive from the drawing, such as room and window dimensions, layout and orientation, and the rating and supporting evidence computed from them

We use an uploaded document only to produce, deliver and support the result you asked for. It is read by a third-party AI model (see section 9), it is not added to any catalogue or dataset we publish or licence, and it is not used to train or benchmark our models or methodology. If the drawing names someone other than you, you should be satisfied you may give it to us before you upload it. What you may upload, what we may do with it, and how you delete it are set out in section 4 of our Terms of Service.

Third-Party Information

We may receive information from third-party sources, including:

• Public property records and cadastral data
• Social media platforms (if you connect your account)
• Analytics providers and marketing partners
• Payment processors

We use your information to:

• Provide, maintain, and improve our services
• Process your transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and customer service requests
• Personalize your experience and provide tailored content
• Analyse a document or plan you upload in order to produce the rating or analysis you requested from it
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations and enforce our terms
• Send marketing communications (with your consent)

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We share information with third-party vendors who perform services on our behalf, including:

• Payment processing and fraud detection
• Cloud hosting and data storage
• Analytics and performance monitoring
• Email delivery and communication services
• Customer support tools

Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, regulatory requirements).

Business Transfers

If we're involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and monitoring
• Employee training on data protection
• Incident response and breach notification procedures

Under Australian Privacy Principles and GDPR (where applicable), you have the following rights:

• Access (APP 12): Request access to your personal information
• Correction (APP 13): Request correction of inaccurate information
• Deletion: Request deletion of your information
• Objection: Object to processing of your information
• Portability: Request a copy of your data in a portable format
• Withdrawal of Consent: Withdraw consent for specific processing activities
• Lodge a Complaint: File a complaint with the Office of the Australian Information Commissioner (OAIC)

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal, accounting, or regulatory requirements
• Resolve disputes and enforce our agreements
• Maintain business records for legitimate purposes

When we no longer need your information, we will securely delete or anonymize it.

Documents and Plans You Upload

We keep an uploaded document, and the data we derive from it, for as long as your account is open and you have not deleted it. We do not keep it on any longer schedule of our own. You can delete it at any time from your account, or by emailing admin@insitive.com.au while a delete control is not yet shown to you; it is also deleted when you close your account, and we action a deletion request sent to admin@insitive.com.au or made through the Data Management Portal within 30 days. Deleted files may remain in encrypted backups for up to 90 days on a rolling cycle, and the AI provider that read the document retains it for the bounded abuse-monitoring period its commercial terms allow.

We use cookies and similar tracking technologies to collect information and improve our services. For detailed information, please see our Cookie Policy.

Your information may be transferred to and processed in countries other than Australia. In accordance with Australian Privacy Principle 8 (APP 8), we disclose the following cross-border data transfers. We do not make unsupported claims about permanent storage locations, as data may move between regions for processing, backup, or delivery purposes.

We take the following steps to protect your information when it is transferred overseas:

• Selecting reputable providers with published security practices
• Entering into data processing agreements with providers where available and applicable
• Requiring encryption of data in transit (TLS) and at rest
• Limiting the personal data shared with each provider to what is necessary
• Regularly reviewing provider compliance and security posture

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:

Office of the Australian Information Commissioner (OAIC):
If you believe we have not adequately addressed your privacy concerns, you may lodge a complaint with the OAIC at www.oaic.gov.au