Privacy Policy

Pickets Property Search Companion (Pickets, we, us, our) is operated by Harrison Grant Balding as a sole trader (ABN 77 351 820 901).

We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains:

• what personal information we collect
• how we use, store, and protect it
• who we share it with
• your rights under Australian privacy law

By creating an account or using Pickets, you agree to the handling of your information as described in this policy.

Account information

• First name (required)
• Email address
• Authentication method (email and password)

Inspection data

When you complete an inspection, we collect:

• property address
• optional nickname for the property
• your answers to inspection questions
• your gut-feel score
• your objective score
• your free-text notes
• the AI-generated summary created from your responses

Inspection photos (future feature)

If you upload photos in a future version of Pickets, they will be stored in Australia using encrypted cloud storage. Photos will not be shared with third parties, will not be used to train AI models, and will be deleted when you delete your account or the associated inspection.

Payment information

We collect:

• product purchased
• amount paid
• date of purchase

We do not store credit card numbers or bank details. All payments are processed securely by Stripe.

We use your information to:

• create and manage your account
• provide the inspection tool and generate summaries
• process payments and send transactional emails
• maintain security, prevent misuse, and debug issues
• improve Pickets using aggregated analytics
• comply with legal and tax obligations
• improve inspection scoring models and question sets using anonymised, aggregated inspection data — this data cannot be traced back to any individual user or property

We do not use your personal information for direct marketing unless you explicitly opt in.

Pickets is provided for personal, non-commercial use only. We do not use your personal information to facilitate commercial property assessment services or any revenue-generating activity by third parties without your explicit consent.

When you complete an inspection, your responses are sent to Anthropic, Inc. via their API to generate a plain-English summary.

Information sent includes:

• property type
• your inspection responses
• gut-feel score
• free-text notes

We do not send your name, email, or account details.

AI data handling

Anthropic retains API inputs and outputs for up to 30 days for abuse monitoring and compliance purposes, after which they are automatically deleted. Anthropic does not use API data for model training. For more information see anthropic.com/privacy.

The generated summary is stored once in our database and is not regenerated.

All user data is stored in Australia using Supabase (Sydney region).

We use:

• row-level security (you can only access your own data)
• encryption in transit (HTTPS/TLS)
• encryption at rest
• access controls and audit logging
• regular backups stored securely

While we take reasonable steps to protect your information, no method of electronic storage is completely secure.

Backups

Deleted accounts and inspection data may remain in encrypted backups for up to 90 days before being permanently removed.

All personal information and inspection data collected by Pickets is stored in Australia (Supabase, Sydney region ap-southeast-2).

The only circumstances in which your data is processed outside Australia are:

• AI summary generation — your inspection responses are sent to Anthropic in the United States to generate your property summary. Your name and email address are never included in this transmission.
• Payment processing — transaction data is processed by Stripe globally.
• Anonymised analytics — pseudonymised usage data is processed by PostHog in the European Union.

In all cases, data transferred overseas is subject to the protections described in Section 6.

Some of our service providers store or process data outside Australia:

• Anthropic (USA) — AI summary generation
• Stripe (global) — payment processing
• PostHog (EU/USA) — pseudonymised analytics
• Supabase sub-processors (AWS) — infrastructure hosting

We take reasonable steps to ensure these providers handle your information in accordance with the APPs. However, overseas providers may not be subject to Australian privacy law.

We do not sell, rent, or trade your personal information.

We share information only with the following service providers, and only as needed to operate Pickets:

We will never share your inspection data, property addresses, or personal information with real estate agents, vendors, property managers, or any party with a commercial interest in the properties you inspect.

Access

You may request a copy of the personal information we hold about you. We will acknowledge your request within 5 business days and respond in full within 30 days as required under the Privacy Act 1988 (Cth).

Correction

You may request corrections to inaccurate or incomplete information.

Deletion

You may delete your account at any time from the Account screen. On deletion:

• personal information is removed from active systems
• encrypted backups are purged within 90 days
• anonymised analytics may be retained

Data export

You may request an export of your inspection data.

Complaints

If you believe we have breached the APPs, contact us at harry@pickets.app. We will acknowledge your complaint within 5 business days and respond substantively within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

If a data breach is likely to result in serious harm to any affected individual, we will:

• notify affected users within 72 hours of becoming aware of the breach
• notify the Office of the Australian Information Commissioner (OAIC)
• take immediate steps to contain the breach and minimise harm
• provide affected users with clear information about what data was involved and what steps they should take

This is required under the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

We retain your personal information while your account is active.

If you delete your account:

• personal data is removed from active systems immediately
• backups are purged within 90 days
• anonymised, aggregated analytics may be retained
• payment records are retained for 7 years for tax compliance

De-identified inspection data

When you delete your account, your personal information is removed from active systems. However, de-identified and anonymised inspection data — from which you cannot be identified — may be retained indefinitely for statistical analysis, scoring model improvement, and product research. This data has no connection to your identity and cannot be used to identify you or the properties you inspected.

Pickets uses:

• essential cookies
• local storage for login sessions
• no advertising cookies
• no third-party tracking cookies

Analytics are handled server-side and do not rely on ad-tech infrastructure.

Pickets is not intended for persons under 18. If you believe a minor has created an account, contact us and we will delete it.

We may update this Privacy Policy from time to time. For material changes, we will notify you by email before the changes take effect.

Your continued use of Pickets after updates constitutes acceptance of the revised policy.

Harrison Grant Balding

Trading as Pickets Property Search Companion

ABN 77 351 820 901

Email: harry@pickets.app

Website: pickets.app