Privacy Policy
Last updated: 22 March 2026 · Version 1.1
Table of Contents
1. Overview
Propli AI, part of the A2E Group Pty Ltd (ABN 63 691 505 101) ("Propli", "we", "us", or "our") operates the website www.propli.ai and the Propli application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.
We are committed to complying with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where applicable, we also respect the principles of the EU General Data Protection Regulation (GDPR) and other international privacy frameworks.
By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Information You Provide
- Account information: name, email address, and authentication credentials when you register via email/password or Google OAuth.
- Payment information: billing details processed securely by Stripe. We do not store your full credit card number on our servers.
- Contract documents: PDF files you upload for review, including Contracts of Sale and rental/lease agreements.
- Chat and interaction data: follow-up questions you submit through the in-app chat feature.
- Support communications: information you provide when contacting us via email.
2.2 Information Collected Automatically
- Device and browser data: IP address, browser type, operating system, device identifiers, and referring URLs.
- Usage data: pages visited, features used, session duration, and interactions with the Service.
- Cookies and similar technologies: see Section 6 below.
2.3 Contract Content and Confidential Information
Documents uploaded to Propli may contain personal information and confidential information, including names, addresses, contact details, transaction details, rent and payment information, special conditions, and other information contained in contracts, disclosure statements, annexures or related documents.
We treat all uploaded contract content as confidential and use it only for the purposes described in this Privacy Policy, including document analysis, generation of review outputs, account administration, support, security, legal compliance, and service improvement.
Your responsibility for uploads: You must only upload documents where you have the legal right, authority, or consent to provide them to us for processing. This includes documents containing personal information about other individuals such as vendors, agents, tenants, landlords, or guarantors.
3. How We Use Your Information
We use your information for the following purposes:
- To provide, operate, and maintain the Service, including generating AI-powered contract reviews.
- To process payments and manage your account and subscription.
- To communicate with you, including sending service-related notices and responding to enquiries.
- To improve and personalise the Service, including analysing usage patterns.
- To detect, prevent, and address technical issues, fraud, or security concerns.
- To comply with legal obligations and enforce our Terms of Service.
4. AI Processing & Disclosure
Propli uses artificial intelligence provided by Anthropic (Claude API) to analyse your uploaded contract documents. When you submit a document for review:
- The extracted text from your PDF is sent to Anthropic's Claude API for processing.
- Anthropic processes this data in accordance with their own privacy policy and data processing terms.
- As of the date of this policy, Anthropic does not use API-submitted data to train its models. Refer to Anthropic's current policies for the most up-to-date information.
- The AI-generated review is stored in our database so you can access it later from your account dashboard.
Human access to uploaded content: Access to uploaded documents and AI outputs is restricted to authorised personnel who need that access for support, security, abuse prevention, troubleshooting, legal compliance, or operation of the Service.
Important: AI-generated analysis is provided for informational purposes only and does not constitute legal, financial, or professional advice. See our Disclaimer for full details.
5. Data Sharing & Third Parties
We do not sell your personal information to third parties. We share your data only in the following circumstances:
- Anthropic (Claude API): Contract text is sent for AI analysis as described in Section 4.
- Stripe: Payment and billing information is processed by Stripe in accordance with their privacy policy.
- Google (OAuth): If you sign in with Google, we receive your name and email address from Google. We do not access any other Google account data.
- Hosting and infrastructure: Our application and database are hosted on Vercel and Neon (PostgreSQL), which may process data as part of providing their services.
- Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.
5.2 Overseas Disclosure
Personal information is likely to be disclosed to service providers located in the following countries: Australia (database hosting via Neon), United States (AI processing via Anthropic, application hosting via Vercel, payment processing via Stripe, email delivery via Resend), and any other country in which our contracted service providers or their subprocessors operate.
7. Data Storage & Security
Your data is stored on servers operated by our hosting providers. Our database is hosted by Neon in Australia (ap-southeast-2 region). Our application is hosted by Vercel, with edge functions deployed globally but primary processing in the United States.
We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit using TLS/SSL.
- Secure authentication with hashed passwords and OAuth protocols.
- Access controls to limit who can access personal data within our organisation.
- Regular security reviews of our infrastructure and code.
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
8. Data Retention
Our general retention approach is:
- Account information: retained while your account remains active and for 90 days after account deletion.
- Uploaded documents and review outputs: retained while available in your account, and deleted within 90 days after account deletion or a valid deletion request.
- Review cache: cached review results are retained for up to 30 days.
- Support communications: retained for 2 years after the support matter closes.
- Payment and tax records: retained for 7 years as required by Australian tax law.
- Application logs and security records: retained for 12 months.
- Backups: may persist for up to 30 days before being overwritten.
9. Your Rights
Under the Australian Privacy Act 1988, you have the right to:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete personal information.
- Deletion: Request deletion of your personal information, subject to legal obligations requiring us to retain certain data.
- Complaint: Lodge a privacy complaint with us using the process below, or directly with the Office of the Australian Information Commissioner (OAIC).
To make a privacy request or complaint, contact us at privacy@propli.ai and include: your name and contact details; the nature of your request or complaint; and sufficient detail for us to identify the relevant account, document, or interaction.
9.2 Complaints Process
If you believe we have not handled your personal information in accordance with the Australian Privacy Principles, you can make a complaint by emailing privacy@propli.ai.
We will generally acknowledge privacy complaints within 5 business days and aim to respond substantively within 30 days, although more complex matters may take longer. If we need more time, we will let you know.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
10. International Users
If you access the Service from outside Australia, your personal information may be transferred to and processed in Australia and the United States, where we and our service providers operate.
Where applicable, we take reasonable steps to support lawful international transfers and to protect personal information handled by our service providers. If laws in your jurisdiction give you additional privacy rights, you may contact us at privacy@propli.ai to make a request, and we will handle it in accordance with applicable law.
11. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Company: Propli AI, part of the A2E Group Pty Ltd (ABN 63 691 505 101)
- Privacy enquiries: privacy@propli.ai
- General support: support@propli.ai
- Website: www.propli.ai