This Privacy Policy explains how Tender My Listing Pty Ltd (ACN 697 239 866, ABN 17 697 239 866) of 81–83 Campbell Street, Surry Hills NSW 2010 (Tender My Listing, we, us, our) collects, uses, discloses and protects your personal information when you use our website instantpropertyreports.com.au (Website) and related services, including the Property Report service and the Tender Service (together, the Services).

We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and any applicable state and territory privacy laws in Australia.

1. Who we are

Tender My Listing Pty Ltd operates the Website under the Instant Property Reports brand. We provide automated property reports to sellers in Australia, and a tender facility that lets sellers invite real estate agents to submit written tenders for the sale of their property.

Legal entity: Tender My Listing Pty Ltd
ACN: 697 239 866 · ABN: 17 697 239 866
Registered office: 81–83 Campbell Street, Surry Hills NSW 2010
Email: support@instantpropertyreports.com.au

2. Personal information we collect

What we collect depends on how you use the Services.

2.1 From sellers (consumers)

• Property address(es) you enter to generate a Report.
• Mobile number (verified by one-time code / SMS OTP) when you invite one or more agents to tender.
• Name and email address you provide at the point you invite agents, used to identify you as the vendor and contact you about the tender flow.
• Seller-question content (if you ask questions about selling through the Report).
• Your tender-related decisions (which agents you invited, which tender you accept).

2.2 From agents (real estate licensees)

• Name, email address and mobile number at registration.
• Agency/business name, agency URL, profile photo, logo, and public licensing/review information.
• Tender contents (commission, marketing spend, sale methods, time to market, strategy, and your acceptance of the Terms).
• Billing details required to issue Success Fee tax invoices under our Terms of Service (typically the agent's name, agency name, ABN, and billing email). We do not collect or store payment card details. Success Fees are paid by electronic funds transfer to the bank account shown on each invoice.

2.3 Collected automatically

• Usage data: pages visited, features used, search activity, session duration, referral source.
• Device/technical data: IP address, browser, operating system, device identifiers.
• Cookies and similar technologies (see section 8).
• Click and view events on tender invitation short links (/t/<code>) and agent-tender deep links.

2.4 From third parties

• Public real-estate listing data from portals (such as domain.com.au and realestate.com.au) used to identify agents operating in a suburb, and to detect when a tendered property appears for-sale (see section 6).
• Agency, agent and suburb-performance data from licensed property data providers.
• Analytics data from providers such as Google Analytics, Google Ads, and Meta (see section 8).

3. Why we collect and use personal information

• To deliver the Services, including generating Reports and running the tender flow end-to-end.
• To verify your identity by mobile OTP, create and manage your account, and secure the Services against fraud and abuse.
• To deliver an agent's tender to the inviting seller (and only that seller).
• To send transactional messages (SMS and/or email) about invitations, tenders, acceptances, reminders, and Success Fee invoices.
• To issue Success Fee invoices under our Terms of Service, including notifying you in advance and handling disputes.
• To improve and develop our models, algorithms and Services (typically in aggregated or de-identified form).
• To measure marketing performance, subject to your cookie preferences.
• To enforce our Terms, protect users, and comply with legal obligations.

4. What we share, and with whom

4.1 Between sellers and agents — the important bit

• Sellers inviting agents: invited agents do not see the seller's name, email address or mobile number. Agents only see the property address, the invitation, and the link to view the seller's Report in an agent context.
• Agents submitting tenders: tender contents are shown to the inviting seller only. Tenders are never shown to other agents or to anyone outside our organisation other than processors acting under contract (see section 4.2).
• When a seller accepts a tender: we release the winning agent's public contact mobile number to the seller so the seller can make contact directly. The seller's contact details remain private unless and until the seller chooses to contact the agent.

4.2 Third-party processors (contracted service providers)

We disclose limited personal information to the following categories of provider, solely so they can perform a function on our behalf and under contract:

• SMS delivery (e.g. Twilio, Inc. — United States) — for OTPs and tender-related notifications.
• Email delivery (e.g. Brevo / Sendinblue SAS — France) — for transactional and service emails.
• Accounting and invoicing (Xero Australia Pty Ltd — Australia) — we issue Success Fee tax invoices to agents through Xero. Xero stores and processes the agent's billing name, business name, ABN and email for the purpose of issuing and tracking the invoice.
• Online payment gateway (Pin Payments Pty Ltd — Australia) — if an agent chooses the “Pay Now” link inside a Xero invoice instead of paying by bank transfer, Pin Payments processes the card payment. Pin Payments handles the agent's payment card details directly under PCI-DSS controls; we never see or store the card number. Bank transfer payments do not involve Pin Payments at all.
• Analytics and advertising (Google LLC — United States; Meta Platforms Ireland Ltd — Ireland) — for Google Analytics, Google Ads conversion measurement, and the Meta Pixel, subject to your cookie preferences.
• Hosting and infrastructure (DigitalOcean LLC — United States) — the Website is hosted on infrastructure located in Sydney, Australia.
• Mapping and addressing (Google LLC) — for Google Maps and Places autosuggest when you enter an address.
• Property and agent data providers (e.g. Domain Group, ScrapingBee SAS) — we send requests that may include a suburb name and address; we receive back property and agent information.

Where these providers are overseas (see section 7), we take reasonable steps to ensure they handle personal information consistently with the APPs.

4.3 Other disclosures

• To professional advisers (lawyers, accountants, insurers) on a confidential basis.
• To regulators, law enforcement or courts where required by law.
• To a purchaser in connection with a potential sale of our business, on confidential terms.

4.4 We do not sell personal information.

5. Tender confidentiality

Tender contents (commission, marketing spend, sale method, time to market, strategy and similar fields an agent submits) are visible only to the inviting seller, to our support staff in the course of operating the Services, and to processors acting under contract. We do not disclose tender contents to any other agent or to any outside party, and we do not use them for price-comparison advertising, industry-reporting, or similar purposes.

6. Listing detection and attribution

To determine whether a tendered property has resulted in a signed listing authority (the trigger for the Success Fee under our Terms), we monitor publicly available real estate listing portals for the property address. This uses only information that is already public on those portals (e.g. the listing agent's name and agency, the property address, and the listing date).

We store the match so we can support our billing, and so agents can dispute a proposed charge under clause 12 of our Terms of Service.

7. Overseas transfers

Some of our third-party processors are located outside Australia (see section 4.2), including the United States, Ireland and France. Where personal information is transferred overseas, we take reasonable steps to ensure the recipient handles it in line with the APPs. Using a processor in a particular country does not mean all of your personal information leaves Australia — for example, we host the Website itself in Sydney.

8. Cookies and tracking

We use cookies and similar technologies to:

• remember your session and preferences (essential cookies);
• understand how the Website is used and improve it (analytics cookies, e.g. Google Analytics);
• measure the performance of marketing campaigns (advertising cookies, e.g. Google Ads conversion tracking and the Meta Pixel).

You can disable cookies in your browser, but some Website features may not work as a result. Essential cookies cannot be disabled through the browser without breaking login.

9. Data retention

We retain personal information only as long as reasonably necessary for the purposes described above:

• Seller accounts and associated property/tender records: for the life of the account plus 7 years (consistent with record-keeping expectations under the Australian Taxation Office and general commercial practice).
• Agent accounts and tender contents: for the life of the account plus 7 years.
• Listing-detection and Success Fee records: for 7 years after the charge or last dispute, whichever is later.
• OTP codes: 5 minutes (cleared after verification or expiry).
• Server and access logs: up to 90 days unless retained longer for security investigation.

After the applicable retention period we delete or de-identify personal information unless a longer retention is required by law.

10. Security

We take reasonable steps to protect personal information from loss, misuse, interference, unauthorised access, modification and disclosure, including HTTPS transport, database access controls, signed (HMAC) short-link tokens for agent deep-links, and restricted administrative access. No method of transmission or storage is perfectly secure. If we become aware of a data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

11. Your rights

You have the right to:

• access the personal information we hold about you;
• correct personal information that is inaccurate, incomplete or out of date;
• request deletion of personal information, subject to any overriding legal retention requirements;
• opt out of marketing communications at any time (transactional messages, such as OTPs or notices about a tender you are participating in, cannot be opted out of while your account is active);
• withdraw consent for non-essential cookies by updating your browser settings or, where we offer it, via a cookie-preference control;
• complain to us about how we have handled your personal information.

To exercise a right, email support@instantpropertyreports.com.au. We will respond within 30 days.

12. Complaints

If you are not satisfied with our response to a privacy complaint, you can contact the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au, 1300 363 992.

13. Marketing

With your consent we may send occasional marketing emails about features and improvements. You can unsubscribe at any time via the link in the email or by contacting us. Transactional communications (OTPs, tender notifications, Success Fee notices, account-security messages) are not marketing and are necessary for the Services.

14. Children

Our Services are not directed to persons under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated policy takes effect when published on the Website, with the "Last updated" date adjusted. For material changes we will take reasonable steps to notify registered users in advance.

16. Contact us

Tender My Listing Pty Ltd
ACN 697 239 866 · ABN 17 697 239 866
Trading as Instant Property Reports
81–83 Campbell Street, Surry Hills NSW 2010
Email: support@instantpropertyreports.com.au