Privacy Policy

This Privacy Policy explains how [LEGAL ENTITY NAME] (ABN [ABN]) ("ShotFrom", "we", "us") handles personal information when you use the ShotFrom website and platform (the "Service"). We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using the Service you agree to the collection, use, and disclosure of your personal information as described here. If you do not agree, please do not use the Service.

1. Who this policy covers

The Service is used by two groups, and we handle their information differently:

• Office users (our customers) — real-estate principals, admins, and agents who hold an account, upload listings, and manage subscriptions.
• Viewers (buyers and the public) — people who open a published listing link on their phone or computer. Viewers do not need an account.

2. Information we collect

2.1 Account and profile information (office users)

• Name, email address, and (optionally) phone number, agency name, and profile photo.
• Your role within an office (Principal, Admin, or Agent) and the office you belong to.
• Authentication data — we use passwordless "magic link" sign-in, so we do not store passwords.

2.2 Content you upload

• Floor-plan images, listing photographs, listing details (title, display address), and the pins/camera directions you place. You are responsible for ensuring you have the rights to upload this content (see our Acceptable Use Policy).

2.3 Viewer / analytics information

When a buyer opens a published listing, we record limited, privacy-preserving analytics so agents can see engagement. Notably:

• We do not use tracking or advertising cookies, and we do not build cross-site profiles of viewers.
• To count unique sessions without identifying anyone, we derive a one-way session hashfrom the viewer's IP address and browser user-agent. We store the hash, not the raw IP address, for this purpose.
• We record which rooms/photos were tapped, view counts, and timing — associated with the listing, not with a named person.

2.4 Payment information

Subscriptions are processed by Stripe. Your card details are collected and stored by Stripe, not by us — we receive only limited billing metadata (e.g. subscription status, plan, and the last four digits / card brand where provided). See Stripe's privacy policy for how it handles your data.

2.5 Technical and log data

• Standard server logs (IP address, browser type, pages/actions, timestamps) used for security, debugging, and abuse prevention.

3. How we use your information

• To provide, operate, and maintain the Service and your account.
• To process subscriptions, payments, trials, and billing.
• To generate the listing viewer and the engagement analytics shown to agents.
• To send transactional emails (sign-in links, invites, billing and lifecycle notices).
• To provide support, prevent fraud/abuse, and secure the Service.
• To comply with our legal obligations.

We do not sell your personal information.

4. AI processing

Some features (for example assisted photo placement / "Auto-Pin") may process your uploaded images using a third-party AI provider (Anthropic) to suggest room placements. These suggestions are proposals you confirm; images are sent for processing only to provide the feature.

5. Who we disclose information to (sub-processors)

We use trusted third-party providers to run the Service. Each processes only the data needed for its function:

We may also disclose information where required by law, to enforce our terms, or in connection with a sale or restructure of our business (subject to this policy).

6. Overseas disclosure

Some of our providers store or process data outside Australia (see the table above — e.g. the United States and the European Union). By using the Service you consent to your personal information being disclosed to and stored by these providers overseas. We take reasonable steps to ensure they handle it consistently with the APPs. [Confirm the exact regions with your solicitor and update this section.]

7. Data retention

• Listing images: when a listing is marked sold or cancelled, the viewer stays live for 60 days, after which the images are permanently deleted from storage. (A reminder is sent before deletion, with a one-time extension option.) We do not retain original full-resolution files after generating optimised web versions — see our FAQ.
• Listing records, pins, and analytics: retained for up to 12 months; aggregated office-level performance analytics may be retained indefinitely in de-identified or aggregated form.
• Account data: retained while your account is active and for a reasonable period afterwards to meet legal, tax, and record-keeping obligations.

[Confirm all retention periods with your solicitor.]

8. Security

We use technical and organisational measures to protect personal information, including encrypted connections (TLS), role-based access controls, row-level security scoping data to the owning office, and least-privilege access to storage. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

9. Cookies

We use only strictly necessary cookies required for sign-in and session management. We do not use advertising, marketing, or cross-site tracking cookies on the listing viewer.

10. Accessing and correcting your information

Under the APPs you may request access to, or correction of, the personal information we hold about you. Contact us at [PRIVACY CONTACT EMAIL]. We will respond within a reasonable period and may need to verify your identity. We may charge a reasonable cost for access in limited circumstances.

11. Direct marketing

We may send you service-related communications. If we send marketing communications, you can opt out at any time via the unsubscribe link or by contacting us.

12. Complaints

If you believe we have breached the APPs, contact us first at [PRIVACY CONTACT EMAIL]. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

13. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the current version; material changes will be notified through the Service.

14. Contact us

[LEGAL ENTITY NAME]
[BUSINESS ADDRESS]
Email: [PRIVACY CONTACT EMAIL]