Legal

Privacy Policy

DealIQ Property Privacy Policy

Version 1.2 Prepared 11 September 2026

This policy applies from the date this version is published at the address in section 14.

1 Who we are and what this policy covers

DealIQ Property is a service of Khoumanda Pty Ltd (ABN 39 150 262 150), trading as DealIQ Property. In this policy, we, us and our mean that company.

This policy explains how we collect, hold, use and disclose personal information when you visit dealiqproperty.com, use app.dealiqproperty.com and its available feasibility tools, generate reports, contact us or use an available AI feature. It also explains how to request access or correction and make a privacy complaint.

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. Business and property information can be personal information where it identifies a person, including through its connection with an account, address, ownership structure or other records. Commercially sensitive project information is also protected by the confidentiality provisions of our Terms of Use, whether or not it is personal information.

We handle personal information as described in this policy and in accordance with Australian privacy laws that apply to us. This policy does not remove any rights you have under those laws. Reading or acknowledging this policy is not blanket consent to unrelated collection, marketing or disclosure.

2 Information we collect and hold

The information we handle depends on the parts of DealIQ you use. It may include:

  • Account and contact information: your email address, account identifier, and any name, business details or contact information you supply in your account or correspondence.
  • Access and subscription information: login and verification activity, account status, trial dates, selected plan, subscription identifiers and payment status.
  • Legal acceptance records: the Terms or other legal document shown to you, its version and document fingerprint, the time of your acceptance or acknowledgement, the account involved and the collection context.
  • Project information: site addresses, location, property characteristics, proposed development, ownership or purchasing structure, residency or foreign-purchaser answers, prices, costs, finance assumptions and other information you enter into a feasibility. These are modelling inputs and may describe a scenario rather than your own circumstances.
  • Working records and outputs: saved inputs, assumptions, changes, notes, calculation results and reports. Documents or other material you submit through an available feature or send to our support team may also contain personal information.
  • Billing information: billing contact details, customer and transaction references, invoices, refunds and information about successful or unsuccessful subscription payments.
  • Communications: enquiries, support requests, complaints, feedback and any AI questions, context and responses handled as described in section 7.
  • Technical information: IP address, a one-way hash derived from an IP address for AI rate limiting, browser and device information, timestamps, requested pages or actions, error information and security or service logs. Cookies and browser storage are described in section 8.

DealIQ is not designed to collect health information, biometric identifiers or other sensitive information within the meaning of the Privacy Act, or copies of government identity documents and tax file numbers. Please do not include these in project notes, documents, support messages or AI questions. Where sensitive information is genuinely needed, we will explain why and obtain consent unless applicable law permits another basis. If we receive information we did not request, we will assess whether we may lawfully retain it and, where required, destroy or de-identify it.

3 How we collect information and your choices

We collect information directly when you register, sign in, accept the Terms, enter or save a feasibility, subscribe, request support, submit a form or use an available AI feature. Our systems and service providers also collect technical information when they deliver and secure the service.

We receive subscription and transaction information from our payment provider. Where available features use external property, mapping, planning or other datasets, we may receive information from their providers or public sources and combine it with your inputs. We may receive information about you from someone who is authorised to act for you or from another customer who includes it in their project or report.

If you supply someone else's information, provide only what is needed, ensure you are entitled to share it, and give them this policy where appropriate. That responsibility does not remove our own privacy obligations.

You can browse public information without creating an account and may make a general enquiry anonymously or under a pseudonym where practical. Technical data may still be collected when you browse. We need an email address to provide account access, and sufficient project or payment information to provide the functions you request. If required information is withheld, those functions may be unavailable or the result may be incomplete. Optional information can be left blank.

We provide additional notices at relevant collection points where needed. A notice will identify any law requiring a particular collection if that situation applies; we do not describe ordinary feasibility inputs as legally compulsory.

4 Why we use information

We use information to create and authenticate accounts; record acceptance of the Terms; operate trials and subscriptions; save and retrieve projects; calculate and explain feasibility results; generate requested reports; process payments; answer enquiries; investigate errors and complaints; and protect the service against fraud, misuse and security incidents.

We also use information needed to maintain our business records, meet legal obligations and establish or respond to legal claims. Access by staff and contractors is limited to the work they need to perform, including authorised support and troubleshooting.

We may use relevant service feedback and operational information to improve DealIQ. Where we create aggregate or de-identified information for analysis or development, we take steps to ensure it does not identify you, another person, or a particular site or project. Removing a name alone does not necessarily de-identify information.

We do not sell your identifiable project data or use identifiable project data to market third-party products to you. We do not use this policy to authorise an unrelated use of personal information. Where a new use requires consent or another lawful basis, we address that before proceeding.

5 Who receives information

We disclose information to the extent needed for the purposes described in this policy, including to:

  • Vercel for application hosting and delivery;
  • Supabase for authentication, database and related platform services;
  • Resend and its infrastructure providers for service email delivery;
  • Stripe for hosted subscription checkout, payment processing and subscription administration;
  • Anthropic for AI processing when you use an enabled AI feature;
  • technical support, security and monitoring providers where those services are used;
  • professional advisers and contractors who need it to support our business and are subject to appropriate confidentiality obligations; and
  • authorities, courts or other recipients where disclosure is required or authorised by law, or lawfully necessary to respond to a serious threat or protect legal rights.

Payment details entered into Stripe's hosted checkout are collected by Stripe. DealIQ supplies the account or customer reference, email where required, selected price or billing interval, and subscription metadata. DealIQ receives the transaction and subscription information needed to associate the payment with your account and manage the subscription. DealIQ does not receive the full card number or card security code entered into Stripe's hosted checkout. Stripe's own privacy information also applies to processing it carries out in its own capacity.

If you download or share a report, the people you give it to receive the information it contains and may keep their own copies. Check the content before sharing it. Deleting your DealIQ copy does not delete a recipient's copy.

A referral to Seek Invest Grow or another adviser is separate from using DealIQ. Where you request a referral, we will identify the recipient and the information to be shared and obtain any required permission before sending it. A common contact person or service provider does not itself authorise reuse of your DealIQ information for a separate advisory service.

If our business is sold or restructured, relevant information may be disclosed to advisers or a proposed or actual successor where lawful, with appropriate confidentiality protections. We will notify you of a material change to responsibility for your information where required.

6 Overseas handling

Some providers store, process or access personal information outside Australia, including through infrastructure, support teams and subprocessors. Based on the services used for this version of DealIQ, overseas handling may include:

  • Japan: Supabase authentication and database services, and infrastructure used to dispatch DealIQ service emails;
  • United States: Vercel application hosting, Resend account information and email metadata, Anthropic API storage and processing, and services used by Stripe and its providers; and
  • Ireland: relevant Stripe entities and service operations.

Anthropic states that its services may also process information in Australia, Europe and Asia. Stripe and its providers may process payment information in other countries required by the selected payment method, payment network or support arrangement. Provider locations and subprocessors can change. We will update this policy when a material change affects the description above.

Where applicable privacy law requires it, we take reasonable steps to ensure an overseas recipient handles personal information consistently with the Australian Privacy Principles, unless a lawful exception applies. This policy does not ask you to waive protections or consent to an exception that would remove our accountability for overseas handling.

7 Automated calculations and artificial intelligence

DealIQ uses automated calculations to produce feasibility estimates and a DealIQ Verdict classification by comparing a modelled development scenario with viability thresholds. The project inputs described in section 2 can include site addresses, ownership or purchasing structure, residency or foreign-purchaser answers, prices, costs and finance assumptions. These inputs can be personal information when they identify, or are linked to, an identifiable individual; not every scenario input is personal information.

The automated outputs include estimated costs, margins, returns and classifications of the modelled scenario. You may use these outputs to compare scenarios and inform your own development or transaction decisions. The Verdict does not itself approve or refuse finance, grant planning permission or make a transaction decision for you. A lender, authority or other recipient makes its own decisions, and you remain responsible for deciding whether to proceed.

Automated controls also determine when a seven-day trial starts, whether the trial remains active, when it expires and whether an account has trial, paid or beta access. These controls use account identifiers, plan or entitlement status and relevant timestamps. DealIQ also rate-limits AI features using the account identifier, request time and a one-way hash derived from the request IP address. The rate limit controls access frequency; it does not assess your personal suitability or the viability of your project.

Where an AI feature is enabled, we send the information used by that feature to Anthropic to produce an explanation or response. Depending on the feature, that can include your question, recent conversation messages, relevant page or property context, and structured deal inputs, statuses or results. An AI feature may process a site address or information about a person included in that material. AI analysis may be triggered by requesting a feature as well as by sending a chat message.

Under Anthropic's published standard commercial API terms, API inputs and outputs are not used to train its models unless the customer expressly opts into a program or otherwise agrees to training use. Anthropic states that standard API inputs and outputs may be retained for up to 30 days, subject to any different contractual setting and longer retention required for safety, legal or policy enforcement purposes. We will update this section before using an account setting or arrangement that materially changes that handling.

We may retain AI-related information where it forms part of information you save, where it is needed for the current interaction, or where limited service, error, security or rate-limit records are required to operate and protect the service. Authorised personnel may review relevant records to provide support, investigate errors, improve accuracy or keep DealIQ safe.

AI explanations may be inaccurate. If an output contains incorrect personal information, or you want to understand the information used for a result, contact us under section 11. Our review of an enquiry does not replace advice from your own professional advisers.

8 Cookies and browser storage

DealIQ uses browser storage and necessary cookies to maintain sign-in sessions and retain relevant preferences, working state and project inputs. Our authentication and payment providers may also use cookies or similar technologies for security and service delivery. Information held only in your browser is not necessarily saved to your account.

DealIQ does not currently use optional product analytics, advertising pixels, session replay or conversion tracking. If we introduce one of these technologies, we will assess the information it collects, provide any required choice or notice and update this policy before or when the change takes effect.

You can manage cookies and local storage through your browser settings. Blocking or clearing them can sign you out, remove locally stored work or prevent some features from functioning. Use care on a shared device.

9 Service messages and marketing

We use authentication, email and payment service providers to deliver service messages on our behalf, including sign-in codes or links and billing messages. We also communicate with you about important account matters and respond to enquiries.

If we send promotional messages about DealIQ, we will do so with the consent or other basis required by law, identify the sender and provide a working unsubscribe method. You may also contact us to stop direct marketing. For commercial email or SMS, we will action unsubscribe requests within five working days. Opting out of marketing does not stop necessary service messages. Creating an account or acknowledging this policy does not automatically opt you into optional marketing or a separate adviser's marketing.

10 Security and retention

We use technical and organisational measures intended to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure. Access is limited according to the work being performed. No system can guarantee complete security. Contact us promptly if you suspect unauthorised access to your account.

We keep information for as long as reasonably needed for the purpose for which we hold it, including providing the service, meeting legal obligations and dealing with disputes. When information is no longer needed and no law or court order requires retention, we take reasonable steps to destroy or de-identify it.

Expiry of a free trial or cancellation of a subscription does not, by itself, mean that the account and its data have been deleted. Saved data is retained after trial expiry as described in the Terms of Use.

You can ask us to close your DealIQ account or delete personal information using the contact details below. We use a support-assisted process and may ask for information reasonably needed to verify your identity. After closure, we make an export of the DealIQ account information covered by the Terms of Use available for 60 days through the process explained in our response to you. Closing DealIQ does not automatically delete information belonging to a separate service that uses the same sign-in identity.

After the export period, we delete or de-identify DealIQ information that is no longer needed, subject to lawful and contractual retention requirements. Some records may need to be retained, including invoices and transaction records, records of contractual acceptance, complaint records or material needed for a legal claim. We will explain a relevant retention requirement or limitation when responding to your request. Information held by a service provider or in protected backups may remain until the applicable provider or backup retention cycle expires; access remains restricted during that period.

We assess suspected privacy breaches, take appropriate containment and remedial steps, and notify affected individuals and the Office of the Australian Information Commissioner where required under the Notifiable Data Breaches scheme.

11 Access and correction

You may ask for access to personal information we hold about you, or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Contact us using section 13 and describe the information or issue. We may request information reasonably needed to verify your identity or your authority to act for someone else.

We respond within a reasonable period and ordinarily aim to respond within 30 calendar days. If more time is needed, we will explain why and provide an update. There is no fee to request access or correction, or to make a correction. If a lawful, reasonable charge is proposed for providing access, we will explain it beforehand.

Access or correction can be limited in circumstances permitted by law, including to protect another person's privacy. If we refuse a request, we will provide reasons where required and explain the complaint options. Where applicable, you may ask us to associate a statement of your disagreement with the information, or notify another recipient of a correction. Account ownership does not prevent another individual from requesting access to personal information about them that appears in an account or report.

12 Complaints

If you believe we have mishandled personal information, including by breaching an applicable Australian Privacy Principle or binding privacy code, contact us with the details and the outcome you seek. An authorised representative may contact us on your behalf. We will acknowledge the complaint, assess the relevant records, investigate and explain our response and any proposed remedy. We ordinarily aim to respond within 30 calendar days and will explain a delay.

If the matter is unresolved, you may contact the Office of the Australian Information Commissioner where it has jurisdiction. The Office generally expects you to complain to the organisation first and allow a reasonable opportunity to respond. Information about making a complaint is available at oaic.gov.au/privacy/privacy-complaints, or by calling 1300 363 992.

13 Contact us

Address privacy enquiries, access or correction requests, deletion requests and complaints to:

Privacy contact<br>DealIQ Property<br>Khoumanda Pty Ltd (ABN 39 150 262 150)<br>31 Chambers Street, South Yarra VIC 3141, Australia<br>Email: support@seekinvestgrow.com.au

14 Changes and copies

We will update this policy when our information handling changes and identify the current version and publication date. For a material change, we will provide an appropriate notice and obtain further consent where required. Publishing a new policy does not retrospectively create consent for an unrelated use.

The current policy will be available free of charge at https://app.dealiqproperty.com/privacy, with a link from the marketing website and relevant collection points. Contact us if you need a copy in another accessible form.