Privacy Policy

This Privacy Policy explains how ISoldIt ("we", "us", "our"), operator of isoldit.com.au (the "Platform"), collects, uses, stores and discloses personal information. We are committed to handling personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) to the extent they apply to us, and we have chosen to follow the APPs as best practice.

"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable. By using the Platform you agree to the handling of your personal information as described in this policy.

Depending on how you use the Platform, we may collect:

• Account details: your name, email address, password (stored only in encrypted/hashed form), state and suburb.
• Listing information: item titles, descriptions, photos, price, condition, suburb and postcode. Photos may contain information about you or your home, so please check them before uploading.
• Messages you send and receive through in-app messaging, and quick-reply selections.
• Ratings, reviews, reports and saved items, saved searches (which may include a suburb and search radius) and email preferences.
• Waitlist sign-ups: your email address and the state you are interested in.
• Technical information: IP address, device and browser type, log data, and the date and time of your visits, collected automatically when you use the Platform.
• Information you give us when you contact us, report a problem or appeal a suspension.

We do not collect payment card or bank details — ISoldIt never processes payments. We do not intentionally collect sensitive information (such as health, racial or religious information). Please do not include sensitive information in listings or messages.

We collect personal information directly from you when you register, create a listing, send a message, rate or report someone, save a search, join a waitlist or contact us. We also collect some technical information automatically through server logs and browser storage (see Cookies and local storage below). We may receive information about you from other users, for example when a buyer messages you, reviews you or reports you.

We use personal information to:

• create and manage your account and let you log in securely;
• publish your listings and show your public profile (name, suburb, listings, ratings, reviews and sold count);
• let buyers and sellers message each other without sharing phone numbers or email addresses;
• send service emails you have asked for or that are necessary, such as a welcome email when you join, password resets, new message alerts, saved-search matches, price drop alerts, bump reminders, state launch notices and account notices;
• calculate approximate distances between suburbs for search;
• keep the Platform safe — detect and investigate scams, fraud, spam, prohibited items and breaches of our Terms, review reports and suspend accounts where needed;
• respond to your enquiries, complaints and appeals;
• maintain, troubleshoot and improve the Platform, and comply with our legal obligations.

If you do not provide certain information (for example an email address), we may not be able to give you an account or certain features.

Public information includes your first name or display name as you entered it, your suburb and state, your listings and photos (including after they are marked as sold), your star rating, reviews you have received and given (shown with your name), your sold count and the month you joined.

Your email address and password are never shown to other users. Messages are visible only to the two people in the conversation (and to us where needed for safety and moderation, see below). When you meet someone to complete a sale, any information you choose to share with them (such as a phone number or address) is your responsibility.

We do not sell, rent or trade your personal information. We may disclose personal information to:

• service providers who help us run the Platform, such as cloud hosting and database providers, image/file storage providers and email delivery providers, who are only permitted to use it to provide services to us;
• other users, to the extent described in What other users can see;
• police, government agencies, regulators or courts where required or authorised by law, or where we reasonably believe it is necessary to prevent or lessen a serious threat to someone's life, health or safety, or to investigate suspected unlawful activity such as scams or fraud;
• professional advisers (such as lawyers or accountants) and, if our business is sold or restructured, a prospective buyer or successor, subject to confidentiality.

Some of our service providers (for example cloud hosting, file storage and email delivery) may store or process data outside Australia, including in the United States and other countries. Where we disclose personal information overseas we take reasonable steps to ensure the recipient handles it in a way that is consistent with the APPs.

To protect our community, we may access and review messages, listings, ratings and account information when investigating a report, suspected scam, prohibited item, safety concern or breach of our Terms, or when required by law. We do not use message content for advertising.

We send service emails connected to your account and the features you use. Optional alerts (new message emails, price drop alerts and bump reminders) can be turned off at any time in Dashboard → Settings, or via the link in those emails. Saved-search alerts stop when you delete the saved search. Waitlist emails are sent once when your state opens. We will only send marketing emails with your consent and in line with the Spam Act 2003 (Cth), and every marketing email will include an unsubscribe option.

We use a secure login cookie and your browser's local storage to keep you signed in, remember your selected state and remember banners you have dismissed. We do not use third-party advertising cookies. If you share a page using the Facebook, WhatsApp or SMS buttons, those services handle your information under their own privacy policies.

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include encrypted connections (HTTPS), hashed passwords, limits on repeated login attempts, single-use expiring password reset links, and access controls on administrative tools. No system is completely secure, so please use a strong, unique password and never share it.

We keep personal information for as long as your account is active and as needed to provide the Platform, resolve disputes, enforce our Terms and meet legal obligations. Password reset links expire after one hour. When you delete your account we permanently delete your account and the associated data described below, except where we must keep limited records by law or to deal with an ongoing investigation. Backups are overwritten in the ordinary course.

You can delete your account at any time in Dashboard → Settings → Delete my account. This permanently removes your profile, all your listings, your conversations and messages, ratings you gave and received, saved items, saved searches, waitlist sign-ups, and reports you made or that were made about you. This cannot be undone. Photos you uploaded are removed from public view and from our listing records.

You can view and update much of your information yourself through the Platform, and download a copy of your data at any time in Dashboard → Settings → Download my data. You may also ask us for access to, or correction of, the personal information we hold about you by emailing rmroccisano@icloud.com. We will respond within a reasonable time (usually within 30 days). We may need to verify your identity first, and we may refuse access where the law allows, in which case we will tell you why.

If a data breach is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

The Platform is not intended for children under 18 without the involvement of a parent or guardian. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

If you have a question or complaint about how we handle your personal information, please email rmroccisano@icloud.com with details. We will acknowledge your complaint and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

We may update this Privacy Policy from time to time. The latest version will always be available at isoldit.com.au/privacy, with the date it was last updated. If we make a significant change, we will take reasonable steps to let you know.