REACH is property research software for New South Wales. We collect only what we need to run it, we do not sell your information, and we do not use advertising or tracking cookies.
What we collect
- Account details: your name, email address and plan. Your password is never stored as written: we keep only a salted PBKDF2-SHA256 hash of it.
- A sign-in cookie that keeps you signed in. It holds a random token; we store only a hash of that token. There are no analytics, advertising or third-party tracking cookies.
- What you ask and save: your questions to the assistant, its answers, and the searches, views, reports and watchlists you save, so you can return to them.
- Places you look at: addresses, lots and map areas you search or select, which are needed to fetch the planning data for them.
- Files you upload, such as images or plans you attach to a question, used only to answer that request.
How we use it
To provide the service: sign you in, answer your questions, show the planning data for the places you choose, and keep your saved work. We do not use your information for advertising and we do not sell or rent it.
Who processes it for us
- Google Cloud hosts the application and stores account and saved data.
- OpenAI and TypeSafe process the text of your questions and the relevant results to understand them and write answers. They may process data outside Australia, including in the United States.
- NSW Government and public mapping services (for example NSW Spatial Services, the NSW Planning Portal and basemap providers) receive the map areas and locations needed to return data. They do not receive your name or email address.
How long we keep it
Account details are kept while your account is open. Conversations and saved work are kept until you delete them or ask us to delete your account. When an account is deleted we remove its saved data, except where the law requires us to keep a record.
Security
All traffic is encrypted over HTTPS, passwords are stored only as salted hashes, and access to stored data is restricted to the service itself.
Your choices
You can ask to see, correct or delete your information, or ask a question about this policy, by emailing marcellobabbili@gmail.com. We will respond within 30 days. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
Changes
If this policy changes we will update the date above, and tell signed-in users about significant changes. See also the terms of use.