Privacy policy

CogsMe Pty Ltd (ABN [ABN to be added]) trading as KeepMyBond ("we", "us") runs https://keepmybond.com.au. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What we collect

• Photos and notes about your rental (rooms, condition, notes, claim items, letters). Photos of a home can be personal information.
• Photo metadata: capture time, SHA-256 fingerprint and, only if you turn it on, GPS location.
• Contact details if you ask for email reminders (your email address, state, notice date, property address if entered).
• Payment information: handled by Stripe. We receive a payment confirmation and session ID, not your full card number.
• Technical data: IP address (used for rate limiting and security) and, if enabled, privacy-friendly analytics without cookies or advertising IDs.

2. Where your data is stored

In the current version, your report, photos and claim details are stored on your device (in your browser's storage). They are not uploaded to our servers except as described below. Clearing your browser data or using "Delete all my data" removes them.

3. How we use it (APP 6)

• To create your reports, comparisons, letters and PDFs.
• AI comparison: when you choose "Compare", the two photos in each pair are sent, downscaled, to our server and to OpenAI to generate a visual flag. We don't store these photos on our server. OpenAI processes them under its API data terms (overseas, see section 5).
• To send reminders you asked for, via our email provider Resend.
• To process payments (Stripe) and prevent fraud and abuse.

We don't sell personal information or use it for advertising.

4. Consent and choice

GPS, AI comparison and email reminders are optional and off until you use them. You can use KeepMyBond without giving us your name. You may deal with us anonymously or with a pseudonym where practicable (APP 2).

5. Overseas disclosure (APP 8)

Our service providers may process data outside Australia, including the United States: OpenAI (AI comparison), Stripe (payments), Resend (email) and Vercel (hosting). We take reasonable steps to ensure they protect it consistently with the APPs.

6. Security (APP 11)

We use HTTPS, signed tokens for purchases and limited retention. Data on your device is only as secure as your device, so use a passcode.

7. Access, correction and deletion (APPs 12 and 13)

Your on-device data is under your control. For anything we hold (e.g. reminder emails, payment records), email hello@keepmybond.com.au and we'll respond within 30 days.

8. Complaints

Contact hello@keepmybond.com.au. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

9. Contact

CogsMe Pty Ltd trading as KeepMyBond · hello@keepmybond.com.au · https://cogsme.com.au