Privacy Policy
Last updated: January 2025
1. Introduction
Schema ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property development analysis platform (the "Service").
We comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). By using our Service, you consent to the collection and use of information in accordance with this policy.
Summary: We collect only the data necessary to provide our Service. We do not sell your personal information. You can request access to, correction, or deletion of your data at any time.
2. Information We Collect
2.1 Information You Provide
- Account Information: When you register, we collect your email address, name, company name (optional), and password.
- Project Data: Property addresses, lot identifiers, development parameters, and financial assumptions you input into the Service.
- Communications: Feedback, support requests, and other communications you send to us.
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns.
- Device Information: Browser type, operating system, IP address, and device identifiers.
- Location Data: Geographic location derived from your IP address (city/region level only).
2.3 Information from Third Parties
- Property Data: We access publicly available property data from NSW government sources including the NSW Planning Portal, Spatial Services, and related agencies.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process and store your development analysis projects
- Send you technical notices and support messages
- Respond to your comments and questions
- Monitor and analyze usage patterns to improve user experience
- Detect, prevent, and address technical issues or security threats
- Comply with legal obligations
4. Data Storage and Security
4.1 Storage Location
Your data is stored on secure servers. We endeavour to use Australian-based hosting where practical. Some services may process data in other jurisdictions with equivalent privacy protections.
4.2 Security Measures
We implement appropriate technical and organisational measures to protect your information, including:
- Encryption of data in transit (TLS/SSL)
- Secure password hashing
- Regular security assessments
- Access controls and authentication
4.3 Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time.
5. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:
- Service Providers: With trusted third parties who assist us in operating our Service (e.g., hosting, analytics), subject to confidentiality obligations.
- Legal Requirements: When required by law, court order, or government request.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.
- With Your Consent: For any other purpose with your explicit consent.
6. Your Rights
Under the Australian Privacy Principles, you have the right to:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information (subject to legal retention requirements).
- Data Portability: Export your project data in a common format.
- Withdraw Consent: Withdraw consent for optional data processing at any time.
To exercise these rights, please contact us at the details provided below.
7. Cookies and Tracking
We use essential cookies to:
- Maintain your session and authentication state
- Remember your preferences (e.g., theme settings)
- Ensure security (e.g., CSRF protection)
We use internal analytics to understand how our Service is used. We do not use third-party advertising trackers or sell data to advertisers.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after such modifications constitutes your acknowledgment of the modified policy.
9. Contact Us
If you have any questions about this Privacy Policy or our data practices, or if you wish to make a complaint, please contact us:
- Email: privacy@schema.onl
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.