Privacy Policy

Arvocado is built to respect the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). We collect the minimum personal information needed to help you find a property, we do not sell it, and we do not use it for third-party advertising or profiling.

Arvocado is operated by Aapo Pty. Ltd. (ABN 47 673 090 116) from Melbourne, Australia. Contact for privacy matters: hello@arvocado.au.

Account information. When you create an account or sign in with an emailed 6-digit code or your password, we collect your email address, your name (required at sign-up), and your Arvocado preferences (saved listings, saved searches, tags, notes, personality quiz results, notification channel choice). A password, if you choose one (stored hashed by our auth provider).

Activity info. When you view a listing, we increment a server-side counter and keep a short list of your recently viewed listings in your browser’s storage on this device so the home page can surface them back to you. That list never leaves your device unless you explicitly share it.

Enquiry content. If you send an enquiry about a listing, the name, email, phone and message you submit are passed to the agent or private seller and stored so they can reply to you.

Push subscriptions. If you opt in to Web Push notifications we store your browser’s push endpoint and encryption keys. You can switch it off any time from your profile.

Payment data. Stripe processes payments for Room Pass, listing fees and optional donations. We do not store card numbers. We retain only the transaction metadata Stripe returns (customer reference, amount, currency, timestamp).

Technical logs. Our hosting provider (Vercel) and database provider (Supabase) log request metadata (IP, timestamp, path) for security and debugging. These logs are retained per each provider’s default policy.

Measurement. When you open a shared Match link, we record the quiz steps that follow within 24 hours. We keep a hashed session key, the hashed link and the link kind (personality or comparison) in our own database. No third party receives them.

Rooms content. The notes, tasks, board items and files you add to a room, and the people you invite to it.

Seller listings. If you list a home, we keep the address, photos, price, inspection times and listing words, and publish them. We also keep which account owns the listing.

Agent licence numbers. If you sign up as an agent, we keep your name, email, agency and licence number. We check the number on the Consumer Affairs Victoria register.

Marketplace proof. If you apply to the Marketplace, we keep your business details, the areas you cover and the licence or registration proof you upload. Only Marketplace admins can open the proof file.

Ownership proof. If you list a home on Arvocado, we ask for your full legal name, a declaration that you own the home or may sell it, and a document that shows this, such as a council rates notice or a title search. We use these only to check the listing. Only Arvocado admins can open the document, through a link that works for about two minutes. We delete the document 30 days after we approve or decline the listing, at once if you withdraw it, and 14 days after upload if you never pay. We keep your name and declaration for five years as a record of the listing.

Analytics. No third-party analytics. No Google Analytics, no Meta Pixel, no Hotjar, no advertising identifiers. We do not build advertising profiles on you.

• To operate the app, authenticate you, and deliver the service.
• To send transactional emails you asked for: account confirmation links, sign-in codes, password reset links, saved-listing change alerts, saved-search digests, enquiry confirmations.
• To surface listings that match your stated preferences (personality quiz, saved filters).
• To enforce rate limits, detect abuse, and protect the service from attack.
• To meet legal and tax record-keeping obligations in Australia.

We do not sell personal information, use it for third-party advertising, participate in ad-targeting exchanges, or share it with data brokers.

We disclose information only to the service providers who help us run the app, and only to the extent needed:

• Supabase (Australia): Database, sign-in and file storage, hosted in AWS Sydney.
• Vercel (the United States): Hosting and serverless functions.
• Resend (the United States): Transactional email delivery.
• Stripe (the United States): Processes payments for Room Pass, listing fees and optional donations. We do not store card numbers.
• xAI (the United States): Receives photos, listing text and addresses to tag listing photos, read room photos and write draft listing copy.
• OpenAI (the United States): Receives photos, listing text and addresses to style listing photos, read room photos and draw concept images.
• MapTiler (Switzerland): Map tiles, map images and address search suggestions. It receives the map area you view and the address you type.
• OpenStreetMap services (Nominatim, Overpass and OSRM routing) (Germany, Switzerland and the United Kingdom): Address lookups, nearby amenities and travel times. They receive addresses and map positions.
• Victorian Government (VicPlan and Vicmap) (Australia): Planning zones, overlays and land parcels. They receive a map position or address.
• SiteLogic (Australia): Planning lookups and Field notes articles. It receives the address you look up. Aapo Pty. Ltd. runs SiteLogic and Arvocado.
• Meta (Instagram) (the United States): Only when an agent connects an Instagram account. It receives the listing video and caption the agent posts.
• TikTok (Singapore and the United States): Only when an agent connects a TikTok account. It receives the listing video and caption the agent posts.
• Upstash (region set when the store is created): Counts repeated requests so we can limit abuse. It receives hashed IP addresses, hashed email addresses and account ids.

We also pass information to:

• Browser speech recognition: If you turn on voice commands, your browser may process audio or route it through its speech service before Arvocado receives text.
• Real estate agents and private sellers: When you send an enquiry, the agent or private seller receives your name, email, phone and message so they can reply.
• Marketplace professionals: When you request an introduction, the professional receives your name, email, phone, project area and note so they can reply.
• Your compatibility partner: If you accept a pair invite, your saved listings become visible to that partner.

Some of these providers are located outside Australia, in the United States, Switzerland, Germany, the United Kingdom and Singapore. Under APP 8 we take reasonable steps to ensure overseas recipients handle your data consistently with the Australian Privacy Principles, relying on their contractual commitments and their own privacy programmes.

Listings come from licensed agents and from private sellers. Private sellers are responsible for the accuracy of their listing. We don’t independently verify property details, photos, prices, or inspection times. If you believe a listing contains inaccurate personal information about you (e.g. you’re the vendor and something’s wrong) contact hello@arvocado.au and we will investigate. Agents subject to the Estate Agents Act 1980 (Vic) and equivalent state legislation remain the primary source of truth for their listings.

Arvocado sets only its own cookies, listed below. No third-party tracking cookies. No advertising identifiers.

These things stay in your browser’s storage on this device:

• Money inputs. The income, savings and commitments you enter in your plan.
• Drafts. A code that finds your listing draft again. An unsent listing request, kept until you close the tab.
• Plans. Saturday plans and decision strategies.
• Guest game. An Arvocado Play run you start without an account.
• Preferences. Recently viewed listings, explore filters and push opt-in.

Signing out clears the money inputs in your plan. To clear the rest, delete this site’s data in your browser settings.

If you’re signed in and have opted in, we may email you when: (a) a saved listing changes (price, inspection time, new photos, status); (b) new listings match a saved search; (c) a saved coming-soon listing goes live; (d) your compatibility partner saves a listing; (e) your rooms have open tasks, stuck board items or coming inspections (the room digest). Each alert email says how to turn it off, and a coming-soon notice is sent once only. Alert delivery (email, push, both, or Muted) is controlled from your profile.

When you send an enquiry, we email it to the agent or private seller. They can reply to you directly.

Account data is kept while your account is active. To delete your account, open Profile, then choose Delete my account. We queue the deletion and confirm by email. If you can’t use the app, email hello@arvocado.au.

When we delete your account, it is removed from Supabase authentication and cascading data (saves, tags, notes, searches, push subscriptions, compatibility pairs) is removed. Enquiries you sent to the agent or private seller remain in their inbox. We can’t retract those. Stripe retains transaction records independently for its own legal and tax obligations.

Under the Privacy Act 1988 (Cth) you can:

• Ask what personal information we hold about you.
• Ask us to correct information that is inaccurate, out of date, or incomplete.
• Ask us to delete your information (we will, subject to legal retention obligations).
• Complain about how we handle your information.

Email hello@arvocado.au and we will respond within 30 days. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner.

All traffic is HTTPS. Your sign-in cookie is sent only to Arvocado. You can sign in with a code we email you, or with a password. Supabase Auth stores passwords in hashed form. We never store or log them. The database checks every request, so one user can’t read another user’s private records. The master database key, which skips those checks, stays in our server settings and never reaches your browser. No system is unbreakable; use a secure email account and keep your device locked.

Arvocado is aimed at adults making property decisions. We don’t knowingly collect personal information from anyone under 18. If you believe an under-18 has created an account, email hello@arvocado.au and we’ll remove it.

We may update this policy as the service evolves or as Australian privacy law changes. Material changes will be noted on this page and, for signed-in users, notified by email. Continued use after an update constitutes acceptance of the revised policy.

Privacy questions or requests: hello@arvocado.au. See also our Terms of Service.