Privacy Policy

Who we are and the scope of this policy

For personal information collected through this website and for the account, billing and marketing information of prospective and active customers, PropertyStack Software Pty Ltd is the controller — meaning we decide why and how that information is processed. You can reach us at privacy@propertystack.ai, or by writing to PropertyStack Software Pty Ltd, 315 Brunswick Street, Fortitude Valley QLD 4006, Australia; for a prompt response, we recommend contacting us by email. We have designated a Privacy Officer, who is accountable for our compliance with applicable privacy laws; privacy questions, requests and complaints may be directed to our Privacy Officer at privacy@propertystack.ai.

PropertyStack also provides a product application (app.mypropertystack.io) that our business customers use to run their short-term rental operations, including guest messaging, multi-calendar and channel management, tasks and maintenance, trust accounting, owner, guest and contractor portals, a direct booking site, PS Pay card payments, PS Verify guest identity and booking verification, smart locks, analytics and upsells. When our customers use that application to process personal information about their own guests, owners and contractors, the customer is the controller and PropertyStack acts as a processor on their instructions. That processing is governed by the customer's agreement with us and our Data Processing Addendum, not by this policy. This policy governs the limited categories of data for which PropertyStack itself is the controller, as described below.

• This policy covers: visitors to this website; people who contact us or request resources; users of the on-site assistant; and the account, billing and marketing data of our customers and their authorized users, for which we are the controller.
• This policy does not fully cover: personal information about a customer's guests, owners or contractors that is processed inside the product application on the customer's behalf, which is governed by our Data Processing Addendum where we act as processor.

Personal information you provide to us

We collect the information you choose to provide when you interact with this website. Depending on how you engage with us, this includes:

• Contact and callback requests. When you submit our contact form, we collect your full name and phone number, and optionally your company name, portfolio size and any free-text message you include. Submitting the form is an explicit request for us to contact you.
• Resource and playbook downloads. When you request a downloadable resource or playbook, we collect your phone number so we can deliver it and follow up.
• On-site assistant conversations. When you use our on-site assistant ("Ask PropertyStack"), the voice and/or text of your conversation is streamed to our sub-processor ElevenLabs Inc. to power a live, interactive demonstration while the assistant is open. Our AI providers process this data solely to provide the service to us; we do not permit them to use it to train their general-purpose models. You control what you say or type; please do not enter sensitive personal information into the assistant.
• Engagement log linked to your activity. As you interact with the site, your browser temporarily records demonstration activity in session storage — the inputs and results of our return-on-investment (ROI) calculator (such as property count, hours per property, hourly value, computed savings and ROI multiple), a transcript of your assistant conversation (capped at 40 turns / 8,000 characters), and a randomly generated session identifier. This engagement log is used in two ways. First, when you submit the contact form, the log is attached to your submission unconditionally, so that our team has the context of the demonstration you have asked us to follow up on; submitting the form is your explicit request to be contacted with that context. Second, where you have given consent through our cookie banner, a copy of the engagement log may also be sent to our lead-routing recipient (currently Slack) when you leave or close the page, using a background "beacon" request, even if you have not submitted the contact form; if you decline analytics cookies, this page-exit transmission does not occur. In both cases the information is sanitized on our servers before it is stored or forwarded.
• Other correspondence. If you email us (for example at privacy@propertystack.ai, legal@propertystack.ai, security@propertystack.ai or support@propertystack.ai) or otherwise communicate with us, we collect the information contained in that correspondence.

Do you have to provide this information?

Providing this information is voluntary. It is not a statutory or contractual requirement, and you are not under an obligation to provide it. However, we need certain details in order to act on your request, and there are consequences if you choose not to provide them.

If you do not provide your name and phone number through the contact form, we will be unable to respond to your inquiry or return your call. If you do not provide your phone number when you request a resource or playbook, we will be unable to deliver the requested resource. If you choose not to enter information into the on-site assistant, it will be unable to respond to you.

Notice at collection

At or before each point where we collect personal information on this website — the contact form, the resource and playbook download forms, and the on-site assistant — we provide, or link to, a concise notice describing the categories of personal information collected, the purposes of collection, a statement that we do not sell or share your personal information, and a link to this Privacy Policy. This satisfies the notice-at-collection requirement under the CCPA/CPRA and the collection-notice requirement under APP 5.

Information we collect automatically

Analytics (only with your consent). If you accept analytics cookies, we use Google Analytics 4 (provided by Google LLC) to understand how the site is used. In that case we collect standard usage data such as the pages you view, your approximate location (derived from your IP address), your device and browser type, and how you reached our site (for example the referring page). If you do not consent, analytics is blocked by default and this data is not collected. See our Cookie Policy for the specific cookies involved.

Advertising attribution (only with your consent). If you accept cookies, we also use HYROS (provided by HYROS Inc.) to measure which of our own advertisements, campaigns and referral links bring visitors to this website, and whether a visit leads to an inquiry. For that purpose the HYROS script may record the address of the page you landed on — including any advertising click identifiers carried in that address — the pages you view on this site, whether you submitted a form, and identifiers stored in first-party cookies or browser storage on our own domain. We use this to measure our own marketing only: we do not use it to serve you personalized advertising on this website, and we do not use it to build advertising profiles about you for other companies. If you decline, the script is not loaded and this data is not collected.

Advertising and campaign measurement through HubSpot and Meta (cookies only with your consent). Where these are enabled, we also use HubSpot's website tracking script (HubSpot, Inc.) and the Meta pixel (Meta Platforms, Inc.) for the same purpose of measuring our own marketing. If you accept cookies, these set the first-party cookies listed in our Cookie Policy, which let an inquiry you submit be linked to the visit — and the advertisement or link — that produced it. Separately from cookies, your browser records how your visit began (the first page you opened, any campaign or advertising click identifiers in its address, and the website that referred you) in temporary session storage on our own domain; if you submit one of our forms, those details are sent with your inquiry and stored with your record in our CRM so we know which campaign produced it, and if you do not submit a form they are erased when you close the tab. When you do submit a form, we also report that conversion to Meta from our own servers, including an irreversibly hashed (SHA-256) form of the contact details you submitted, your IP address and your browser user-agent string; Meta uses these only to match the conversion to an advertisement. Because this server-side report is a consequence of the inquiry you chose to send us rather than of a cookie, it is not controlled by the cookie banner. We do not use any of this to serve you personalized advertising on this website, to build advertising profiles about you for other companies, or to sell or share your personal information for cross-context behavioral advertising.

Server and security logs. Like most online services, our hosting infrastructure automatically records technical information — including IP addresses, timestamps, requested URLs and user-agent strings — in server logs. We process this information under our legitimate interests (GDPR Art 6(1)(f)) in operating the site, detecting and preventing fraud, abuse and security incidents, and keeping the service reliable and secure. This processing is necessary for those purposes and is independent of cookie consent, because it does not rely on storing or reading information on your device beyond what is strictly necessary to deliver and protect the site. We retain these logs for the period stated in "How long we keep personal information."

We do not deliberately collect special-category or sensitive personal information through this website, and we ask that you not submit it through our forms or the assistant.

Cookies and similar technologies

We use a small number of cookies and browser-storage technologies. A strictly necessary first-party cookie records your analytics consent choice. Google Analytics cookies, and the first-party cookies and storage used by our advertising-attribution provider, are set only after you accept, and analytics is blocked by default under Google Consent Mode v2. We also use functional session storage to run features such as the on-site assistant; this is cleared when you close the tab and is not used for cross-site tracking.

Separately from web analytics, our site can transmit the engagement log described under "Personal information you provide to us" to our lead-routing recipient when you leave a page, using a background "beacon" request. This is a functional transmission of your demonstration activity rather than analytics measurement, and it occurs only where you have given consent; declining analytics cookies through the consent banner or the "Cookie settings" control prevents it.

For a full description of each cookie, its purpose, provider and duration, and for how to change your choice at any time using the "Cookie settings" control, please see our Cookie Policy.

Purposes for which we use personal information, and our legal bases

We use personal information only for the purposes set out below. Where the EU GDPR or UK GDPR applies, we rely on the legal bases indicated. In Australia, we collect, use and disclose personal information in accordance with APP 3 (collection) and APP 6 (use and disclosure) — that is, for the purposes for which it was collected, for directly related purposes you would reasonably expect, or as otherwise permitted by law.

• Responding to your inquiry, calling you back and delivering requested resources, including recording your inquiry in our CRM and notifying our team by SMS so someone calls you back promptly. Legal basis: performance of a contract or taking steps at your request prior to entering into a contract (GDPR Art 6(1)(b)), and/or our legitimate interests in responding to business inquiries and providing information about our services (Art 6(1)(f)).
• Operating the on-site assistant and running product demonstrations you initiate. Legal basis: our legitimate interests in providing an interactive demonstration that you have chosen to use (Art 6(1)(f)), and, to the extent you supply information, steps taken at your request (Art 6(1)(b)).
• Attaching the engagement log to your inquiry when you submit the contact form. Legal basis: the same bases as responding to your inquiry — because submitting the form is your explicit request to be contacted with that context (Art 6(1)(b) and/or (f)).
• Transmitting the engagement log to our lead-routing recipient on page exit (the background beacon). Legal basis: your consent (Art 6(1)(a)). This transmission occurs only where consent has been given, and you can prevent or stop it at any time by declining analytics cookies or withdrawing your consent through the "Cookie settings" control.
• Analytics and measuring site usage. Legal basis: your consent (Art 6(1)(a)), which you may withdraw at any time.
• Measuring the effectiveness of our own advertising and campaigns (attribution), including linking a visit and any inquiry back to the advertisement or link that brought you here. Legal basis: your consent (Art 6(1)(a)), which you may withdraw at any time through the "Cookie settings" control.
• Sending you marketing about our products where you have requested it or are otherwise permitted to receive it. Legal basis: for electronic marketing to individuals, your consent, or the narrow "soft opt-in" where it is available under the EU ePrivacy rules and the UK Privacy and Electronic Communications Regulations (PECR); we rely on our legitimate interests in business-to-business marketing (Art 6(1)(f)) only for corporate and business subscribers where PECR and equivalent rules permit. In Australia we send commercial electronic messages in accordance with the Spam Act 2003 (Cth), always with an unsubscribe facility and sender identification, and consistent with APP 7 on direct marketing. You may object to direct marketing at any time (Art 21).
• Securing, maintaining and improving the website and preventing fraud and abuse. Legal basis: our legitimate interests in keeping the site safe, reliable and useful (Art 6(1)(f)).
• Complying with legal obligations, responding to lawful requests, and establishing, exercising or defending legal claims. Legal basis: compliance with a legal obligation (Art 6(1)(c)) and/or our legitimate interests (Art 6(1)(f)).

How we share personal information

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. We disclose personal information only in the limited circumstances described here.

Service providers (sub-processors). We share personal information with vendors who process it on our behalf, under contract and on our instructions, to run this website. Our current sub-processors for the marketing website are:

• Vercel Inc. — website hosting and content delivery (United States).
• Google LLC — Google Analytics 4, only where you have accepted analytics cookies (United States).
• HYROS Inc. — advertising-attribution measurement for our own marketing campaigns, only where you have accepted cookies (United States).
• ElevenLabs Inc. — powers the on-site voice/text assistant and receives your conversation when you use it (United States).
• Slack Technologies LLC — our lead-routing recipient, which receives your contact and resource submissions, together with the attached engagement log, via a secure incoming webhook so our team can follow up (United States).
• HubSpot, Inc. — our customer relationship management (CRM) system, which receives your contact and resource submissions so our team can record and follow up on your inquiry, together with the campaign details described above; where you have accepted cookies, its website tracking script also links your submission to the visit that produced it (data hosted in Australia).
• Meta Platforms, Inc. — measures whether our own advertising produced your inquiry. It receives an irreversibly hashed form of the contact details you submitted, for matching only, and — where you have accepted cookies — sets the pixel cookies described in our Cookie Policy (United States).
• Twilio Inc. — sends our team an SMS notification containing your inquiry so we can call you back promptly (United States).

Other disclosures

• Legal and regulatory disclosures. We may disclose personal information where we believe in good faith it is necessary to comply with a law, regulation, legal process or enforceable governmental request, to enforce our terms, or to protect the rights, property or safety of PropertyStack, our users or the public.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale or transfer of assets, personal information may be transferred as part of that transaction, subject to the continued protection of this policy or a successor policy.
• Product sub-processors. When you become a customer and use the product application, additional sub-processors apply to the data processed there. These currently include Kovena — our third-party payments provider, which processes cardholder data to deliver PS Pay card payments; card data is handled by Kovena and is not stored on PropertyStack servers, and Kovena's own terms and privacy policy also apply to payment processing (Australia); Twilio Inc. — SMS and telephony (United States); Twilio SendGrid — transactional email (United States); ElevenLabs Inc. — AI voice and conversation features (United States); Google LLC — analytics (United States); Vercel Inc. — web hosting (United States); plus cloud infrastructure providers located in Australia and the United States. The authoritative, current list of product sub-processors, including their locations, accompanies our signable Data Processing Addendum, which is available on request from legal@propertystack.ai. We give customers at least 30 days' notice of new sub-processors, with a right to object.

International data transfers

PropertyStack is based in Australia, and most of the website sub-processors listed above are located in the United States. As a result, your personal information may be transferred to, stored in and processed in the United States and in other countries whose data-protection laws may differ from those of your own country.

For the purposes of APP 1.3, we are likely to disclose personal information to overseas recipients. Our website sub-processors — Vercel Inc., Google LLC, HYROS Inc., Meta Platforms, Inc., ElevenLabs Inc., Slack Technologies LLC and Twilio Inc. — are located in the United States. HubSpot, Inc. hosts our CRM data in its Australian data center. Where you become a customer, the product application relies on additional sub-processors located in Australia and the United States; the authoritative list, including the countries in which those recipients are located, is maintained in and provided with our Data Processing Addendum.

Where we transfer personal information internationally, we take steps to ensure it remains protected. For transfers from the European Economic Area and the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and, for the UK, the UK International Data Transfer Agreement or the UK Addendum to the Standard Contractual Clauses. For transfers of personal information out of Australia, we take reasonable steps consistent with APP 8 so that overseas recipients handle the information in a manner consistent with the Australian Privacy Principles. Under the Privacy Act 1988 (Cth), PropertyStack remains accountable for the handling of personal information by the overseas recipients to whom it discloses that information, and an act or practice by such a recipient that would breach the Australian Privacy Principles is treated as a breach by us.

You should also be aware that, while your personal information is in the United States or in other countries, it may be accessible to the courts, law enforcement and national-security authorities of those countries in accordance with their laws. You may contact us at privacy@propertystack.ai for more information about the safeguards we use.

How long we keep personal information

We keep personal information only for as long as necessary for the purposes described in this policy, including to respond to your inquiry, to meet our legal, accounting and reporting obligations, and to establish, exercise or defend legal claims. When personal information is no longer needed, we delete it or de-identify it, consistent with APP 11.2. Our current retention approach, which we review periodically, is as follows:

• Inquiry, callback and lead data (including the attached engagement log): retained for up to 24 months after our last contact with you, after which it is deleted or de-identified.
• On-site assistant conversations: processed to run the live session and, where captured in the engagement log, retained as part of that log for the same period as lead data — up to 24 months after our last contact with you.
• Assistant conversation data streamed to ElevenLabs Inc.: ElevenLabs processes your conversation solely to provide the assistant to us, under our agreement with it; we do not permit ElevenLabs to use this data to train its general-purpose models.
• Analytics data: Google Analytics event data is retained for up to 14 months; aggregated and de-identified reporting may be kept for longer.
• Advertising-attribution data: held in our account with HYROS Inc. for as long as it remains useful to measure the campaigns concerned, and reviewed periodically; where it is linked to an inquiry, it follows the retention period for lead data above.
• Server and security logs: retained for up to 12 months, after which they are deleted or de-identified in accordance with APP 11.2.
• Customer account, billing and administrative data: retained for the life of your account and for up to 7 years after closure where required by Australian tax and accounting law.
• On termination of a customer account, you may export your data for 30 days, after which we delete or de-identify it within a reasonable period, subject to any retention required by law.
• Cookie consent record: retained for up to twelve months, after which you will be asked for your choice again.

How we protect personal information

We use administrative, technical and physical safeguards designed to protect personal information against loss, misuse and unauthorized access, disclosure, alteration and destruction. Personal information is encrypted in transit using TLS, and we encrypt personal information at rest. Questions about our security practices can be sent to security@propertystack.ai.

No method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the relevant regulator as required by applicable law, including the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth) and, for individuals in Canada, the breach-of-security-safeguards reporting, individual-notification and record-keeping obligations under PIPEDA where there is a real risk of significant harm. For more information about our safeguards, contact security@propertystack.ai.

Your privacy rights

You have rights over your personal information. The specific rights available to you depend on where you live and which laws apply. The sections below summarize the main frameworks. To exercise any right, see "How to exercise your rights" below — you may always contact us at privacy@propertystack.ai.

Rights in the European Union and the United Kingdom (GDPR / UK GDPR)

PropertyStack does not currently offer or target its services to customers in the EU/EEA or the United Kingdom. Nevertheless, if you are in the EEA or the UK and the GDPR or UK GDPR applies to our processing of your personal data, you have the following rights, subject to conditions and exemptions in those laws:

• Access — to obtain confirmation of whether we process your personal data and a copy of it.
• Rectification — to have inaccurate personal data corrected and incomplete data completed.
• Erasure — to have your personal data deleted in certain circumstances (the "right to be forgotten").
• Restriction — to have our processing of your personal data restricted in certain circumstances.
• Objection — to object to processing based on our legitimate interests; you may object to direct marketing at any time and we will stop.
• Portability — to receive certain personal data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.
• Withdraw consent — where processing is based on consent (such as analytics), you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint — with your local supervisory authority. In the UK, this is the Information Commissioner's Office (ICO). We would appreciate the chance to address your concern first via privacy@propertystack.ai.

Rights in Australia (Privacy Act 1988 / Australian Privacy Principles)

If the Australian Privacy Principles apply to your personal information, you may request access to the personal information we hold about you (APP 12) and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading (APP 13). You may also ask us not to use or disclose your personal information for direct marketing (APP 7).

To opt out of direct marketing, you can use the unsubscribe facility included in every commercial electronic message we send, or email privacy@propertystack.ai. On request, and where it is reasonable and practicable to do so, we will also tell you the source from which we collected your personal information (APP 7.3(d)).

If you believe we have breached the Australian Privacy Principles, you can complain to us at privacy@propertystack.ai. We will acknowledge your complaint within 5 business days, investigate it, and aim to provide a substantive written response within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Rights for California residents (CCPA / CPRA)

If you are a California resident, you have the rights set out below, subject to verification and to exceptions in the CCPA/CPRA. In the preceding twelve months we may have collected the following categories of personal information, which we obtain directly from you and automatically from your device, and which we disclose for business purposes to the service providers listed under "How we share personal information": identifiers (such as name, phone number, IP address and a session identifier); commercial information (such as portfolio size); internet and other electronic network activity (such as browsing on our site and analytics data); approximate geolocation (derived from IP address); audio information (assistant voice input); and limited inferences. We use these categories for the purposes described in "Purposes for which we use personal information." We retain each category of personal information for the period, and according to the criteria, described in "How long we keep personal information." We do not collect sensitive personal information, as defined by the CPRA, through this website.

• Right to know — to request the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients.
• Right to delete — to request deletion of personal information we collected from you, subject to exceptions.
• Right to correct — to request correction of inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell your personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. We nonetheless recognize browser-based opt-out preference signals, including the Global Privacy Control (GPC), and will treat a valid signal as a request to opt out of the sale or sharing of personal information should our practices ever change; see the Cookie Policy for how these signals are handled. If our practices change, we will provide the required controls.
• Right to limit the use of sensitive personal information — we do not use or disclose sensitive personal information for purposes beyond those permitted without a limitation right.
• Right to non-discrimination — we will not discriminate against you for exercising your rights.
• Authorized agents — you may use an authorized agent to submit a request on your behalf, subject to proof of authorization and verification of your identity.
• "Shine the Light" (California Civil Code § 1798.83) — we do not disclose personal information to third parties for their own direct marketing purposes.

Rights in other US states (Virginia, Colorado, Connecticut, Utah)

If you are a resident of Virginia, Colorado, Connecticut or Utah, you may have rights to confirm whether we process your personal data and to access it, to correct it (where provided by your state's law), to delete it, to obtain a portable copy, and to opt out of targeted advertising, the sale of personal data and certain profiling. As noted above, we do not sell personal data or use it for targeted advertising. Where your state's law provides an appeal process, you may appeal a decision we make about your request by replying to our response or contacting privacy@propertystack.ai.

Rights in Canada (PIPEDA)

If you are in Canada, you may request access to the personal information we hold about you, including information about how it has been and is being used and an account of the third parties to whom it has been disclosed, and you may ask us to correct it. You may withdraw your consent to our processing at any time, subject to legal or contractual restrictions and reasonable notice. Our designated Privacy Officer is accountable for our compliance with PIPEDA and can be reached at privacy@propertystack.ai. If you have a concern about how we handle your personal information, please contact us first at privacy@propertystack.ai. You may also contact the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.

How to exercise your rights

To make a request, email privacy@propertystack.ai and tell us which right you wish to exercise. California residents may submit requests to know, delete or correct using either of two designated methods: (1) by email to privacy@propertystack.ai; or (2) in writing by post to PropertyStack Software Pty Ltd, 315 Brunswick Street, Fortitude Valley QLD 4006, Australia — although we recommend email for the fastest response. To protect your privacy and security, we will take reasonable steps to verify your identity before acting on a request — for example by asking you to confirm information we already hold, such as the phone number or email you used to contact us. We will not use verification information for any other purpose.

We will respond within the timeframe required by applicable law — generally within one month under the GDPR/UK GDPR (extendable for complex requests), within 45 days under US state laws (extendable as permitted), within 30 days of a written access request in Canada under PIPEDA (with any permitted extension notified to you), and within a reasonable time under Australian law. Exercising your rights is free, although we may charge a reasonable fee or decline to act on requests that are manifestly unfounded, excessive or repetitive, as permitted by law. If we cannot fully act on your request, we will explain why.

Children's privacy

This website and our services are directed to businesses and property professionals, not to children. Our services are not directed to, and we do not knowingly collect personal information from, children under 18. If you believe a child has provided us with personal information, please contact privacy@propertystack.ai and we will take appropriate steps to delete it.

Automated decision-making and profiling

The on-site assistant provides interactive information and demonstrations; it does not make decisions that produce legal effects concerning you or that similarly significantly affect you. We do not use your personal information for solely automated decision-making of the kind that would trigger the additional safeguards under Article 22 of the GDPR. Our AI providers process customer and visitor data solely to provide the service to us — we do not permit them to use it to train their general-purpose models — and we retain human oversight for consequential actions. The ROI calculator produces illustrative estimates based on the inputs you provide and does not make any decision about you.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we do, we will revise the "Last updated" date shown above and post the updated version on this page. If the changes are material, we will provide a more prominent notice as required by law. We encourage you to review this policy periodically.

How to contact us and make a complaint

If you have any questions, requests or complaints about this policy or our handling of personal information, please contact us:

• Privacy matters: privacy@propertystack.ai. Privacy questions, requests and complaints may be directed to our Privacy Officer, who can be reached at privacy@propertystack.ai. We acknowledge complaints within 5 business days and aim to resolve them within 30 days.
• Legal matters (including Data Processing Addendum requests): legal@propertystack.ai
• Security matters and vulnerability reports: security@propertystack.ai
• General support: support@propertystack.ai
• By post: PropertyStack Software Pty Ltd, 315 Brunswick Street, Fortitude Valley QLD 4006, Australia. For a faster response, please use the email addresses above.
• EU and UK representatives: PropertyStack does not currently offer or target its services to customers in the EU/EEA or the United Kingdom, and has no EU or UK customers. Accordingly, we have not appointed an EU or UK representative under Article 27 of the EU GDPR or the UK GDPR. If we begin offering services in those regions, we will appoint representatives and update this policy. Individuals in the EEA or the UK may contact us directly at privacy@propertystack.ai.
• Regulators: you may also complain to the Office of the Australian Information Commissioner (OAIC, oaic.gov.au); in the UK, the Information Commissioner's Office (ICO, ico.org.uk); in the EEA, your local supervisory authority; and in Canada, the Office of the Privacy Commissioner of Canada (OPC, priv.gc.ca).