Privacy Policy

Last updated: 29 June 2026

This Privacy Policy explains how Bidside (ABN 25 623 741 334) collects, uses, and protects your information when you use the Bidside Chrome extension, portal, website, and related services ("Bidside"). We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

What we collect

• Account information. Your email address, profile name if supplied, and authentication details managed by our auth provider, Supabase. If you choose Google sign-in, Google provides the sign-in identity to Supabase.
• Buyer profile and preferences. If you complete onboarding or update your profile, we store the information you provide, such as budget, household details, family profile, preferred suburbs, property preferences, land-size or outdoor-space needs, must-haves, deal-breakers, and notes.
• Listing data you ask Bidside to analyse. When the extension detects or you ask Bidside to analyse a supported property listing on realestate.com.au or domain.com.au, it reads the publicly displayed information on that page, including address, price guide, bed/bath/car/land size, agent name, listing description, property type, inspection details, listing URL, and the listing's own photos and floor plan. This data is sent to our backend and selected service providers to generate the quick read or full brief.
• Generated briefs. The buyer's briefs Bidside produces are stored against your account so you can revisit them and share them.
• Shortlist and portal data. If you use the Bidside portal, we store the properties you shortlist, their listing URLs, status, comparison selections, notes, offer ceiling, due dates, and related tracking fields you choose to enter.
• Cached public listing analysis. To make Bidside faster and reduce repeat AI calls, we may cache generic quick reads and generated brief data for public listing pages by listing URL. This shared cache does not include your buyer profile, notes, account details, or payment data.
• Billing information. When you buy a Single brief, Search Pass, or subscription, payment details are collected by Stripe directly. We never see your card details; we only receive a confirmation of payment and a customer ID.
• Website interaction events. To measure whether launch campaigns are working, we may record first-party events such as Chrome Store CTA clicks, the page path, target URL, UTM source/medium/campaign/content, referring website host, and coarse device class. These events do not store raw IP addresses, payment data, buyer profiles, listing photos, or your general browsing history.
• Technical data. Standard server logs (IP address, request timestamps, user agent) for security and abuse prevention.

What we don't collect

• We do not request, store, or transmit your realestate.com.au or domain.com.au login credentials.
• We do not sell or share your data with advertisers or data brokers.
• We do not use cross-site advertising pixels or retargeting cookies in the Bidside extension, website, or portal.
• We do not track your general browsing history. The extension's content scripts only run on supported realestate.com.au and domain.com.au pages, and Bidside only sends listing data needed to provide the service.

How we use your information

• To provide free quick reads, full buyer's briefs, shortlist tracking, comparison tools, and buyer-profile fit analysis.
• To keep your account, generated briefs, credits, subscriptions, billing status, and portal data working across the extension and website.
• To cache generic public-listing analysis so repeat views of the same public listing can load faster.
• To measure first-party website and Chrome Store CTA performance during launch without using extension/listing data for advertising or retargeting.
• To prevent abuse, diagnose faults, improve reliability, and respond to support requests.
• To improve Bidside using aggregated or de-identified product usage patterns.

Chrome Web Store Limited Use

Bidside's use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use data accessed through the extension only to provide or improve Bidside's user-facing property research, brief generation, shortlist, account, billing, and support features. We do not sell that data, use it for advertising, or transfer it to others except to the processors listed below as needed to provide the service, comply with law, protect against abuse, or with your consent. First-party website CTA measurement is separate from extension listing data and is used only to understand launch funnel performance.

Third-party services we use

To deliver the service we send specific data to the following processors:

• Anthropic (Claude API) - receives listing data and selected analysis context for buyer-grade reasoning and brief synthesis.
• Google Gemini API - may receive listing data and listing images for faster visual reads, quick summaries, and structured brief sections.
• Kimi / Moonshot AI - may receive listing data and listing images if enabled for lower-cost visual or text analysis.
• PropRadar - receives the suburb and address to return comparable sales and suburb statistics.
• Google (OAuth, Street View, Geocoding, and Distance Matrix APIs) - provides Google sign-in when selected, and receives property addresses or coordinates to return map, street-view, geocoding, and commute information.
• Australian Bureau of Statistics API - receives area or suburb queries to return public Census statistics such as ownership mix.
• Supabase - handles account authentication and session management.
• Stripe - processes payments and stores billing details.
• Railway - hosts our backend infrastructure.
• Cloudflare - hosts and protects the Bidside website and portal.

Each of these providers operates under their own privacy policies and security standards.

How long we keep your data

• Account data and generated briefs are retained for as long as your account is active.
• Buyer profile, shortlist, portal notes, and comparison data are retained for as long as your account is active, unless you delete them sooner.
• Generic public-listing cache entries are retained according to listing status: usually about 24 hours for near-term auctions, 7 days for active listings, and 30 days for sold or withdrawn listings.
• First-party website interaction events are retained for up to 18 months so we can compare launch and campaign performance over time.
• Server logs are retained for 90 days.
• Billing records are retained for 7 years as required by Australian tax law.

Your rights

You may at any time:

• Request a copy of the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au) if you believe we have mishandled your data.

To make any of these requests, email hello@bidside.com.au.

Security

We use HTTPS for all communication, rely on Supabase for password and OAuth session security, and follow industry best practices for credential rotation and access control. No system is perfectly secure; we will notify affected users promptly in the event of a data breach as required by the Notifiable Data Breaches scheme.

Children

Bidside is not directed at people under 18 and we do not knowingly collect data from them.

Changes to this policy

We may update this policy from time to time. Material changes will be notified by email or in-product notice at least 14 days before they take effect.

Contact

Bidside · ABN 25 623 741 334
Email: hello@bidside.com.au