Privacy notice

This notice explains what Kerbready collects, why, where it is held and how to get at it. We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Who is who

The real estate agent using Kerbready decides what goes in and who it is sent to. We hold and process it for them. If you are a vendor or a trade and you want something changed or removed, you can ask us or the agent, and either way it gets done.

What we collect

About agents

• Name, work email, mobile, agency name, role and photo or initials.
• Branding you upload, such as a logo and an accent colour.
• Billing status from Stripe. We never see or store your card number.
• Sign in events and the pages you use, for security and support.

About vendors

• Name, email, mobile and the property address being prepared.
• The jobs on the plan, the quotes shown to you and what you approved, skipped or asked about.
• Approval records: the time, the price approved, your IP address and browser, so the agent and the trade have proof of instruction.
• Messages between you and the agent through Kerbready, and any photos you send.

About trades

• Name, business name, ABN if given, mobile, email, categories and suburbs served.
• Insurance expiry and any certificate you send in.
• Quotes, bookings, invoices and messages on jobs you were asked about.
• A private reliability score the agent uses to decide who to ask. It is never shown on a public page and never shared with other agencies.

Why we collect it

• To ask trades for quotes and to pass those quotes to the vendor.
• To record an approval and book the work.
• To send reminders, chase what is late and pass on an invoice.
• To show the agent the exceptions and a daily summary.
• To bill the agent and to meet our own legal and tax obligations.

We do not sell personal information. We do not use it to train third party AI models.

Who it is disclosed to

• The agent running the campaign, and their assistant if they have one.
• The vendor sees the trade's business name, price and dates. The trade sees the property address, the job and access notes.
• Our service providers, listed below, only as needed to run the service.
• Anyone the law requires, for example a court order.

Service providers and where data sits

• Database and file storage: Supabase, Sydney (ap-southeast-2), Australia. Your campaign data, messages and photos live here.
• Email: Resend, for sending and receiving campaign email.
• SMS: Twilio, on an Australian number, once texting is switched on.
• AI parsing: Anthropic, for reading a trade's reply and drafting a sentence. Message text is sent for that purpose and is not used to train models.
• Payments: Stripe, for the agent's per campaign fee only. Card details go straight to Stripe and never reach us.

Some of these providers process data outside Australia. We only use providers that commit to protections comparable to the Australian Privacy Principles.

How long we keep it

• Campaign data, including vendor and trade details, quotes, approvals and messages, is kept for 12 months after the campaign closes, then deleted.
• Approval records may be kept longer where a dispute is on foot, until it is resolved.
• If an agent deletes their agency, everything is hidden immediately and permanently purged after 30 days.
• Billing records are kept for as long as Australian tax law requires.

Marketing and opting out

Kerbready only sends messages about a property you are involved in. Every email has an unsubscribe link in the footer and every SMS to a trade ends with “Reply STOP to opt out”. STOP or unsubscribing stops all further messages to that address immediately. You can start them again from the same link or by replying START.

Security

Data is encrypted in transit and at rest. Access is limited to the agency that owns it, enforced in the database itself. Vendors and trades never get an account or a password, they get a single-use link. If a breach is likely to cause serious harm we will notify you and the OAIC as the Notifiable Data Breaches scheme requires.

Getting access, correction or deletion

Email hello@kerbready.com.au and say what you want. We will confirm who you are, then give you a copy, fix what is wrong or delete it, usually within 30 days. There is no fee. If you are not happy with how we handled it you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Cookies

The agent app sets a session cookie so you stay signed in. The vendor and trade pages set nothing. We do not use advertising or cross site tracking cookies.

Contact

Email hello@kerbready.com.au. That address reaches a person, not a queue, and it is the address to use for access, correction and deletion requests as well as anything else in this notice.

Read the terms