Privacy Policy

Who we are

Entity	Begg Tech Group Pty Ltd trading as BYR Real Estate
ABN	71 656 734 342
Privacy contact	[email protected]

In this policy "we" and "us" and "BYR" mean the entity above.

What we collect

Information you give us

• Your email address and whether you use BYR as a buyer or agent.
• Your brief. This holds suburbs, budget, bedrooms and what matters to you, your timing, your finance position and any notes you choose to include.
• Messages you send or receive through the platform. Replies to a brief are an example.
• Anything else you send us by email.

Information collected automatically

• A one way hashed version of your IP address. We use it for rate limiting and abuse prevention. We do not store your raw IP address in our application database.
• A session cookie called byr_sess so you stay signed in. It contains no personal information.
• Standard web server logs kept by our hosting provider.
• Aggregate visit statistics collected by our analytics provider. See the analytics section below.

We do not ask for sensitive information such as health or financial account details. Please do not send it through your brief.

Why we collect it, and what we do with it

• To create and operate your account (we use passwordless sign-in codes sent to your email).
• To publish your brief to relevant agents, owners and off market sellers so they can respond to you.
• To pass replies between you and the people responding.
• To produce anonymised, aggregated demand statistics (see below).
• To keep the service secure, prevent abuse, and meet our legal obligations.
• To contact you about the service. If we send optional updates, you can opt out at any time.

Who we share it with

Agents, owners and sellers can respond. When you post a brief its content is made available to registered agents, owners and off market sellers so they can respond. That content includes suburbs, budget, bedrooms and what matters to you and your timing. Your email address is not published to them. Replies come through BYR and you choose who to continue talking to.

Service providers. We use third parties to run the service. These include our hosting provider and an email delivery provider. They may handle personal information only to provide those services to us.

Aggregated demand data. We publish statistics about buyer demand. An example is how many buyers want a given suburb and the range of their budgets. This data is aggregated and does not identify you. Where too few buyers exist in an area for aggregation to be safe we withhold the detail rather than publish it.

We do not sell your personal information.

Analytics

We use two analytics services, and they behave differently, so it is worth being clear about which does what.

Plausible Analytics is a privacy focused service. It does not use cookies, does not collect or store personal information, and does not track you across other websites or build a profile of you. What it records is aggregate: the page visited, the referring site, the country, and the browser and device type. None of that identifies you.

Google Analytics works differently and we would rather say so than leave you to find out. It does set cookies on your device, and it collects your IP address, approximate location, device and browser details, and the pages you view and actions you take on the site. That information is processed by Google, which means it is handled and stored outside Australia, including in the United States. Depending on your Google account settings, Google may connect what it records here with activity on other sites.

If you would rather not be measured by Google Analytics, you can install Google's opt out browser add on, block the cookies through your browser settings, or use a content blocker. None of that affects your ability to use BYR, post a brief, or receive replies.

What it records is aggregate. Examples are the page visited, the referring site, the country, and the browser and device type. None of that identifies you as an individual.

Plausible processes and stores this data on servers in the European Union. You can read how they handle data at plausible.io/privacy.

We do not run analytics on our internal admin pages.

Overseas disclosure

We turn the plain English wording of your brief into structured requirements. To do that the text of your brief is sent to Anthropic's Claude API for processing. Anthropic is located outside Australia and may process this data in the United States.

Only the brief text is sent for this purpose. Your email address and account details are not sent. If you would prefer your brief not to be processed this way then contact us at [email protected] and we can take your brief manually instead.

Our email and hosting providers may also store or process data overseas, as does Google Analytics, which processes site usage data in the United States.

Security and retention

We take reasonable steps to protect personal information. These include transport encryption over HTTPS, hashed sign in codes with a short expiry, hashed IP addresses and restricted access to our systems. No system can be guaranteed completely secure.

We keep your information while your account or brief is active. We also keep it for as long as we need it for the purposes above or to meet legal obligations. You can ask us to delete your account and briefs at any time.

Access, correction and complaints

You can ask us for a copy of the personal information we hold about you. You can ask us to correct it or delete it. Email [email protected] and we will respond within a reasonable period. We may need to verify who you are first.

If you think we have mishandled your personal information then contact us first and we will try to resolve it. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

We may update this policy as the service develops. The current version is always on this page. The date it was last updated is shown at the top.