Privacy Policy

1. Overview

SquareLease (squarelease.com.au) is operated by MCPDigital ABN 38 429 572 069. We are committed to protecting your privacy in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). For privacy enquiries, contact us at privacy@squarelease.com.au.

2. Search and calculator data

Our tenancy calculators (notice period, bond amount, rent increase checker, entry notice) run entirely in your web browser. No values you enter into a calculator are sent to our servers or any third party. Your calculator inputs stay on your device.

If you are logged in, search queries you run are stored in your search history so you can access them again. You can delete your search history at any time from your account dashboard. Anonymous searches are logged temporarily for abuse detection and are not linked to any individual.

3. AI Advisor

When you use the AI question feature, the following applies:

• •PII scrubbing — before your message is processed, we automatically detect and remove personal information including email addresses, phone numbers, street addresses, ABNs, and bank details. The scrubbed message is what gets sent to the AI model.
• •Message storage — your de-identified messages and the AI responses are stored for up to 30 days for abuse detection and to help us improve the service, then permanently deleted by an automated job.
• •Rate limiting — we store a cryptographically hashed version of your IP address (which cannot be reversed to identify you) to enforce daily question limits. These hashes are reset and deleted after 30 days.
• •No account required — the AI advisor does not require login. Sessions are anonymous unless you are signed in.
• •Subscriptions — if you are on a paid plan, we store your email address, Stripe customer ID, plan type, and monthly question usage to enforce your plan limits and bill you correctly. We do not store your card details — Stripe handles all payment data.

The AI advisor is powered by a frontier language model API. Your scrubbed messages are sent to the model provider for processing. No personal information reaches the provider due to our PII scrubbing step.

4. Account information

You do not need an account to use search, guides, or calculators. If you create an account, we collect:

• •Name and email address — used to identify your account and to send you alerts and support communications
• •Saved items and search history — stored against your account so you can access them from any device
• •Alert preferences — which states and topics you have subscribed to for law change notifications
• •Payment information — billing details processed by Stripe. We do not store card numbers, expiry dates, or CVVs.

5. Analytics

We use analytics to understand how the platform is used so we can improve it. Analytics data collected includes:

• •Pages visited and time spent
• •Referring website or search engine
• •General geographic location (country/city level — not precise)
• •Device type, browser, and operating system
• •Anonymised interaction data (clicks, scrolls)

Analytics data is not personally identifiable. We do not sell, share, or combine analytics data with any other data source.

6. Cookies

We use the following types of cookies:

• •Essential cookies — required for authentication and session management. These cannot be disabled without breaking login functionality.
• •Analytics cookies — used to understand website usage. You can opt out via your browser settings.

7. Third-party services

We use the following third-party services to operate the platform:

• •Vercel — website hosting and edge delivery
• •Supabase — database hosting (Sydney, Australia) for accounts, saved items, search history, and AI session data
• •Stripe — subscription billing and payment processing. Stripe stores your card details — we do not.
• •Resend — transactional email delivery (alerts, account emails, contact form responses)
• •OpenAI — AI language model provider for the advisor feature. Only your de-identified, PII-scrubbed messages are sent.

We do not use social media trackers or sell data to advertising networks.

8. How we use your information

• •To provide and improve the SquareLease platform
• •To send law change alerts you have subscribed to
• •To process subscription payments and manage your billing
• •To respond to support and contact enquiries
• •To detect and prevent fraud, abuse, and spam
• •To produce aggregated, anonymised analytics about platform usage

We do not sell, rent, or share your personal information with third parties for marketing purposes.

9. Data retention

• •Calculator data — never stored. It stays in your browser only.
• •AI advisor messages — stored for up to 30 days, then permanently deleted by an automated job.
• •Rate limit records (hashed IPs) — reset daily and deleted after 30 days.
• •Search history — retained for 12 months unless you delete it earlier from your dashboard.
• •Account data — retained while your account is active, plus 12 months after account closure.
• •Analytics data — retained for up to 26 months in line with standard analytics practices.

10. Children's privacy

SquareLease is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Security

The platform is served over HTTPS. Calculator data never leaves your browser. Account and AI session data is stored in an encrypted database hosted in Sydney, Australia (Supabase). IP addresses used for rate limiting are cryptographically hashed and cannot be reversed. If you believe your account has been compromised, contact us immediately at security@squarelease.com.au.

12. Your rights

Under the Australian Privacy Act 1988, you have the right to:

• •Know what personal information we hold about you
• •Request correction of any inaccurate information
• •Request deletion of your account and personal data
• •Opt out of marketing and alert emails at any time
• •Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

To exercise any of these rights, email privacy@squarelease.com.au. We will respond within 30 days.

13. External links

SquareLease links to external websites including state tenancy authorities, AustLII, and legal aid services. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal information.

14. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with an updated date, and registered users will be notified by email at least 14 days before changes take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.

15. Contact

For privacy enquiries or to exercise your rights: privacy@squarelease.com.au. For formal complaints, you may also contact the OAIC at oaic.gov.au. This policy is governed by the Australian Privacy Act 1988.