Privacy for report buyers

The WattleAddr Privacy Policy governs this product. It is published once so there is only one version of it. This page covers what buying a property report, using a console account and ordering for a client add, and nothing else. Last changed 18 October 2026.

The address you search

Both the text you type and the address it matches are held for thirty days, so a repeated lookup does not have to be made again. Then a job that runs daily deletes them.

Thirty days is what the code enforces, not an intention. The main policy describes the same mechanism for API customers, who can configure it; for this product it is fixed.

Your order

When you buy a report we keep your email, the address the report was about, the amount, and the payment provider's reference. Your card details are captured in your browser by the payment provider and never reach our server: we hold a token, not a card number.

An order is a tax record, so we keep it for seven years. That is a legal obligation and we cannot delete it earlier, even on request.

We keep a copy of each report's PDF with its order, for the same seven years, so it can be downloaded again.

Your report link

The link we email you is the only credential for a report. A report bought by card needs no account and no password, which means anyone you forward the link to can open the report. That is deliberate, because it lets you send it straight to your solicitor or broker, but it is worth knowing before you post it anywhere public.

Your console account

When you create an account at console.property.wattleaddr.com.au we hold:

• your email, your name, and a hash of your password (not the password);
• if you set up two-step verification, its secret and hashed recovery codes;
• the IP address and browser used to sign in, and to ask for a reset or confirmation link, to keep your account secure;
• a record of the Terms you accepted and when;
• the codes your firm used for a free trial or a discount, with when, the invoice or the free trial each went with, and for a free trial the firm's ABN at the time;
• your firms and your roles, and the email addresses of people you invite;
• your firm's legal name, ABN and billing email, once it starts a free trial or buys;
• its invoices, adjustment notes and refund requests, and the reports it ordered (see Reports ordered below);
• the logo your firm uploads for its reports, if it does, with who uploaded it and when we approved it or refused it (see Your firm's logo below);
• a log of what is done in your account and your firm (who, by an internal account ID, what, and when). If you delete your account, your entries become "deleted user".

This is held in a WattleDB database in Sydney, with backups in Melbourne. All of it stays in Australia. Card payments go through Pinch, covered below and in the WattleAddr Privacy Policy.

Our staff can see your firm's account, members, balance, invoices, refunds, reports ordered and log, only to support you and run the service. What they change is logged under their own ID.

How long we keep it:

• Account details: deleted when you delete your account, and in any case within 30 days.
• Tax records: invoices, adjustment notes and the record that a report was used are kept for 7 years, as the law requires. When the last person in a firm deletes their account, the firm is closed and keeps only those records, its name, legal name and ABN, the log of what was done in it, and any refund still waiting with its billing email and bank details. The address and reference on the record are cleared when the firm is closed, and at 7 years for a firm that stays open. The report itself, which shows the address, is kept with the order for 7 years.
• Codes your firm used: kept with the firm's invoices and its other tax records, so that a code is not used twice and a firm, a person and an ABN each have only one free trial. When you delete your account, the record no longer names you.
• Sign-in records, with the IP address and browser: until the sign-in expires. That is 30 days after it started, or 7 days after you last used it.
• Password-reset and email-confirmation links: until 7 days after they expire.
• Invitations: one that is not accepted is deleted 30 days after it was sent. An accepted one is deleted 30 days after it was accepted.
• The log of what is done in a firm: deleted 7 years after each entry.
• Funnel counts and the free check reference: see below.
• Bank details for a refund: see below.
• the reason we gave free reports, kept with the firm's records.
• Backups: a backup keeps a deleted record for up to 14 days.

Signing in

You sign in at the console, not here. When you press "Order a report" in the console, it sends you to this site and we ask the console who you are. We receive your console user ID, email, workspace name, workspace ID and role. You press Continue to confirm it, and we start a sign-in record that lasts 8 hours. We delete that record when you sign out, or within a day of it expiring. We also count sign-ins by workspace, without your user ID or email, and delete those counts after 13 months.

You can also order, view or email a report without leaving the console. Then the console sends us the details itself, server to server on our own machine, and not through your browser. We receive your user ID and email, your firm's workspace ID, name and legal name, and the address you chose. If you give them, we also receive your client's name, reference, email address and message. We use them to make the report, keep it, and send it. We keep them as described below.

Signing in uses four cookies. None holds a password.

• __Host-wprop_console_session, set by the console. It keeps you signed in to the console for up to 30 days, or 7 days after you last use it.
• __Host-wprop_console_mfa, set by the console while you finish two-step verification. It lasts 10 minutes.
• wprop_confirm, set here for 3 minutes while you confirm the sign-in. It holds no personal information.
• wprop_customer, set here. It keeps you signed in for 8 hours.

What the console counts

The console records these events: sign-up completed, email verified, workspace created, invitation sent, invitation accepted, pack invoice issued, pack paid and free trial started. We collect them from the console every few minutes. Each has a time and, where a firm exists, a workspace reference. That is a one-way hash of the firm's ID. We hold the firm's ID, so we can link the reference to the firm's account. It is not anonymous. An event holds no email, no name and no address.

The console keeps these events for 30 days. We keep them for 13 months.

The free check reference

When you reach the console from a free check, the link carries a random reference for that check. It is not your address. The console keeps it with your new account until you create a firm, and for 30 days at most, whether or not you ever create one. It goes on three of the events above: sign-up completed, email verified and workspace created. If you then buy a single report from that check, the reference is stored on the order, which we keep for 7 years like any order.

Reports ordered

Under Reports ordered, the console lists each report a firm ordered from its pack or Team: the address, the client reference, who ordered it, when, and a link to the report. There is a CSV of the same list. The firm's owner, admin and billing contacts see all of the firm's reports. A member sees only the reports they ordered. The address and reference are cleared at 7 years, and when the firm is closed. The report itself, which shows the address, is kept with the order for 7 years.

The address you type in the console

When you type an address in the console we send what you type to our address service (WattleAddr, in Australia) to suggest matches, and check whether a report is available. We do not keep what you type in the console. WattleAddr handles it under its Privacy Policy. Like any web address, what you type can appear in server logs here and at WattleAddr, which that policy covers. If suggestions are not available, "Find property" sends your browser to this site with the address in the web address (the URL), and the search here does the rest. Our 30 day rule for address text applies to it here. The console keeps the address of a report you actually order, in your firm's order record, as above.

Reports for your clients

When you order from your firm's pack or Team, we keep your firm's name as it was that day, who ordered, and any client name, client email, message and reference you type. If you ask, we send your client one email with the report attached, from "[firm] via WattleAddr Property". It names the member who asked us to send it, and replies go to them. We keep that member's email address with the order. That email names us and links to this page. 30 days after the order we delete the client's name, email address and your message, and, if another member sent it, that member's email address. The order, with your email, the address and your reference, is kept as a tax record for 7 years. If your client asks us not to send them reports, we keep a one-way code made from their email address, not the address itself, so we can refuse further emails to it. We keep it until they ask us to remove it.

Your firm's logo

If your firm uploads a logo, we accept common image types, convert it to a PNG sized for the report, and rebuild the file, which removes any hidden information such as a location or a camera name. We hold the logo until your firm removes it or the firm is closed. When the firm has an approved logo and orders a report, the console sends the logo to WattleAddr Property, on our own machine and not through your browser. Property keeps its copy of the logo while any report made with it is kept, up to 7 years, and then deletes it. The logo is also inside each report we delivered with it, so a logo you remove stays inside the reports made with it for that long. The report's reader sees the logo, with your firm's legal name.

Bank details for a refund

If you ask for a refund of a pack or Team, we collect the bank account name, BSB and account number to pay it, and for no other purpose. We keep the BSB and account number encrypted. We delete them once the refund is paid, declined or withdrawn. We keep the last 3 digits of the account number so you can recognise the account. If a request is still waiting 90 days after you gave the details, we delete them and ask you for them again, unless we have started the transfer to it. We handle the account for returning a duplicate payment the same way. Backups keep a copy for up to 14 days, then it is gone.

Card payments and email

Card payments for packs and Team are taken by Pinch. Your card details go from your browser to Pinch, not to us. We give Pinch the cardholder's name and an email address. Pinch keeps the card with its payment record. We do not see it. We keep Pinch's payment reference, the amount and the invoice number. The card-payment exception to data residency is in the WattleAddr Privacy Policy.

The console sends service emails only: sign-up and email confirmation, password reset, invitations, receipts, the 30 day reminders, and refund and payment notices. It sends them from our WattleAddr Property mail account.

Everything else

Data residency, the card-payment exception, server logs, who we disclose to, and how to ask what we hold or have it corrected are all in the WattleAddr Privacy Policy. Questions to hello@wattleaddr.com.au.