PrivacyPolicy.

DomeAgent is operated by Dome Technologies Australia Pty Ltd (ACN 702 017 963, ABN 24 702 017 963), trading as DomeAgent (“we”, “us”, “our”). This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit domeagent.app or domeagent.com.au, use the DomeAgent app at go.domeagent.app or app.domeagent.com.au, view or enquire on a listing page we host, or otherwise deal with us. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who this policy is about

DomeAgent is a marketing tool for real estate agents. This policy covers:

• Customers: agents and agency staff who hold a DomeAgent account.
• People our customers add: presenters shown on a listing, colleagues invited to an agency, and other people whose details an agent enters.
• Members of the public: people who visit our websites, view a published listing page, send an enquiry about a listing, or contact us.

2. What we collect

Your account

• Your name, email address and mobile number. We verify your mobile number by SMS when you sign up.
• Your sign-in details. If you sign in with a password, it is held in hashed form by our authentication provider. You can also sign in with Google, Microsoft or, for Enterprise customers, single sign-on, in which case we receive your name and email address from that provider.
• The details you choose to show on your marketing: your title, contact phone, contact email and headshot.

Your agency and billing

• Your agency's name and brand kit (logos, colours, tagline, website, phone, email, address, licence line and social links), and who belongs to the agency and in what role.
• Invoicing details such as the business name, ABN, entity type, billing contact and billing address.
• Your orders, subscriptions and tax invoices. Card payments are processed by Stripe. We do not see or store your full card number: we keep only the card brand, last four digits and expiry date so we can show you which card is on file.

Listings and content

• The property addresses and listing details you enter, the photos, logos and other files you upload, and the images, videos, floor plans and designs created with DomeAgent.
• Property information we retrieve for an address you enter, from public sources: listing details, photos and floor plans already published on online listing portals, lot boundaries from state land information services, and road and map data.

People you add

• Presenters on a listing: name, title, phone, email and headshot.
• The email addresses of people you invite to your agency.

If you give us someone else's personal information, you must have their permission and tell them how it will be used, including that presenter details appear publicly on published listing pages.

Enquiries and messages

• When someone enquires on a published listing page, we collect their name, email address and, if they provide them, their phone number and message.
• When you use our contact form, we collect your name, email, phone, agency, the topic and your message.

Services you connect

• Canva: when you connect your Canva account, we receive your Canva user and team identifiers and display name, and access tokens that we store encrypted. We read only the designs and folders you choose to work with, and when you ask us to, we save your listing's images, your agency's logos and presenters' headshots into your Canva account.
• Facebook and Instagram: when you connect Facebook Pages or Instagram professional accounts, we receive from Meta the connecting person's Facebook or Instagram user ID and name, the name, ID and profile picture of each Page and Instagram account chosen, the name of the business portfolio each Page belongs to, and access tokens that we store encrypted. We use them only to publish the posts, Reels and stories you compose or schedule in DomeAgent, and we keep a record of each one: the accounts it went to, when, and its link. If you share a Page, Instagram account or YouTube channel with your agency, people in your agency can publish to it through DomeAgent until you or an agency owner or admin stop sharing it. We look at a Page's or account's recent posts only to confirm that ours went out and to link to them, and keep nothing about your other posts. We do not read your messages, followers or comments.
• YouTube: DomeAgent uses YouTube API Services. When you connect a YouTube channel, we receive from Google the channel's ID, name, handle and picture, and a refresh token that we store encrypted. We use them only to upload the films you choose to that channel, with the title, description and visibility you set, and to check that YouTube has finished processing each upload; we keep a record of each one: the channel it went to, when, and its link. We do not read your other videos, comments, subscribers or analytics. By connecting a channel you agree to be bound by the YouTube Terms of Service, and Google handles the information it holds under the Google Privacy Policy.
• CRM systems: when your agency connects a CRM, we store its connection credentials encrypted and copy your listing records, including listing details, photos and the listing agents' email addresses. We deliberately do not store vendor names, contact details or commission information from your CRM.

Technical and usage information

• Your IP address, browser and device information, and records of how you use our websites and app, kept in server logs.
• Error reports when something goes wrong, which may include your user ID and email address so we can fix the problem.
• Cookies and similar technologies, described in section 7.

3. How we use it

• To create and run your account and agency, and to provide DomeAgent.
• To process your listings and files, including generating enhanced and staged images, aerial images, boundary markups, floor plans and videos.
• To take payments, collect deferred payments, and issue tax invoices.
• To verify your identity and prevent fraud and abuse. For example, a mobile number can only verify one account, and each account can only receive one free first-listing offer.
• To send you emails about your account, orders, payments and security, such as receipts, invoices, verification codes, invitations and payment reminders. We do not currently send marketing emails; if we start, every one will include a way to unsubscribe.
• To publish listing pages you choose to publish, and to pass enquiries to the agents on that listing.
• To publish the posts you compose or schedule to the Facebook Pages, Instagram accounts and YouTube channels you connect.
• To respond to your enquiries and provide support.
• To keep our services secure, diagnose problems and improve them.
• To measure the effectiveness of our advertising (section 7).
• To comply with our legal obligations.

We do not sell personal information.

We share personal information with the service providers that help us run DomeAgent, such as providers of hosting, payments, email and SMS, AI processing, error monitoring and analytics, only as needed for them to provide their services to us. We also share it:

• With other members of your agency, according to their role (for example, marketing and admin roles can see the agency's listings).
• Publicly, when you publish a listing page: the listing content and each presenter's name, title, headshot, phone and email are visible to anyone with the link.
• With the agents on a listing, when someone sends an enquiry about it.
• With the services you connect (Canva, Facebook, Instagram, YouTube and your CRM), when you connect them. Anything you publish to Facebook or Instagram becomes subject to Meta's terms, and anything you upload to YouTube to YouTube's; each is visible to whoever that account's audience, or the video's visibility, allows.
• With professional advisers, a purchaser or successor if our business is sold or restructured, and government, regulatory or law enforcement bodies where required or authorised by law.

4. Artificial intelligence

Many DomeAgent tools use artificial intelligence. To produce an output, we send the relevant inputs, such as your photos, listing details and brand assets, to AI model providers, which process them to return the result. Descriptions of your photos are also generated by AI to help build videos and captions. We do not use your content to train AI models of our own.

5. Overseas disclosure

Our database, file storage and application servers are hosted in Sydney, Australia. Some of our service providers, including providers of payments, email and SMS, AI processing, error monitoring, analytics and content delivery, and the services you connect, process personal information outside Australia, mainly in the United States and in other countries where they or their sub-processors operate. We take reasonable steps to ensure these providers protect personal information consistently with the APPs.

6. Storage and security

We protect personal information with measures including encryption in transit, role-based access controls, and encryption at rest for the credentials and access tokens of services you connect. Media files such as photos, generated images and videos are stored at long, hard-to-guess web addresses so they can be displayed, shared and published; anyone who has one of those addresses can view that file. No online service can be guaranteed completely secure. If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as the Privacy Act requires.

7. Cookies and advertising

• Essential: the app uses cookies and your browser's local storage to keep you signed in and to remember preferences such as layout and recent activity. Our payment form, provided by Stripe, uses cookies to help prevent fraud.
• Product analytics: our website and app use PostHog, with a cookie, to understand how they are used — which pages are visited, where visitors came from, and what they click — so we can find and fix what isn't working. In the app, PostHog also records sessions (what appears on screen and how you move through it) with everything you type masked, so it never records what you enter in a form. Once you sign in, this is linked to your account. Published listing pages are not tracked by PostHog. You can limit this through your browser settings or a tracker blocker.
• Advertising measurement: our websites and app use the Meta Pixel, which tells Meta when a page is viewed and when you send our contact form, finish creating your account, open the checkout or make a payment. For those same moments our servers also tell Meta directly, using one-way hashed versions of your email address, phone number, name and account ID, together with your IP address, browser details and the pixel's cookie identifiers, plus the order value and currency for a payment. Meta may use this information to measure and improve our ads and in line with its own privacy policy. You can limit this through your browser settings, an ad or tracker blocker, or your Meta ad preferences.

8. How long we keep it

• We keep your account, agency and listing information for as long as your account is open, and for a reasonable period afterwards unless you ask us to delete it.
• Copies of generated files held by our generation platform are deleted 90 days after they are made (7 days if the job failed). The copies in your account remain until you delete them or your account is closed.
• We keep order, payment and tax invoice records for as long as tax and accounting laws require, usually at least five years.
• After an account is closed, we keep a one-way hash of its verified mobile number so the free first-listing offer cannot be claimed again.
• When information is no longer needed, we delete or de-identify it.

9. Access, correction and deletion

You can update most of your details yourself in the app. You can also ask us for access to the personal information we hold about you, to correct it, or to delete it (subject to any legal obligation to keep it) by emailing hello@domeagent.app. To close your account, email us from your account's email address. We will respond within 30 days.

If you sent an enquiry about a listing, the agents on that listing hold your details too; you can also contact them directly.

You can disconnect Canva at any time in Account → Connected apps, which also revokes DomeAgent's access in your Canva account, and your agency can disconnect a CRM at any time.

You can disconnect your Facebook and Instagram in Account → Connected apps, and an agency owner or admin can stop sharing an account with the agency in Agency → Social. You can also remove DomeAgent in your Facebook or Instagram settings and ask for the information we received from Meta to be deleted; we delete it automatically. How to request deletion explains each way and shows the status of a request.

A YouTube channel is disconnected the same way, in Account → Connected apps, which deletes the token and channel details we hold and revokes DomeAgent's access at Google. You can also revoke it yourself at any time in your Google Account's third-party connections. Videos already uploaded stay on your channel until you delete them in YouTube.

10. Complaints

If you think we have mishandled your personal information, please contact us first at hello@domeagent.app and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

11. Children

DomeAgent is a business service and is not intended for anyone under 18.

12. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above and, if the changes are significant, tell account holders by email or in the app.

13. Contact us

Dome Technologies Australia Pty Ltd, trading as DomeAgent. Email hello@domeagent.app.