Privacy Policy

Ordus Property is a free suburb-level intelligence terminal for the Australian property market. This page describes what personal information we collect, why we collect it, and what we do with it. The short version: we collect your email so you can sign in, and we measure how the terminal gets used so we can improve it. We don't sell data and we don't run advertising trackers.

What we collect

• Email address — provided when you sign up for the full terminal. Used only to send sign-in links and, if you ask us, occasional product update emails. We do not use it for marketing without your explicit consent.
• Session cookie — set after you sign in so the terminal recognises your session. Strictly necessary; cannot be disabled if you want to stay signed in.
• Page views — which pages were loaded, when, and rough geography (country/region derived from IP at the edge). Collected by two tools: Cloudflare Web Analytics, which is cookieless and cannot identify you, and PostHog, described below.
• Product usage — what you do inside the terminal: which workspace you open, that you added a suburb (and which one), that you ran an estimate, that you created a share link, how long you were actively using the page, and what you typed into the screener's search box. This is stored against a random identifier held in a cookie in your browser. If you are signed in, we link that identifier to your account so we can tell repeat use from new visits.
• Session recordings — a replay of your visit reconstructed from page events: clicks, scrolling, and navigation between screens. We use these to find where the terminal is confusing or broken. See Session recordings below for what is excluded.
• Email-delivery logs — Resend retains delivery metadata (delivered/opened/bounced) for sign-in emails for up to 30 days. Used only for diagnosing delivery problems.
• Local experts enquiries — if you send an enquiry through the Local experts page: the name, email address, phone number and message you enter, the suburb you enquired about, your budget and timeline if you gave them, the page you sent it from, and a hashed form of your IP address that we use only to limit spam. If you are a buyer's agent asking to claim a suburb, the details you enter on that form (name, agency, email, phone, licence number, website and the suburbs you want).

We do not collect payment details or browser fingerprints. Outside the Local experts enquiry form, we do not collect names or phone numbers. We never collect the street address of a property you enter into My Property, and no usage event we record contains one. Where we record that you looked at a suburb, we store the suburb and postcode only.

Why we collect it

• To let you sign in — magic-link auth needs an email address and a session cookie.
• To improve the product — usage data and recordings tell us which features get used, how long people actually spend in the terminal, where they get stuck, and which pages convert. We do not use any of it to build a profile of you, target advertising, or make decisions about you.
• To meet legal obligations — limited record-keeping (e.g. abuse investigations, fraud prevention) where required by Australian law.
• To connect you with a buyer's agent — an enquiry sent through the Local experts page is passed to the buyer's agent featured for that suburb so they can contact you about it. If no agent is featured, we hold the enquiry, use it to match you with a buyer's agent, and may email you about that match. We also count enquiries per suburb, because that count is how we decide what featured agents pay. A claim request is used to assess and respond to that request.

Who we share it with

Your data is stored and processed by these providers under their respective privacy policies:

• Cloudflare (Pages, D1 database, edge analytics) — hosts the site, stores your user record, processes page-view analytics. Data is held in Cloudflare's Sydney (OC) region.
• PostHog — processes the product-usage data and session recordings described above. If you are signed in, PostHog also receives your email address so your activity can be linked to your account. PostHog stores this data on servers in the United States, so using the terminal means this information is disclosed overseas and handled under United States law.
• Resend — sends sign-in emails and delivers Local experts enquiries. Receives your email address, the magic-link content, and the content of any enquiry you send.
• Featured buyer's agents — receive the enquiry you send them through the Local experts page: your name, email address, phone number, budget, timeline and message. They handle it under their own privacy policy.

We do not share, sell, or rent your data to anyone else. We do not use third-party advertising trackers.

Cookies

Ordus sets two kinds of cookie:

• A session token, after you sign in, so the terminal recognises your session. Strictly necessary.
• A PostHog analytics cookie, holding a random identifier that lets us tell one visit from another and recognise a returning visitor. Cloudflare Web Analytics remains cookieless.

We do not use advertising or marketing cookies, and we do not allow any third party to advertise to you based on your use of Ordus.

Session recordings

Some visits are recorded so we can watch back how the terminal was used. A recording is not video and does not use your camera or microphone. It is a reconstruction of the page built from what your browser did: where you clicked, what you scrolled, and which screens you moved between.

Two things are deliberately excluded:

• Everything you type is masked. Text entered into any field is replaced before it leaves your browser, so it never appears in a recording. The screener's search box is masked in recordings too, but what you type there is separately recorded as usage data, as described above, because knowing what people search for is how we decide what to build.
• The My Property workspace is excluded entirely. It is blanked out in recordings and clicks inside it are not captured, because it is where you enter a real street address. That address stays in your browser unless you save the property to your account.

Alongside a recording we capture your browser's console messages, which are the diagnostic notes the site writes to itself when something goes wrong. They contain error details, not anything you typed. We do not capture the contents of network requests.

Recordings are kept by PostHog for 30 days and then deleted automatically.

Opting out

Analytics and recordings load from PostHog's servers, so any browser extension or built-in setting that blocks third-party analytics (uBlock Origin, Privacy Badger, Brave's shields, Firefox strict tracking protection) will stop them, and the terminal works normally without them. If you would rather we deleted what has already been collected about you, email us and we'll remove it.

Retention and deletion

We keep your email and any saved-terminal data for as long as your account is active. Email us at [email protected] to delete your account; we will erase your user record, session history, saved data, and your PostHog usage history and recordings within 30 days. Session recordings expire on their own after 30 days regardless. Cloudflare's page-view counts cannot be deleted per person because they are never linked to you in the first place. Enquiries sent through the Local experts page are kept so we can count what each suburb produces; email us to have yours deleted and we will remove it within 30 days.

Your rights

Under the Privacy Act 1988 (Cth) you have the right to:

• Ask us what personal information we hold about you
• Ask us to correct it
• Ask us to delete it
• Lodge a complaint with the Office of the Australian Information Commissioner if you think we've handled your data badly

Email [email protected] with any of the above. We'll respond within 30 days.

Property data on Ordus

The suburb-level price, sales-volume, and demographic data on the site is aggregated from public and private sources (NSW Valuer General bulk releases, ABS Census, SQM Research, RBA statistics). It does not contain personal information about you or the current owners of any property. Where individual sale records are referenced, they are already published as public data by the source agency.

Children

Ordus is not intended for users under 13. We do not knowingly collect data from children under 13.

Changes to this policy

If we change anything material, we'll update the "last updated" date at the top and, where appropriate, notify signed-in users by email. Continued use after a change means you accept the new version.

Contact

Privacy questions, deletion requests, or anything else: [email protected].