DRAFT, not legal advice. Prepared 26 Sep 2026 by an AI assistant for Open Home Studio. Not reviewed by a lawyer. Items marked (verify) need checking before this policy is relied on.
Last updated: 26 September 2026 (draft)
1 Who we are
Open Home Studio ("we", "us") makes listing media for real estate agents from existing listing photos and floor plans. Contact for privacy questions: theopenhomestudio@gmail.com.
We use AI tools to run our business, including an AI assistant that writes our emails. We will never claim to be a person.
2 The Australian Privacy Principles
As a small business we may not be legally required to follow the Privacy Act 1988 and its Australian Privacy Principles (APPs) (verify: small-business exemption, turnover under A$3 million, and that we don't trade in personal information). We follow the APPs anyway as good practice, and this policy explains how.
3 What we collect
- Agents' business contact details: name, role, agency, work email and work phone, and the listing they're marketing.
- What you send us: emails, orders, feedback, and whether you've opted in or out.
- Listing materials: photos and floor plans. These are about properties, but photos can incidentally show personal information, such as people, family photos, belongings, mail or number plates.
- Payment records: invoice details and payment references. We don't collect or store card numbers.
- Our records of consent and opt-outs: where and when we found a published email address, and any request to stop contacting you.
- Website: Our website is hosted by Lovable, which collects basic, privacy-friendly visitor statistics (such as pages viewed, referring site, device and browser type, and approximate country). This uses a short-lived session cookie (about 30 minutes) and no advertising or cross-site tracking. Our host also keeps standard technical logs for security.
We don't ask for sensitive information and don't want it. We don't collect information about the buyers or vendors of a property.
4 How we collect it
- From you, when you email us or order.
- From agency websites, where an agent's work email is published next to their name for business enquiries. We collect these by hand and record the page and date. We don't use address-harvesting software, bought lists, or realestate.com.au or Domain.
- From you, when you email us a photo for a free sample. We only use photos you send us.
5 Why we use it
- to send you one relevant, personal email about your current listing, and up to two short follow-ups
- to make, deliver and invoice the work you order
- to keep records that show we followed the Spam Act 2003 (where we found your address, and your opt-out if you gave one)
- to answer questions and complaints
- to meet legal, tax and accounting obligations
We don't sell, rent or swap personal information, and we don't use it for anyone else's marketing.
6 Opting out of emails
Reply "stop" or "unsubscribe" to any email, or write to theopenhomestudio@gmail.com. We act on it the same business day, and always within 5 business days as the law requires. We keep a minimal record (your email address and the date) on a "do not contact" list, so we never email you again.
7 Who we share it with
Only service providers who help us run the business, and only what they need:
| Provider | What for | Where |
|---|---|---|
| Google (Gmail) | Our email | Australia or overseas (for example the United States) |
| Lovable | Website hosting and visitor statistics | Australia or overseas (for example the United States) |
| fal.ai | Runs the AI model for photo edits, only for jobs where you've opted in | USA |
| Google (via fal.ai) | The image model used for photo edits | USA and other countries |
| Stripe | Card payments | Australia or overseas (for example the United States) |
| Professional advisers (accountant, lawyer) | If needed | Australia |
We may also disclose information where the law requires it.
8 Overseas disclosure (APP 8)
Our AI processors are in the USA and may process or cache data in other countries. Before we upload any of your photos for AI editing, we'll tell you which provider we use and ask for your written agreement. We set these services to keep as little as possible for as short a time as possible (for example, not storing request history and having files expire quickly). Some copies are outside our control, such as the provider's short-term abuse-monitoring logs and backups. Overseas providers aren't bound by the APPs, and Australian law may not give you a remedy against them. (verify: whether consent under APP 8.2(b) is needed and how to word it)
9 AI and your photos
- We don't use your photos or information to train AI models.
- We only use AI services whose terms say they don't train on customer content.
- Photos showing identifiable people, children, mail or number plates are left out of AI processing.
- Images edited with Google's model carry an invisible "SynthID" watermark identifying them as AI-edited.
- We never use your photos or our edits of them in our own marketing without written permission from you and the photographer.
10 How we keep it secure
Our data is stored with our service providers, which may store it in Australia or overseas (for example the United States), protected by passwords and two-factor authentication where available. Access is limited to our business. No system is perfectly secure. If a data breach is likely to cause you serious harm, we'll tell you and, where required, the Office of the Australian Information Commissioner (OAIC).
11 How long we keep it
| Information | Kept for |
|---|---|
| Free samples and their source files (if you don't order) | Deleted within 30 days |
| Paid job files (originals and deliverables) | 12 months after delivery, for revisions, then deleted |
| Contact and consent records for agents we've emailed | 24 months after our last contact, as evidence of consent (verify period) |
| "Do not contact" list | Indefinitely, so we never contact you again |
| Invoices and financial records | 5 years, as Australian tax law requires |
You can ask us to delete your information sooner, unless we have to keep it by law.
12 Access, correction and complaints
You can ask to see or correct the personal information we hold about you by emailing theopenhomestudio@gmail.com. We'll respond within 30 days. It's free. If you have a privacy complaint, please tell us first and we'll respond within 30 days. If you're not satisfied, you can contact the OAIC at www.oaic.gov.au or on 1300 363 992.
13 Changes
We'll update this policy when our practices or providers change. The "Last updated" date shows the current version.