Privacy Policy

Last updated: 17 May 2026 | Compliant with the Australian Privacy Act 1988 (Cth)

1. Who We Are

Unlokd Pty Ltd (“Unlokd”, “we”, “us”) operates the co-living rental platform at liveunlokd.com. We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We collect the following categories of personal information:

Account Information

Full name, email address, password (hashed — never stored in plain text), and account role (tenant, landlord, or agent).

Profile Information

Profile photo, bio, suburb, lifestyle preferences, and community preferences provided during onboarding.

Listing and Property Data

Property address, photos, floor plans, room configurations, and pricing information uploaded by landlords and agents.

Payment Information

Payment processing is handled by Stripe. We do not store card numbers or bank account details. We receive payment status, transaction IDs, and Stripe Connect account identifiers.

Communications

Messages sent between users via the platform’s messaging feature.

Usage Data

IP address, browser type, pages visited, and feature interactions, collected via analytics tools (PostHog) for product improvement purposes.

3. How We Use Your Information

To create and manage your account and provide platform services.
To match tenants with suitable listings based on preferences.
To process rent payments and disburse funds to landlords.
To send transactional emails (email verification, payment receipts, password reset).
To provide AI-assisted features such as the Floor Plan Optimiser.
To improve and develop the platform based on usage analytics.
To comply with our legal obligations and resolve disputes.
To send product updates or marketing emails — you may opt out at any time.

4. Disclosure of Your Information

We may share your information with:

Other platform users — landlords see tenant applications; tenants see landlord/property information.
Stripe — for payment processing and landlord identity verification (Stripe Connect).
Resend — for transactional email delivery.
Supabase — cloud database and storage provider.
Vercel — cloud hosting provider.
Google (Gemini AI) — floor plan images uploaded to the Optimiser may be processed by Google’s Gemini API. Do not upload images containing sensitive personal information.
PostHog — anonymised usage analytics.
Law enforcement or regulators — where required by law or to protect safety.

We do not sell your personal information to third parties for advertising purposes.

5. International Data Transfers

Some of our service providers (Stripe, Google, Vercel, PostHog) process data outside of Australia, primarily in the United States. We take reasonable steps to ensure overseas recipients handle your information in a manner consistent with the Australian Privacy Principles.

6. Data Security

We implement reasonable security measures including encrypted data transmission (HTTPS/TLS), hashed password storage (bcrypt), environment-variable–secured API keys, and role-based access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. We will notify you of any notifiable data breach in accordance with the Notifiable Data Breaches scheme under the Privacy Act.

7. Data Retention

We retain your personal information for as long as your account is active and for up to 7 years after account closure to meet our legal and financial record-keeping obligations. You may request earlier deletion subject to applicable legal obligations.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

Access the personal information we hold about you.
Correct inaccurate or out-of-date information.
Request deletion of your account and associated data (subject to legal retention requirements).
Opt out of marketing communications at any time via the unsubscribe link in emails.
Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have breached your privacy rights.

To exercise these rights, contact us at support@liveunlokd.com.

9. Cookies and Tracking

We use session cookies for authentication (managed by NextAuth). We also use PostHog for analytics, which may set cookies to track usage patterns. You can disable cookies in your browser settings, but doing so may affect platform functionality.

10. Children’s Privacy

The Unlokd platform is intended for users aged 18 and over. We do not knowingly collect personal information from persons under 18. If you become aware that a minor has registered, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email of material changes. The “Last updated” date at the top of this page reflects the most recent revision.

12. Contact Us

For privacy enquiries or to exercise your rights:
Unlokd Pty Ltd
Email: support@liveunlokd.com