Legal

Privacy Policy

Last updated: 7 June 2026

Keyly respects your privacy. This policy explains how we collect, use, disclose and store your personal information, and how you can access or correct it. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What personal information we collect

We collect personal information that is reasonably necessary to operate the marketplace:

2. How we collect it

We collect personal information directly from you when you create an account, list a property, make an enquiry, save a search, contact us or subscribe. We also collect some technical information automatically when you use the site, and we may receive limited information from third parties such as our payment provider (PayPal), email/SMTP provider, and (if you choose social login) Google or Apple.

3. How we use your information

We only use your information for the purposes for which it was collected, for directly related purposes you would reasonably expect, or where you have consented.

4. Disclosure of your information

We may disclose personal information to:

We do not sell your personal information. Some service providers may store or process data overseas; where they do, we take reasonable steps to ensure your information is handled consistently with the APPs.

5. Cookies and analytics

Keyly uses cookies and similar technologies to keep you logged in (a secure, httpOnly session cookie), remember preferences, and keep the site secure. If enabled, we use Google Analytics 4 to understand how the site is used; this may set cookies and collect aggregated, de-identified usage data. You can control or block cookies in your browser settings, though some features (such as staying logged in) may not work without them.

6. Storage and security

Personal information is stored in a PostgreSQL database hosted on secured Australian-region infrastructure. Uploaded photos are stored on our server or in cloud object storage. Passwords are stored only as bcrypt hashes, traffic is encrypted in transit using HTTPS/TLS, and access is restricted. We take reasonable steps to protect your information from misuse, loss, unauthorised access, modification and disclosure, and we keep regular encrypted backups. No system is perfectly secure, so we cannot guarantee absolute security.

We retain personal information only for as long as it is needed for the purposes above or as required by law, and we take reasonable steps to destroy or de-identify it when it is no longer needed.

7. Accessing and correcting your information

You can access and update most of your information from your account dashboard. You may also ask us to provide access to, correct, or delete the personal information we hold about you by contacting us using the details below. We will respond within a reasonable time and may need to verify your identity first.

8. Notifiable data breaches

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

9. Complaints

If you believe we have breached the APPs or mishandled your personal information, please contact us first using the details below so we can investigate. If you are not satisfied with our response, you may complain to the OAIC at oaic.gov.au.

10. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, with the “last updated” date above.

11. Contact us

Questions or requests about your privacy? Email us at info@keyly.com.au or use our contact form.