Privacy Policy

Zoned · Effective 3 August 2026 · Last updated 2 August 2026

This Privacy Policy explains how Zoned Intelligence Pty Ltd (ACN 698 471 251, ABN 76 698 471 251) trading as Zoned ("Zoned", "we", "our" or "us") collects, holds, uses, discloses and protects your Personal Information when you access or use our website, platform, applications and related services (collectively, the "Platform").

We are committed to protecting your privacy and handling Personal Information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable privacy laws.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy should be read together with our Terms and Conditions.

1. What Personal Information we collect

Depending on your interaction with the Platform, we may collect Personal Information including:

Your name;
Email address;
Telephone number;
Business or company details;
Account login credentials;
Payment and billing information (where applicable);
Property searches and preferences;
Communications with us;
Technical information relating to your device and browser;
IP address;
Location information where enabled on your device;
Usage information relating to your access to the Platform;
Information generated through your use of AI-powered features or other functionality available on the Platform;
Preferences, settings and saved searches within your Account;
Any feedback, reviews or survey responses you provide;
Where you give consent to receive marketing communications, a record of that consent including the date, time and IP address at which it was given; and
Any other Personal Information you voluntarily provide.

You are not required to provide Personal Information to us. However, if you choose not to provide certain information, some features of the Platform may not be available to you.

2. Information you record about other people

The Platform allows you to save sites, add notes and record details relevant to your own projects. Those records may include Personal Information about other people, such as the name or contact details of a property owner, agent or other party.

Where you record that information, you do so as part of your own business records. We hold it on your behalf as part of your Account, we do not use it for our own marketing purposes, and we do not disclose it to other users.

Under our Terms and Conditions you are responsible for ensuring you are authorised to collect and record that information and for complying with the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth) in respect of it. Information you record about other people is deleted when you delete it, and is deleted along with everything else in your Account when your Account is deleted.

If you are an individual whose Personal Information you believe has been recorded in the Platform by one of our users, you may contact us using the details below and we will assist you, which may include referring your request to the relevant Account holder.

3. Dealing with us anonymously

You may browse our public website without identifying yourself and without creating an Account. Where it is lawful and practicable to do so, you may also make a general enquiry of us without providing your name.

Because the Platform is a paid, per-seat service that keeps your saved work and applies usage limits to each Account, we cannot provide access to the Platform itself anonymously or under a pseudonym. Creating an Account requires a name, an email address and a telephone number.

4. How we collect Personal Information

We may collect Personal Information:

Directly from you when you create an Account;
When you use the Platform;
When you submit enquiries or contact us;
When you subscribe to newsletters or marketing communications;
When you participate in surveys, promotions or events;
Through cookies and similar technologies;
From third parties where permitted by law; and
Through publicly available sources where permitted by law.

5. How we use Personal Information

We may use Personal Information to:

Provide and operate the Platform;
Create and manage your Account;
Authenticate your identity;
Provide customer support;
Respond to enquiries;
Improve the Platform and our Services;
Develop new products and functionality;
Communicate with you regarding your Account;
Send service-related notices;
Comply with legal obligations;
Detect fraud, misuse and security incidents;
Monitor and enforce usage limits applying to your Account;
Improve, train, test and develop our AI technologies, systems and Platform functionality using de-identified or aggregated information where appropriate; and
Where permitted by law or where you have consented, send marketing communications.

We will only use your Personal Information for purposes that are reasonably necessary for our business activities or otherwise permitted by law.

6. Disclosure of Personal Information

We may disclose Personal Information to:

Our employees and contractors;
Binary Lane (Australia) for cloud hosting and infrastructure services;
Anthropic (United States) for AI assistant services;
Mapbox (United States) for mapping services;
Aerometrex Limited (Australia) for licensed high-resolution aerial imagery, including reporting of imagery usage as required under our imagery licence;
Stripe (United States) for payment processing;
Resend (United States) for transactional email delivery, including password resets and account notifications;
Amazon Web Services (United States), being the email delivery infrastructure used by Resend;
Loops (United States) for waitlist and email marketing;
Crisp (France, with data hosted in the European Union) for the live-chat widget on our public website, including chat messages and any contact details you provide in the chat;
Cal.com (United States) for demonstration and sales bookings made through our public website;
Cloudflare (United States) for domain name services;
Google Workspace (United States) for email, productivity and administrative services;
Professional advisers;
Government authorities where required by law;
Regulatory bodies;
Third-party suppliers engaged to provide services on our behalf;
A purchaser or prospective purchaser of all or part of our business or assets in connection with a merger, acquisition, corporate restructure or sale; and
Any other person where authorised or required by law.

We take reasonable steps to ensure that third parties handling Personal Information on our behalf are subject to appropriate confidentiality and security obligations.

7. Storage and security

We take reasonable technical, administrative and organisational measures to protect Personal Information from misuse, interference, loss, unauthorised access, modification and disclosure.

The Platform is hosted on secure infrastructure located in Australia (Brisbane region) as part of our Australian data residency approach. Personal Information is primarily stored in Australia.

These measures may include:

Encrypted communications;
Secure cloud infrastructure;
Hashed storage of passwords and session credentials;
Access controls;
Authentication procedures;
Automated monitoring and security logging;
Regular backups; and
Regular security reviews.

While we take reasonable steps to protect Personal Information, no method of electronic transmission or storage is completely secure. Accordingly, we cannot guarantee absolute security.

8. Data breach notification

We maintain procedures to identify, contain and assess security incidents affecting Personal Information.

Where we become aware of a data breach that is likely to result in serious harm to any individual whose Personal Information we hold, we will notify the affected individuals and the Office of the Australian Information Commissioner as soon as practicable, in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).

9. AI-assisted features and automated processing

The Platform includes AI-assisted features. Where you use them:

Your questions and the responses generated are recorded against your Account so that conversations can be continued and reviewed;
The Platform may retain a summary of durable facts you have provided, for example project assumptions or areas of interest, in order to improve the relevance of future responses; and
Your questions are transmitted to our AI service provider (Anthropic, United States) for processing. That provider processes the content on our behalf and is not permitted to use it to train its models.

You may request a copy of, or the deletion of, information retained by the AI-assisted features by contacting us using the details below.

The Platform does not make automated decisions about you that produce legal effects or that otherwise significantly affect your rights or interests. AI-assisted Output relates to land, planning and development analysis and is informational only. It is not used to decide your eligibility for any product, service, credit or benefit.

10. Cookies and similar technologies

The Platform uses limited cookies and similar technologies to support its operation. We currently use:

An essential HttpOnly authentication session cookie to maintain secure user sessions; and
Browser localStorage to store user preferences, settings and Platform content.

We do not currently use advertising cookies, behavioural tracking technologies or third-party analytics platforms.

Our public website includes a live-chat widget provided by Crisp, which sets its own identifiers so that a chat conversation can be kept together, and a booking widget provided by Cal.com, which loads only when you choose to book a demonstration. Details you type into those widgets, and the technical information needed to deliver them, are processed by the relevant provider as described in sections 6 and 11.

Certain third-party libraries integrated into the Platform, including Mapbox, may collect limited technical telemetry in accordance with their own privacy practices. Certain images, fonts, mapping tiles and map data displayed within the Platform are retrieved from external providers, and those providers may receive your IP address as a necessary part of delivering that content.

You may configure your browser to disable cookies, although doing so may affect the operation of the Platform.

11. Overseas disclosure

The Platform infrastructure and primary databases are hosted in Australia (Brisbane region) as part of our Australian data residency approach. Personal Information is ordinarily stored in Australia.

However, we may disclose Personal Information to overseas service providers that assist us in operating the Platform. These service providers may store or process Personal Information outside Australia, including:

Anthropic (United States), AI assistant services;
Stripe (United States), payment processing;
Mapbox (United States), mapping services;
Resend and Amazon Web Services (United States), transactional email delivery;
Loops (United States), waitlist and email marketing;
Crisp (European Union), website live chat;
Cal.com (United States), demonstration and sales bookings;
Cloudflare (United States), domain name services; and
Google Workspace (United States), email, productivity and administrative services.

Where Personal Information is disclosed overseas, we take reasonable steps to ensure that the recipient handles that information in a manner consistent with the Australian Privacy Principles or as otherwise permitted by law.

12. Access and correction

You may request access to the Personal Information we hold about you and request that inaccurate, incomplete or out-of-date information be corrected.

Requests should be made using the contact details below. We will respond to requests within a reasonable period and in accordance with applicable privacy laws.

We may refuse a request where permitted by law and will provide reasons where required.

13. Retention of Personal Information

We retain Personal Information only for as long as reasonably necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes and enforce our legal rights.

When your Account is deleted, we delete the Personal Information held in it, together with your saved sites, notes, reports, search history and the information retained by the AI-assisted features. This is carried out as a single deletion process across all of our systems.

Two exceptions apply. Records we are required to keep for taxation and financial reporting purposes, including invoices and payment records, are retained for seven (7) years as required by law, and are held with your identifying details removed where practicable. Backup copies of our systems are retained on a rolling fourteen (14) day cycle and deleted information is removed from backups as that cycle completes.

When Personal Information is no longer required, we will take reasonable steps to securely destroy or de-identify it, unless we are required by law to retain it.

14. Marketing communications

Where you have given us your consent, or where otherwise permitted by law, we may send you information about our products, services, updates and promotions by email and by SMS. Where you give consent at sign-up, we record the date, time and IP address at which it was given.

You may withdraw your consent at any time by using the unsubscribe facility included in any email, by replying STOP to any SMS, or by contacting us directly.

Withdrawing consent does not affect service-related communications relating to your Account or the operation of the Platform, such as receipts, renewal notices, security notices and password resets, which we may continue to send while you hold an Account.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be published on the Platform and will take effect from the date specified at the beginning of this Privacy Policy.

Where changes are material, we may notify users by email or through the Platform where appropriate.

Your continued use of the Platform after any changes become effective constitutes acceptance of the updated Privacy Policy.

16. Complaints

If you believe that we have breached applicable privacy laws or mishandled your Personal Information, you may submit a complaint using the contact details below.

We will acknowledge receipt of your complaint within five (5) business days, investigate the matter, and provide a written response within thirty (30) days.

If you are dissatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au, telephone 1300 363 992).

17. Children's privacy

The Platform is intended only for individuals aged 18 years or older. We do not knowingly collect Personal Information from children under the age of 18 years. If we become aware that we have collected Personal Information from a child without appropriate consent, we will take reasonable steps to delete that information.

18. Contact us

If you have any questions about this Privacy Policy or our handling of Personal Information, you may contact us:

Zoned
Email: contact@zoned.com.au
Website: zoned.com.au

Effective Date: 3 August 2026. Last Updated: 2 August 2026. This Privacy Policy applies to the Zoned Platform and takes effect from the Effective Date. It remains in force until amended, replaced or withdrawn by Zoned. The current version of this Privacy Policy will always be made available through the Platform. We may update this Privacy Policy from time to time to reflect changes to our business practices, technology, legal obligations or applicable privacy laws. Your continued access to or use of the Platform after any updated version becomes effective constitutes your acknowledgement of the revised Privacy Policy. This Privacy Policy should be read together with our Terms and Conditions and any additional terms, policies or notices that apply to specific features, products or services made available through the Platform.