Privacy Policy

Ordus Property is a free suburb-level intelligence terminal for the Australian property market. This page describes what personal information we collect, why we collect it, and what we do with it. The short version: we collect your email so you can sign in, and we measure how the terminal gets used so we can improve it. We don't sell data and we don't run advertising trackers.

What we collect

• Email address — provided when you sign up for the full terminal. Used only to send sign-in links and, if you ask us, occasional product update emails. We do not use it for marketing without your explicit consent.
• Session cookie — set after you sign in so the terminal recognises your session. Strictly necessary; cannot be disabled if you want to stay signed in.
• Page views — which pages were loaded, when, and rough geography (country/region derived from IP at the edge). Collected by two tools: Cloudflare Web Analytics, which is cookieless and cannot identify you, and PostHog, described below.
• Product usage — what you do inside the terminal: which workspace you open, that you added a suburb (and which one), that you ran an estimate, that you created a share link, how long you were actively using the page, and what you typed into the screener's search box. This is stored against a random identifier held in a cookie in your browser. If you are signed in, we link that identifier to your account so we can tell repeat use from new visits.
• Session recordings — a replay of your visit reconstructed from page events: clicks, scrolling, and navigation between screens. We use these to find where the terminal is confusing or broken. See Session recordings below for what is excluded.
• Email-delivery logs — Resend retains delivery metadata (delivered/opened/bounced) for sign-in emails for up to 30 days. Used only for diagnosing delivery problems.

We do not collect: names, phone numbers, payment details, or browser fingerprints. We never collect the street address of a property you enter into My Property, and no usage event we record contains one. Where we record that you looked at a suburb, we store the suburb and postcode only.

Why we collect it

• To let you sign in — magic-link auth needs an email address and a session cookie.
• To improve the product — usage data and recordings tell us which features get used, how long people actually spend in the terminal, where they get stuck, and which pages convert. We do not use any of it to build a profile of you, target advertising, or make decisions about you.
• To meet legal obligations — limited record-keeping (e.g. abuse investigations, fraud prevention) where required by Australian law.

Who we share it with

Your data is stored and processed by these providers under their respective privacy policies:

• Cloudflare (Pages, D1 database, edge analytics) — hosts the site, stores your user record, processes page-view analytics. Data is held in Cloudflare's Sydney (OC) region.
• PostHog — processes the product-usage data and session recordings described above. If you are signed in, PostHog also receives your email address so your activity can be linked to your account. PostHog stores this data on servers in the United States, so using the terminal means this information is disclosed overseas and handled under United States law.
• Resend — sends sign-in emails. Receives your email address and the magic-link content.

We do not share, sell, or rent your data to anyone else. We do not use third-party advertising trackers.

Cookies

Ordus sets two kinds of cookie:

• A session token, after you sign in, so the terminal recognises your session. Strictly necessary.
• A PostHog analytics cookie, holding a random identifier that lets us tell one visit from another and recognise a returning visitor. Cloudflare Web Analytics remains cookieless.

We do not use advertising or marketing cookies, and we do not allow any third party to advertise to you based on your use of Ordus.

Session recordings

Some visits are recorded so we can watch back how the terminal was used. A recording is not video and does not use your camera or microphone. It is a reconstruction of the page built from what your browser did: where you clicked, what you scrolled, and which screens you moved between.

Two things are deliberately excluded:

• Everything you type is masked. Text entered into any field is replaced before it leaves your browser, so it never appears in a recording. The screener's search box is masked in recordings too, but what you type there is separately recorded as usage data, as described above, because knowing what people search for is how we decide what to build.
• The My Property workspace is excluded entirely. It is blanked out in recordings and clicks inside it are not captured, because it is where you enter a real street address. That address stays in your browser unless you save the property to your account.

Alongside a recording we capture your browser's console messages, which are the diagnostic notes the site writes to itself when something goes wrong. They contain error details, not anything you typed. We do not capture the contents of network requests.

Recordings are kept by PostHog for 30 days and then deleted automatically.

Opting out

Analytics and recordings load from PostHog's servers, so any browser extension or built-in setting that blocks third-party analytics (uBlock Origin, Privacy Badger, Brave's shields, Firefox strict tracking protection) will stop them, and the terminal works normally without them. If you would rather we deleted what has already been collected about you, email us and we'll remove it.

Retention and deletion

We keep your email and any saved-terminal data for as long as your account is active. Email us at hello@ordusproperty.com.au to delete your account; we will erase your user record, session history, saved data, and your PostHog usage history and recordings within 30 days. Session recordings expire on their own after 30 days regardless. Cloudflare's page-view counts cannot be deleted per person because they are never linked to you in the first place.

Your rights

Under the Privacy Act 1988 (Cth) you have the right to:

• Ask us what personal information we hold about you
• Ask us to correct it
• Ask us to delete it
• Lodge a complaint with the Office of the Australian Information Commissioner if you think we've handled your data badly

Email hello@ordusproperty.com.au with any of the above. We'll respond within 30 days.

Property data on Ordus

The suburb-level price, sales-volume, and demographic data on the site is aggregated from public and private sources (NSW Valuer General bulk releases, ABS Census, SQM Research, RBA statistics). It does not contain personal information about you or the current owners of any property. Where individual sale records are referenced, they are already published as public data by the source agency.

Children

Ordus is not intended for users under 13. We do not knowingly collect data from children under 13.

Changes to this policy

If we change anything material, we'll update the "last updated" date at the top and, where appropriate, notify signed-in users by email. Continued use after a change means you accept the new version.

Contact

Privacy questions, deletion requests, or anything else: hello@ordusproperty.com.au.