Privacy, plainly.
What we collect, why, who else handles it, how long we keep it and how to get it deleted.
- Your PDF never leaves your device. Only the text pulled from it is sent, to write your reading.
- Reports are deleted after 7 days.
- We don't sell your information, run ads or use advertising or tracking cookies.
- Delete your account any time from the account page. It takes effect straight away.
- Ask for a copy of your information, a correction or deletion by emailing privacy@ email.
01Who we are
ReadyToSign is operated by Business legal name, ABN ABN, Business address. In this policy "we" and "us" means that business.
Contact: support@ email. Privacy requests and complaints: privacy@ email.
02What we collect and why
| Information | Why we need it |
|---|---|
| Your email address | To sign you in with a one-time link and keep your readings, credits and reports tied to you. Without it you can't run a reading. The sample report needs no account. |
| Text from the papers you upload | To write your reading. Your browser extracts the text (and reads scanned pages on your device); the PDF file itself is never uploaded. |
| The property address found in the papers | To look the property up on public map and planning sources. |
| Links you import | If you paste a link to a document, our server fetches it once so your browser can read it. We don't store the link or the file. |
| Your IP address | Briefly, to stop abuse and enforce rate limits. It isn't stored with your reports or usage events. |
| Usage events | Pages viewed, readings started and finished, purchases and similar. Counted in our own database, without cookies or IP addresses, so we can see what works. |
| Visit stats | We use Cloudflare Web Analytics to see how many people visit, which pages they read, where they came from and what kind of device they're on. It's cookie-free, doesn't store your IP address and doesn't follow you around other sites. |
| Branding (monthly plan) | The business name, logo and contact details you add, so we can show them on your reports and PDFs. |
| Launch list | Your email, when you agreed, and where you signed up, so we can email you once when ReadyToSign opens. |
| Partner codes | Which partner code you used and when, how many readings it gave and how many are left. The partner who issued the code can see totals, not your reports. |
| Email preferences | If you tick the tips box, your consent and when you gave it. |
| Payment details | Collected by Stripe, not us. We receive the amount, date, plan and a Stripe reference. We never see your card number. |
03Other people's information in your papers
Contracts and vendor disclosure papers usually name the vendor, the agents and the solicitors or conveyancers, and can include their contact details. We use that text only to produce the reading you asked for. We don't use it to contact those people, build profiles or for any other purpose, and the finished report is deleted after 7 days.
Please only upload papers you were given to help you decide whether to buy, or that a client gave you for that purpose.
04How AI is used
To write your reading, the text extracted from your papers is sent to one AI provider: Google, through the Gemini API. Google processes it in the United States and other countries where it operates. No other AI provider receives your papers.
On the way to Google, the text passes through Cloudflare AI Gateway. We use it for two things: a rate limit of 60 requests a minute, so a sudden flood can't run up our usage, and to avoid paying twice for the exact same request. Logging is switched off, so the gateway keeps no record of your papers, your report or the request. Gateway sign-in is also off; the request still carries our private Google key, which never reaches your browser. If you send the exact same papers again within an hour, Cloudflare may hand back the saved answer instead of asking Google again; after that it's gone.
Where things stand today. Before launch, ReadyToSign uses Gemini's unpaid service tier. Under Google's terms for that service, Google may use submitted content to improve its products, and people at Google may review it. We are moving readings to Google's paid service, where submitted content is not used to train or improve Google's models, before ReadyToSign opens to the public and before any paid readings are sold. We'll update this section when that happens.
Every finding is checked against your own text before it's shown. ReadyToSign uses AI to summarise the papers you upload. It doesn't make decisions about you.
05Directory and business listings
If you apply to list a business we store the business details you give us (name, ABN, contact name, email, phone, website, suburbs served) to review the application and run the listing. Public listings show only the business name, phone, website, suburbs and description. Buyers can search the directory without giving us anything; we don't pass buyer details to businesses. If we ever add enquiry forms, details will only be passed on with your explicit consent at the time, and this page will be updated first.
06Public lookups
The property address (not your papers) is sent to OpenStreetMap to place it on a map, and to the state planning map service for that state (VIC, NSW, WA, TAS and ACT). Reports show an OpenStreetMap map, so your browser loads map images from OpenStreetMap. When price research is switched on, the address is also sent to Google Search through Gemini. The same address point is also checked against official state flood, bushfire, heritage and school-zone maps (listed on the Sources page).
07Agent branding
On the monthly plan, the branding you add is shown on every report and PDF you create. If you use ReadyToSign for clients, you are responsible for telling them you use it.
09How long we keep it
| Information | Kept for |
|---|---|
| Reports | 7 days, then deleted automatically. |
| Reading records and a one-way fingerprint of the text (to stop duplicate charges) | 2 days |
| Result cache: a one-way fingerprint (SHA-256) of the papers' text, with file names removed, and the finished report for it. If the exact same papers are read again, by you or anyone else who has them, the stored result is copied to that person instead of asking the AI again. Your account, email and file names are never part of it | 14 days, or sooner when our checks change |
| "This looks wrong" feedback: which check it was, the report it was on and your optional note. No text from your papers | Until you delete your account |
| IP rate-limit counters | 2 days |
| Sign-in sessions | 30 days |
| Sign-in links | 20 minutes to use, deleted within a day |
| Email address, account, credits, partner code redemptions and branding | Until you delete your account |
| Launch list | Until launch, or sooner if you unsubscribe or ask us to remove you |
| Usage events | 13 months. Unlinked from you when you delete your account |
| Payment and tax records (amount, date, plan, Stripe reference, receipt email) | 5 years, because tax law requires it |
10Who else handles it, and where
We use these service providers. Some are overseas, so your information may be processed outside Australia.
| Provider | What for | Where |
|---|---|---|
| Cloudflare | Hosting, database, bot check on sign-in | United States and Cloudflare's global network |
| Google (Gemini API) | Writing the reading from your papers' text | United States and other countries |
| OpenStreetMap Foundation | Address lookup and map | United Kingdom and Europe |
| State planning agencies (VIC, NSW, WA, TAS, ACT) | Planning zone and overlay lookups (address only) | Australia |
| Resend | Sign-in links and service emails | United States |
| Stripe | Payments, receipts, managing your plan | United States and Australia |
11Emails we send
We send sign-in links when you ask for one, and service emails you need, such as a reminder before your monthly plan renews. Tips emails go only to people who ticked the box, and every one has a one-click unsubscribe link. You can also turn them off on your account page. Every email we send says who it's from.
12Keeping it safe
Everything travels over HTTPS. Data is held in Cloudflare's database, access is limited to the business owner, and passwords aren't used at all (sign-in is by one-time link). Payment details stay with Stripe. No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and, where the law requires, the Office of the Australian Information Commissioner.
13Getting, fixing or deleting your information
You can ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing privacy@ email. We'll respond within 30 days and there's no charge. We may need to confirm the request comes from your account's email address.
To delete your account, sign in and choose Delete my account on the account page. It cancels any subscription and removes your reports, branding, sessions, credits and referral records straight away. Payment records are kept for 5 years as tax law requires, and Stripe keeps its own records under its privacy policy. If you have unused 10-pack credits, ask for a refund before you delete (see the Terms).
14Complaints
Email privacy@ email with the details. We'll acknowledge your complaint within 5 business days and respond within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
15Children
ReadyToSign is for adults buying property. It isn't meant for anyone under 18 and we don't knowingly collect their information.
16Changes to this policy
If we change how we handle your information, we'll update this page and the date at the top. For a significant change, such as a new AI provider, we'll also email account holders before it takes effect.
Questions about this page? Email privacy@ email.