Privacy Policy

1. Who we are

Zetld Ventures Pty Ltd (ABN 23 688 281 218) ("Zetld", "we", "our", or "us") operates the website at zetld.io and the Zetld contract intelligence platform (the "Platform").

This Privacy Policy explains how we handle personal information collected through our website, marketing channels, and the Platform.

We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and the Notifiable Data Breaches scheme.

Zetld is a technology company, not a law firm, conveyancer, or licensed financial adviser. We do not provide legal, financial, or professional advice.

2. How we handle data: our two roles

Zetld handles personal information in two different capacities. Which one applies depends on the data:

• Zetld as controller. For website visitors, prospective customers, marketing enquiries, chat leads, beta applicants, and the identity and account records of Platform users, Zetld decides how and why the information is used. This policy governs that handling.
• Zetld as processor. When a customer firm (a conveyancer, law firm, agency or broker) uploads contracts, generates reports, or invites buyers to access reports through the Platform, that firm decides why and how the underlying personal information is used. Zetld handles it on the firm's instructions. The firm is the controller and is responsible for its own privacy notices to the individuals concerned.

If you are a buyer, tenant, vendor, agent, conveyancer or other third party whose information appears in a property contract processed on the Platform, and you have questions about how that information is used, please contact the firm that engaged you. We can help you identify that firm on request.

3. Information we collect

(a) Information you provide directly

• Account and profile: name, email address, phone number, professional role, firm or organisation, licence number where relevant, password credentials, and multi-factor authentication settings.
• Contract and matter data: property contracts and supporting documents uploaded by a firm, property addresses, purchase prices, party names, agent and conveyancer details, financial terms, and any personal information incidentally contained in those documents.
• Report access data: where a firm invites a buyer or other recipient to view a report, we collect the recipient's name, email address, phone number, one-time-password verification events, and access timestamps.
• Enquiries and communications: content of contact forms, beta signup submissions, chat assistant conversations, and support requests.
• Voice assistant calls: where you speak with Zee, our voice AI assistant, we collect the audio of that call, a transcript of it, and metadata such as call duration and time.
• Payment metadata: billing name, email, subscription tier and status. Card details are collected directly by Stripe, Inc. (our payment processor); Zetld does not store full card numbers.

(b) Information collected automatically

• IP address, approximate location derived from IP, browser type and version, device type and operating system.
• Pages viewed, features used, time spent, referring source, and session identifiers.
• Security and audit logs, including sign-in events, access attempts, and actions taken within the Platform.

(c) Information from third parties

• Address verification and property data from mapping and land information providers when you search for or select a property.
• Billing status from our payment processor.
• Referral information from partners who introduce you to Zetld.

4. How we use information

We use personal information to:

• Provide, operate, secure and improve the Platform, including account management, contract intake, AI-assisted contract analysis, report generation, report sharing, and voice interactions with Zee.
• Verify the identity of report recipients (for example via one-time passwords) and record access for audit purposes.
• Facilitate handoffs a customer firm requests — for example, when a firm elects to refer a buyer to a partner legal provider. From the point of that referral, the receiving law firm handles the individual's information as an independent controller under its own privacy policy.
• Respond to enquiries, support requests, chat conversations and beta applications.
• Process payments and manage subscriptions.
• Send service communications, product updates, and — where you have opted in or enquired — marketing about Zetld.
• Monitor, prevent and investigate misuse, fraud, security incidents and breaches of our terms.
• Comply with legal, regulatory and record-keeping obligations.

We do not use contract content or firm data to train AI models, and we do not sell personal information.

5. AI processing

The Platform uses artificial intelligence to extract, summarise and check property contracts against a library of rules. In practice this means:

• Contract text is sent to one or more large language model providers to produce structured extractions and drafted commentary.
• Our AI providers are contractually bound not to use customer content to train their models and to apply zero-retention or short-retention terms where available.
• AI outputs are combined with deterministic rule checks written and maintained by Zetld. The final report is presented to the firm for review; it is not automated legal advice.
• We may change AI providers or add new ones over time to improve accuracy, availability and cost. A current list of subprocessors is available on request.

Content generated by AI may contain errors. It is the customer firm's responsibility to review outputs before relying on them or sharing them with buyers.

Voice AI processing (Zee)

Where you speak with Zee, our voice AI assistant, your spoken audio is sent to a third-party voice AI provider, which converts your speech to text, generates a response, and converts that response back to speech. That provider processes audio and transcripts on infrastructure located in the United States.

Calls with Zee are recorded, and we tell you this at the start of the call. Recordings and transcripts are retained by our voice AI provider; as at the date of this policy, that provider retains this data by default with no fixed deletion schedule, unless and until we move to a more restricted retention arrangement with them. We are working towards tighter retention controls for voice data and will update this policy when that changes.

Zee is designed to give general information, not advice on your specific circumstances. Where you are a licensed conveyancer or solicitor, Zee may share its own reasoning on a matter you describe to help inform your thinking — this is clearly framed as reasoning, not a conclusion, and does not reduce your responsibility to verify it independently. Zee does not give this kind of reasoning to buyers or other members of the public under any circumstances.

Automated processing and decisions

We are transparent that automated processing is a core part of the Platform. Personal information contained in uploaded contracts is used by automated systems to produce extractions, risk flags and drafted commentary.

No consequential decision about any individual is made solely by automated means. Outputs are assistive: they are presented to a qualified conveyancer, law firm, agent or broker who applies their own judgement before acting on or distributing them. This disclosure is made having regard to the automated-decision transparency requirements commencing under the Privacy Act 1988 (Cth) on 10 December 2026.

6. Subprocessors and service providers

We rely on trusted third parties to run the Platform. Categories include:

• Cloud hosting, database and storage infrastructure.
• Authentication and identity providers.
• AI model and inference providers.
• Voice AI and speech processing (for Zee).
• Payment processing and subscription billing.
• Email, SMS and one-time-password delivery.
• Mapping, address verification and land information services.
• Product analytics and error monitoring.
• Customer support and communications tooling.

Each subprocessor is contractually required to protect personal information consistent with the Australian Privacy Principles. A current list of named subprocessors is available on request from privacy@zetld.io. We may add or replace subprocessors from time to time; material changes affecting customer firms will be notified through the Platform or by email.

7. Where your information is stored and processed (APP 8)

Primary hosting and database storage for the Platform are located in Australia (AWS Asia Pacific — Sydney region). Account data, contracts and generated reports are stored domestically.

The following categories of recipient may process personal information outside Australia:

Where information is transferred overseas we take reasonable steps to ensure the recipient handles it consistently with the APPs, including through contractual data protection commitments. A current list of named subprocessors is available on request from privacy@zetld.io.

By using the Platform you acknowledge that limited processing outside Australia may occur for the purposes described in this policy.

8. Security (APP 11)

We use a range of technical and organisational measures to protect personal information, including:

• Encryption of data in transit (TLS) and at rest.
• Role-based access controls and least-privilege access for our staff.
• Authentication controls including multi-factor authentication for Platform users where enabled.
• Audit logging of significant actions within the Platform.
• Segregation of data between customer firms so that one firm cannot access another firm's contracts or reports.
• Ongoing vulnerability monitoring and periodic reviews of our security controls.

No system is completely secure. If we become aware of a suspected eligible data breach we will assess it within 30 days of becoming aware, notify the Office of the Australian Information Commissioner where the breach is notifiable, and notify affected individuals as soon as practicable with details of the breach and recommended steps — in accordance with the Notifiable Data Breaches scheme.

9. Data retention

When personal information is no longer required, we delete or de-identify it.

10. Your rights

Under the Australian Privacy Principles you have the right to:

• Access (APP 12) — request a copy of the personal information we hold about you.
• Correction (APP 13) — ask us to correct information that is inaccurate, out of date or incomplete.
• Deletion — request deletion of your information, subject to our legal and record-keeping obligations.
• Opt out — withdraw from marketing communications at any time.
• Complain — make a privacy complaint to us or to the OAIC.

If your information was uploaded to the Platform by a customer firm (for example, you appear as a party in a property contract, or a firm invited you to access a report), we will refer your request to that firm, who is the controller of that information. We can help you identify the relevant firm.

To exercise your rights, email privacy@zetld.io. We aim to respond within 30 days.

11. Cookies and analytics

We use a small number of first-party cookies and browser storage items:

• Session and authentication — keeps you signed in and maintains your session on the Platform.
• Security tokens — protect against cross-site request forgery and other abuse.
• Interface preferences — remember display choices you make.
• Analytics and product telemetry — help us understand how the website and Platform are used so we can improve them.

We do not use third-party advertising or ad-retargeting cookies, and we do not sell analytics data. Session, security and preference cookies are essential and cannot be disabled without breaking core functionality. You can control non-essential cookies through your browser settings; some Platform features may be affected if you disable them.

12. Marketing

We may send you communications about Zetld where you have opted in, enquired about the product, or are an existing customer. Every marketing email contains an unsubscribe link. You can also opt out by emailing privacy@zetld.io.

13. Children

The Platform and website are directed at property professionals and adult consumers. We do not knowingly collect personal information from individuals under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the Platform, our subprocessors, or applicable law. Where a change materially affects how we handle your personal information, we will give registered users advance notice by email or through the Platform before it takes effect. We will also update the "Last updated" date above. Your continued use of the website or Platform after changes take effect constitutes acceptance of the updated policy.

15. Complaints and contact

For privacy enquiries, requests or complaints:

• Email: privacy@zetld.io
• Entity: Zetld Ventures Pty Ltd (ABN 23 688 281 218)
• Location: Sydney, Australia

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992