Privacy policy
What we collect, where it goes, who else sees it, and how long any of it lasts. If anything here is unclear, ask us.
Who we are
SellerSignal is operated by ProfitPipe Pty Ltd (ABN 76 696 181 807), Brisbane, Australia. You can reach us any time through the contact page.
The short version
We score real estate pipelines and hand back call lists. We keep the results we produce for you, not your raw pipeline. We do not sell data, we do not run ads, we do not use tracking cookies, and nothing you give us is used to train anyone's AI models. Two things to know up front: the scoring step sends the relevant parts of your records to an AI provider in the United States, and if you are a weekly client your call list is emailed to you through a United States email provider as well. The detail is below under "The AI step" and "Where things happen", and it is the part worth reading properly.
The free audit
When you upload a CRM export we process it once to produce your audit, and the uploaded file is then deleted from our server, automatically, as soon as scoring finishes. The results page is held for up to six hours so you can read it, and is then deleted as well. It is not emailed to you and it is not indexed by search engines, so if you want to keep it, save or print the page.
What we keep after an audit: your email address, the agency name you typed, which CRM you told us you use, how many rows were in the file, how many were scored, and the fact that you ticked the authorisation box (with the time and the version of this policy you saw). We keep that so we know who ran an audit and can follow up. That is the deal for a free audit. We do not keep the file, the vendor names, the addresses or the notes.
The AI step, and what it means for where your data goes
Scoring uses Claude, an AI service provided by Anthropic, whose servers are in the United States. For each record we send the parts that matter for scoring: the deal or property name, the stage, dates, the contact's name, and the notes your team has written. We do not send phone numbers or email addresses, because scoring does not need them.
Two things are true about Anthropic's standard commercial API, which is what we use. First, your content is not used to train their models. Second, they may retain what is sent and returned for a period, currently up to 30 days, for their own trust and safety purposes, in line with their commercial terms at the time. We do not currently hold a zero data retention agreement with them, so we will not claim one. If we get one, this policy will say so and the date at the top will change.
In practice this means scoring does not happen only in Australia, and by uploading a file or subscribing you are consenting to that disclosure overseas. If your agency's own privacy obligations make that a problem, tell us before you upload anything and we will talk it through rather than guess.
Weekly clients
For subscribing agencies we process your pipeline each run and keep the outputs: the ranked call lists, scores, openers and reasoning we produced for you. Your raw pipeline is read fresh each run and is not stored between runs. Each client's data is separated, and no client can see another's.
If you let us read your CRM directly instead of uploading exports, that uses a read-only key you create in your own CRM. We hold it as a server-side secret on our Sydney server, not in our database and nowhere the app can display it, and it is never sent to a browser. The access is read-only: we can read deals, contacts and notes, and we cannot create, change or delete anything in your CRM. You can revoke it inside your CRM at any moment, which cuts our access off immediately without needing to tell us first.
Vendor information inside your files
The files agencies give us contain information about their vendors: names, phone numbers, notes. We handle that on the agency's behalf, only to produce that agency's call list, and for no other purpose. It stays the agency's data. When you upload, you are telling us you are entitled to hand that information to a service provider for this purpose, which is what the tick box on the audit form is about.
Where things happen
Our own server is in Sydney, Australia. That is where the website runs, where uploads land, and where the call lists we produce are stored. Two providers sit outside Australia and both are in the United States: Anthropic, which does the AI scoring described above, and SendGrid, which delivers our email. SendGrid sees the address we send to and the full contents of the message.
For weekly and monthly clients that matters more than it sounds, because the call list itself is emailed to you. The vendor names, property addresses, phone numbers and suggested opening lines in your Monday list pass through a United States provider on the way to your inbox, and a copy then sits in your own mail system afterwards like any other email. If you would rather the list only ever appeared on your dashboard, tell us and we will switch the email off for your account.
How long we keep things
Uploaded audit files: deleted the moment scoring finishes. Audit results: up to six hours, then deleted. Audit lead records (the email, agency, CRM and counts listed above): until you ask us to remove them. Client call lists: for as long as you are a client, and then on request. Contact messages: in our email inbox, like any email. Sign-in codes: 15 minutes, single use, stored only as a hash.
One honest caveat about backups. Our server database is backed up nightly and those backups are kept for 14 days before being overwritten. So if you ask us to delete a lead record, it is gone from the live system straight away, and gone from backups within 14 days. Uploaded pipeline files are never in a backup, because they are deleted before one runs.
Logs
Our web server keeps operational logs so we can tell when something is broken. They record errors and, if enabled, addresses of pages requested. They do not record the contents of uploaded files, and they never record sign-in codes.
Signing in, and cookies
There are no passwords. Signing in uses a code we email you, and staying signed in uses one session cookie that expires after 14 days. That cookie is the only cookie on this site. There are no analytics, advertising or tracking cookies, and no third-party scripts of any kind.
Your rights
Ask us what we hold about you, ask us to correct it, or ask us to delete it. The contact page is enough, and a human answers. If you believe we have mishandled your information and we have not fixed it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If this policy changes, the date and version at the top change with it, and anything material gets a plain-English note here rather than buried fine print.