Last updated 31 July 2026
WYWO AI provides an AI assistant that Australian real estate agencies place on their own websites. This policy explains what personal information we handle, why, and what you can do about it. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
It matters which one applies to you.
If you are an agency using WYWO AI, we are handling your information directly — your name, business email, phone number, billing details and how you use the service.
If you are someone who used the assistant on an agency's website, that agency decides what to do with your enquiry. We store and process it on their behalf. Ask them to correct or delete it, and they can do so from their dashboard. You are welcome to contact us as well and we will pass it on.
From agencies: agency name, contact name, email, phone, password (stored as a salted hash, never in readable form), the listings you load, your settings, and records of your subscription. We never see or store your card — that is held by Stripe.
From website visitors who use the assistant: whatever they choose to type, which usually means name, phone or email, budget, suburbs, bedrooms, timeframe, finance status, and the property they are asking about or selling. We also record the conversation, the website it happened on, and the time.
Technical information: IP address for rate limiting and abuse prevention, and the domain the assistant was loaded on.
We do not use cookies for advertising and we do not track anyone across other websites. The assistant stores one identifier in the visitor's browser so a conversation survives a page reload. It expires after thirty minutes of inactivity and contains no personal information.
To run the service: answering enquiries, qualifying them, matching buyers to listings, emailing the agency, taking payment, and providing support. We do not sell personal information, and we do not use enquirer information for our own marketing.
Only the providers needed to run the service:
Anthropic — the AI model that generates responses. Conversation content is sent to it to produce a reply. Stripe — payments and card handling. Resend — sending emails. Railway and Cloudflare — hosting and network. Each is bound by its own terms and handles the information only to provide its service.
We may also disclose information where the law requires it, or to protect someone's safety.
Some of these providers process information outside Australia, including in the United States. By using the service you consent to that disclosure. We take reasonable steps to deal only with providers bound by comparable protections, but we cannot guarantee that overseas recipients are subject to laws substantially similar to the Australian Privacy Principles, and you may not be able to seek redress under the Privacy Act for an overseas act or practice.
Enquiries and conversations are kept while the agency's account is open. If an account closes, the data stays available for export for thirty days and is then deleted. Agencies can delete an individual enquiry at any time from their dashboard, and that deletion is permanent.
Traffic is encrypted in transit. Passwords are stored as salted hashes. Access tokens and confirmation codes are stored hashed, expire, and can be used once. Access to production data is limited to those who need it. No system is perfectly secure, and we do not claim otherwise.
If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Agencies can do all of this themselves from the dashboard. Otherwise email us and we will respond within a reasonable time, and within 30 days at the latest.
We only send marketing email to agencies who have given us their address, and every one carries an unsubscribe link, in line with the Spam Act 2003 (Cth). Enquirer information is never used for marketing, by us or by anyone else.
The service is for real estate businesses and is not directed at children. We do not knowingly collect information from anyone under 16.
If this policy changes materially we will email account holders and update the date at the top.
Email [email protected] for anything in this policy, including a complaint. We will acknowledge it and respond within a reasonable time.
If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner — oaic.gov.au, or 1300 363 992.
WYWO AI · ABN 35 492 097 144