Privacy Policy

Last updated: April 2026

1. Overview

refrme ("we", "us", "our") is committed to protecting the privacy of your personal information. This policy outlines how we collect, use, store, and disclose personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We collect the following types of personal information:

  • Name, email address, phone number, and business name (brokers and referral partners)
  • Abbreviated client names (first name and last initial only — we do not store full client names)
  • Deal stage and progress information
  • Account credentials (passwords are hashed and never stored in plain text)

3. How We Use Your Information

We use personal information to:

  • Provide and maintain the refrme platform
  • Send deal progress notifications to referral partners
  • Communicate service updates and account information
  • Improve our product and user experience

We do not sell, rent, or trade your personal information to third parties.

4. Data Storage & Security

Your data is stored securely using Supabase infrastructure with row-level security policies, encrypted connections (TLS), and hashed authentication credentials. Access to personal information is restricted to authorised personnel only.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by contacting us.

6. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

7. Notifiable Data Breaches

In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988.

8. Contact

If you have questions about this policy or wish to exercise your privacy rights, contact us at hello@refrme.com.au.