Privacy Policy

Portfolio Foundations is operated by Foundation First Buyers Agency Pty Ltd. We are responsible for personal information handled through the Portfolio Foundations application.

You can contact us about privacy at info@portfoliofoundations.com.au.

Depending on how you use Portfolio Foundations, we may collect or you may enter:

• account details such as your email address and (optionally) your name
• property and portfolio details you enter
• loan, rent, expense, income and borrowing assumptions you enter
• client workspace details entered by buyer's agents
• strategy scenarios and Strategy Snapshot report content
• subscription status, plan, billing dates and Stripe customer identifiers
• support and feedback messages you send us
• technical and log information that may be generated by our infrastructure providers (such as Supabase and Vercel) or application logs
• cookies and local storage (localStorage / sessionStorage) used to keep you signed in and to store your settings and working state

We aim to collect only what is needed to provide the product. Please avoid entering unnecessary sensitive information.

• If you are a buyer's agent, you must have the client's permission or authority before entering their information.
• Avoid entering unnecessary sensitive information about clients.
• Client workspaces and client portfolios you enter are stored in our cloud database (Supabase) under your account.
• Your own account and personal portfolio data (properties, loans, expenses, financial and goal assumptions, and saved strategy scenarios) are also stored in our cloud database (Supabase).

• to provide modelling, scenario comparison and Strategy Snapshot reports
• to create and operate your account
• to save your portfolio and property details
• to provide support and to debug and fix issues
• to improve the product
• to communicate with you about your account and feedback

We use trusted service providers to run Portfolio Foundations. We may disclose information to:

• Supabase, which provides our authentication and cloud database
• Vercel, which hosts and serves the application
• Stripe, which processes subscriptions, payments and billing-portal requests
• email or contact tools we use to respond to you
• professional advisers, where reasonably necessary
• others where required or authorised by law

We do not sell your personal information. At the time of writing, we do not use third-party product analytics or advertising cookies. Portfolio Foundations does not receive or store your complete payment-card number; Stripe handles payment details.

Supabase, Vercel and Stripe operate internationally and may process or store information outside Australia, including in locations determined by the configured hosting region and their supporting infrastructure. Contact us if you need the current provider and regional information relevant to your account.

• You can request access to, or correction of, the personal information we hold about you by contacting us.
• Deleting your account or cloud data may require a manual request to us.
• Client workspace data can be deleted from within the app's settings.

To make a request, contact info@portfoliofoundations.com.au.

We retain account, portfolio, client-workspace and subscription records while your account is active and for as long afterwards as reasonably needed to provide the service, resolve disputes, meet legal and accounting obligations, prevent misuse and maintain necessary business records. Local browser data remains on your device until you clear it or the application removes it.

You may request deletion, but we may retain limited information where required or authorised by law, or where reasonably necessary for security, fraud prevention, dispute resolution or record keeping.

We take reasonable steps to protect personal information. We rely on reputable infrastructure providers (Supabase and Vercel), and connections to these services normally use encryption in transit (HTTPS/TLS).

No internet service can be guaranteed to be perfectly secure. You are responsible for keeping your account credentials and your device secure, and for not sharing access.

If the Privacy Act 1988 (Cth) applies and a data breach involving personal information is likely to result in serious harm, we may be required to notify affected individuals and the Office of the Australian Information Commissioner (OAIC). We will take reasonable steps to respond to and contain any breach.

If you have a privacy concern or complaint, contact us at info@portfoliofoundations.com.au. We will acknowledge your complaint and aim to respond within a reasonable time. If you are not satisfied with our response, you may be able to contact the OAIC.

This Privacy Policy is version 2026-08-03. We may update it from time to time. For related information, see our Terms of Service and Disclaimer.