Privacy Policy

Last updated: March 2026

This Privacy Policy explains how Shortlist Group Pty Ltd ("we", "us", "our"), operating under the brand names immvi, BrokVi, AgentsVi, SettleVi, and PanelVi, collects, uses, discloses, and protects your personal information when you use our platforms.

1. Information We Collect

From Consumers

• Contact information: email address and phone number
• Calculator answers: responses you provide in our eligibility and assessment calculators
• Location data: your general location (city, state, country) to match you with local professionals
• Device and usage data: browser type, IP address, pages visited, and interaction data

From Professionals

• Public register data: information sourced from publicly available professional registers (e.g., OMARA, MFAA, Law Society registers)
• Profile information: name, licence number, email, phone, business details, and other information you provide
• Payment information: processed securely through Stripe (we do not store card details)

2. How We Use Your Information

• To provide our matching service, connecting consumers with relevant professionals
• To send notifications about matches, proposals, and platform activity
• To improve our calculators, matching algorithms, and user experience
• To process payments and manage professional subscriptions
• To comply with legal obligations
• To detect and prevent fraud or misuse of our platform

3. Who We Share Your Information With

We only share consumer personal information (name, email, and phone number) with the professionals that the consumer selects through our platform. We do not sell your data to third parties.

We may also share information with:

• Service providers: Supabase (data storage), Stripe (payments), Resend (email delivery), and Twilio (SMS)
• Analytics providers: Google Ads and conversion tracking to measure and improve our advertising
• Legal authorities: when required by law, regulation, or legal process

4. Cookies and Analytics

We use cookies and similar technologies for essential platform functionality and to measure advertising effectiveness through Google Ads conversion tracking. You can manage cookie preferences through your browser settings.

5. Data Storage and Security

Your data is stored securely using Supabase with encryption at rest and in transit. Payment information is processed and stored by Stripe in accordance with PCI DSS standards. We implement appropriate technical and organisational measures to protect your personal information.

6. Unclaimed Professional Profiles

We create profiles for professionals based on information sourced from publicly available professional registers. These profiles can be claimed by the professional or removed upon request by contacting us.

7. Your Rights

All Users

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate information
• Deletion: request deletion of your personal information
• Opt-out: unsubscribe from marketing communications at any time

Australian Privacy Act (APPs)

If you are in Australia, your personal information is handled in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). You have the right to make a complaint to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs.

GDPR (UK/EU Users)

If you are in the UK or EU, you have additional rights under the General Data Protection Regulation, including the right to data portability, the right to restrict processing, and the right to object to processing. Our lawful basis for processing is legitimate interest (providing our matching service) and consent (marketing communications).

CCPA (US Users)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

8. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Consumer data is retained for up to 24 months after last activity. Professional data is retained for the duration of the account and up to 12 months after account closure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our platform with a revised "last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Email: help@visia.com.au

Entity: Shortlist Group Pty Ltd