PRIVACY POLICY
Effective Date: 2026-05-28
Last Updated: 2026-05-28
AGENTHUB AU PTY LTD ("we," "our" or "us") operates the AgentHub360 real-estate management platform. We are committed to safeguarding your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Contact Information
- First and last name
- Email address
- Telephone number
2. Professional Information
- Role
- Company name and company ID
3. Account & Session Data
- Session identifier
- Login timestamps
- IP address
- Device and browser information
4. Usage & Technical Data
- Pages viewed, features used, performance metrics
- Referrer and exit pages
How we collect it:
- Directly from you when you register or update your profile
- Automatically via cookies and logs when you use AgentHub360
- From third-party integrations (with your consent)
We use your personal information to:
- Provide and maintain the AgentHub360 platform
- Authenticate and authorise your access (role-based permissions)
- Communicate with you about account activity, support, and updates
- Improve our features, performance, and security
- Protect against fraud, abuse or unlawful activity
- Fulfil legal & regulatory obligations
- We do not sell or rent your personal information.
- We may share with trusted service providers (hosting, analytics, support) under strict confidentiality.
- We may disclose when required by law, or to prevent fraud or security threats.
- We will never share without your explicit consent, except as above.
We implement robust measures, including:
- AES-256 encryption for PII at rest and TLS 1.3 in transit
- HttpOnly + Secure cookies for sessions
- Role-based access controls
- Regular audits, vulnerability scans and penetration tests
We keep your data only as long as needed:
- Session data: 30 days
- User profiles & company records: up to 7 years
- Audit logs: 2 years
After which it is securely deleted or anonymised.
Under the APPs, you have the right to:
- Access your personal data
- Correct inaccuracies
- Delete your account (subject to retention laws)
- Export your data in a machine-readable format
To exercise these rights, contact our Privacy Officer (Section 9).
We use cookies to:
- Manage secure sessions
- Remember your preferences
- Analyse anonymised usage
You may disable cookies in your browser, but this may affect functionality.
Your data is hosted on secure cloud infrastructure which may reside overseas. We ensure APP 8 compliance via:
- Standard contractual clauses
- Adequacy decisions
Privacy Officer
AGENTHUB AU PTY LTD
Level 12, 412 St Kilda Rd, Melbourne VIC 3004
Email: privacy@agenthub360.com.au
We respond to all privacy requests within 30 days. If unresolved, you may contact the Office of the Australian Information Commissioner (OAIC).
We use artificial intelligence to enhance the services we provide through AgentHub360. We are committed to being transparent about how AI is used and how your data interacts with AI systems.
AI Providers
Our current AI provider is Google Gemini. We may add other vetted providers over time to improve our services. Any new provider will be subject to the same privacy and security standards described in this policy, and this section will be updated accordingly.
Your Data and AI
- No model training: Your personal data is not used to train AI models.
- Data minimisation: We only send the minimum data necessary for the AI feature to function.
- No data retention by providers: We require our AI providers not to retain your data beyond what is needed to process the request.
- Encryption: All data sent to AI providers is encrypted in transit using TLS 1.3.
Human Oversight
AI-generated outputs are used to assist — not replace — human decision-making. No automated decisions with legal or significant effects are made solely by AI.
AgentHub360 offers buyer-agent agencies (our customers) optional integrations with Meta Platforms, Inc. (Facebook, Instagram and WhatsApp). These integrations are activated only when an agency administrator chooses to connect their Meta Business through the in-app Settings page. End consumers (e.g. property buyers) do not sign in to AgentHub360 with Facebook or Instagram.
Authentication: Facebook Login for Business
When an agency administrator clicks “Connect Meta Business” in AgentHub360 Settings, we use Facebook Login for Business solely to obtain a permissions token scoped to the Meta assets they explicitly grant (Ad Account, Page, Pixel and Business). We do not read profile information, friend lists, photos or any other personal Facebook data about the administrator.
Meta Pixel
Agency-published landing pages (hosted at buyr.at) may include the Meta Pixel when the agency selects one in their funnel settings. The Pixel records anonymised events (e.g. PageView, Lead) tied to a Meta-issued browser cookie (_fbp). Those identifiers are held by Meta on the buyer's behalf, not by AgentHub360.
Conversions API
When a buyer submits a form on a funnel page, AgentHub360 may send a server-side Lead event to Meta's Conversions API. We hash the buyer's email, phone, first name and last name using SHA-256 before transmission. We also forward the buyer's IP address, browser user-agent, and Meta-issued cookies (_fbp, _fbc) so Meta can deduplicate the event against the browser-side Pixel event.
Custom Audiences
When an agency connects Meta, AgentHub360 may automatically build and refresh a Meta Custom Audience from that agency's buyer list. We upload only SHA-256 hashed identifiers (email, phone, first name, last name) — never raw values. The audience is created on the agency's own Ad Account; Meta's Customer Audience Terms apply.
Lead Ads (leads_retrieval)
When a buyer fills out a Facebook Lead Ad form run by an agency that has connected Meta to AgentHub360, Meta sends the lead submission to AgentHub360 via a secure webhook. We route it to the agency's CRM record so the agency can follow up. The legal basis for processing this lead is the consent the buyer gave when submitting the Lead Ad form on Facebook or Instagram.
Ad Management (Marketing API)
Agency administrators can create paused Meta ad campaigns from inside AgentHub360. Only ad metadata (campaign name, creative copy, image URL, destination URL, budget) is sent to Meta. No buyer data leaves AgentHub360 as part of this flow.
Meta as a data processor
For Custom Audiences and Conversions API, Meta acts as our data processor under its Business Tools Data Processing Terms and Custom Audiences Terms. For Pixel and Facebook Login for Business, Meta is the data controller and its Privacy Policy applies.
Your choices
To opt out of Meta-related processing of your data by AgentHub360, follow the steps on our Data Deletion Instructions page. To control how Meta itself processes your activity, use the privacy controls in your Facebook account or Instagram Accounts Center.
We may update this policy from time to time. We will:
- Post the new policy here with updated "Last Updated" date
- Notify you by email or in-app message for material changes
- Your continued use constitutes acceptance of those changes
Thank you for trusting AGENTHUB AU PTY LTD with your data. Your privacy is our highest priority.