Legal
Last updated: March 2026
GetListingFlow is a business operated by Quentin (ABN: 76 484 784 411), based in Brisbane, Queensland, Australia. This Privacy Policy explains how we collect, use, store, and disclose personal information in the course of providing the GetListingFlow service.
We are committed to handling personal information responsibly and in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs) set out in Schedule 1 of that Act. While GetListingFlow’s current annual turnover is below $3 million AUD — meaning the Privacy Act does not yet mandatorily apply to our business — we voluntarily comply with the APPs as best practice. We do this because our clients are real estate agents who handle personal information as part of their own legal obligations, and because the leads whose information passes through our system deserve transparent and responsible data handling.
If you have questions about this policy, contact us at privacy@getlistingflow.com.au.
We collect two distinct categories of personal information:
When an agent subscribes to GetListingFlow, we collect: full name, agency name, email address, phone number, CRM system credentials (stored using industry-standard encryption — never in plaintext), contracted suburb details, billing information, and the Telegram user ID used to access our agent interface.
GetListingFlow processes personal information about people who enquire about properties listed by our agent clients. This includes: first name, last name, email address, phone number, the property they enquired about, their suburb of interest, indicators of financial readiness (e.g. buying timeline, whether they currently own property), and the history of automated conversations held on the agent’s behalf.
In relation to lead data, the relevant real estate agent is the data controller — they collected or authorised the collection of this information through their property listings. GetListingFlow acts as a data processor, handling this information only to provide the service to the agent.
We collect personal information in the following ways:
Directly from real estate agents during the onboarding process, when they provide their details and authorise GetListingFlow to access their CRM system.
From property portal CRM integrations (such as those connecting realestate.com.au and Domain enquiries to CRM platforms like Eagle Software, Rex, Agentbox, Console Cloud, and PropertyMe), where an agent has authorised GetListingFlow to access their CRM data.
Through automated conversations that GetListingFlow initiates on the agent’s behalf in response to buyer enquiries. Information provided by leads during these conversations is captured and stored.
From the agent’s existing CRM system, including historical contact records and communication history, where the agent has granted us access during onboarding.
GetListingFlow does not independently purchase, acquire, or scrape lead data. All lead information originates from enquiries made to the agent’s property listings on portals the agent actively uses.
For agent data, we use personal information to: provide and maintain the GetListingFlow service; process payments and manage subscriptions; communicate with agents about their account, service updates, and strategy sessions; improve our product and train our systems to better serve Australian real estate contexts; and comply with our legal obligations.
For lead data, we use personal information exclusively to: respond to property enquiries on behalf of the relevant agent within the agreed service scope; qualify leads by gathering information about their buying timeline, financial position, and property requirements; book inspections and appraisals into the agent’s calendar; and send follow-up suburb market communications where the lead has engaged with the system and has not opted out.
Lead data is never used for GetListingFlow’s own marketing purposes. We do not contact leads to promote GetListingFlow or any other product. Lead data is never sold, rented, or traded to any third party.
GetListingFlow uses artificial intelligence and automated systems as a core part of its service. We are transparent about this. Our system:
Generates responses to property enquiries on behalf of licensed real estate agents
Scores and ranks leads based on their responses and engagement
Detects signals that a buyer may also be a potential property vendor
Analyses the agent’s past communications to match their tone and style
People who enquire about properties managed through GetListingFlow are communicating with an automated response system that operates on behalf of a licensed real estate agent. The relevant agent has authorised this arrangement, is responsible for the system’s outputs, and reviews the pipeline regularly.
No automated decisions are made that would have a significant legal or financial effect on an individual without the oversight of the relevant licensed agent. GetListingFlow is a communication and qualification tool — final decisions about property transactions, appraisals, and client relationships remain with the agent.
To deliver our service, GetListingFlow shares personal information with the following third-party service providers, each of whom is engaged under data processing terms:
Anthropic (Claude API, USA): Used to generate conversational responses on behalf of agents. Anthropic processes message content to generate text. We do not send personally identifiable information to Anthropic beyond what is necessary to generate a contextually appropriate response.
OpenAI (USA): Used to generate anonymised text embeddings (numerical vector representations of conversations). These embeddings are used for similarity matching and do not contain readable personal information.
Twilio (USA): Used to send and receive SMS messages on behalf of agents.
Resend (USA): Used to send email messages on behalf of agents.
The relevant real estate agent: The agent whose system generated a conversation has full access to the lead data and conversation history associated with their account.
We do not share lead data between agents. Each agent’s data is strictly isolated at the database level. Anonymised, aggregated, non-identifiable statistical insights (for example, industry-wide lead qualification patterns) may be used to improve GetListingFlow’s systems — but these contain no personal information and cannot be used to identify any individual.
We do not sell personal information. Under any circumstances.
Some of our service providers — including Anthropic, OpenAI, Twilio, and Resend — are based in the United States, and data may be processed on their servers outside of Australia. We take reasonable steps under APP 8 to ensure that overseas recipients handle personal information in a manner consistent with the APPs. Each of these providers operates under data processing agreements and maintains industry-standard security practices.
Our primary database, where all lead and agent data is stored at rest, is hosted on a server located in Sydney, Australia.
We take the security of personal information seriously and implement the following measures:
All data is encrypted at rest using AES-256. All data is encrypted in transit using TLS. CRM credentials provided by agents are encrypted using Fernet symmetric encryption before being stored — they are never stored in plaintext. Our database enforces Row Level Security, meaning each agent’s data can only be accessed by authenticated processes acting on that agent’s behalf. Access controls limit system access to authorised personnel only.
We collect only the minimum personal information necessary for the service. All data access is logged. We conduct regular security reviews and update our practices as the threat environment evolves.
In the event of an eligible data breach as defined under the Privacy Act and the Notifiable Data Breaches (NDB) scheme, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required and as quickly as practicable. Agents whose client data may be affected will be notified promptly.
We retain personal information about agents for the duration of their active subscription, plus seven years following termination of the contract. This retention period reflects our obligations under the Corporations Act 2001 (Cth) and the Income Tax Assessment Act 1997 (Cth) for business records.
Personal identifiers — name, email address, and phone number — are retained for a maximum of 24 months from the date of last interaction. After this period, these identifiers are removed and the record is de-identified. Leads who have opted out of communications have their personal identifiers removed promptly following the opt-out, though de-identified conversation records may be retained for system improvement purposes.
Anonymised numerical vector representations of conversations are retained indefinitely. These embeddings do not contain personal information and cannot be used to identify any individual.
You have the right to request access to the personal information GetListingFlow holds about you. To make an access request, contact privacy@getlistingflow.com.au. We will respond within 30 days. In some circumstances we may need to verify your identity before providing access.
If you believe personal information we hold about you is inaccurate, out of date, incomplete, or misleading, you may request that we correct it. Contact privacy@getlistingflow.com.au with details of the correction required.
If you have received communications through a GetListingFlow-powered agent system and wish to stop receiving them, you may opt out at any time by replying STOP to any SMS message or by following the unsubscribe instructions in any email. Opt-out requests are processed immediately. We do not re-contact opted-out individuals.
If you believe GetListingFlow has handled your personal information in a way that breaches the APPs, you may lodge a complaint by contacting us at privacy@getlistingflow.com.au. We will acknowledge your complaint within 5 business days and provide a substantive response within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.
Our website at getlistingflow.com.au may use cookies and third-party analytics tools to understand how visitors interact with the site. Cookies are small text files stored on your device. We do not use cookies to collect personally identifiable information from visitors who have not submitted a contact form.
If you submit a contact form on our website, the information you provide is used solely to respond to your enquiry. It is not added to any marketing list without your express consent.
You can disable cookies through your browser settings. Disabling cookies will not affect your ability to read the content of our website.
For any privacy-related questions, access requests, corrections, or complaints:
GetListingFlow
Email: privacy@getlistingflow.com.au
ABN: 76 484 784 411
Location: Brisbane, Queensland, Australia
Website: getlistingflow.com.au