What we collect, and what we do with it.
Very little, as it turns out. An address, an email, and the payment Stripe handles for us.
Last updated 10 September 2026
We keep the address you check, the email you give us or buy with, and the report we made for you, so your links keep working. We do not run analytics or advertising cookies, we never see your card, and we delete your data when you ask.
1. Who is responsible
Prova is operated by the holder of ABN 64 866 519 855, a sole trader in New South Wales, Australia. Prova is a small business, but we handle your information as if the Australian Privacy Principles applied to us in full. Questions go to hello@provareports.com.au.
2. What we collect
| What | When | Why |
|---|---|---|
| The property address you type | Free check and full report | It is the thing we look up. It is kept with the check or report so the result link keeps working. |
| Your email address, if you ask for the free result by email | Free check, optional | To send you that one result and its link. We only send you anything else if you tick the box asking for it, and every such email carries an unsubscribe link. |
| Your email address | Full report, entered at Stripe checkout | To deliver the report and to handle refunds and questions. |
| The click identifier in the link, if you arrived from an ad | Free check and full report, when present in the link | Kept with the check and the order so we can tell the ad network that a report was bought. That is the only thing it learns; nothing is stored in your browser for it. |
| The name of the website that sent you here, if any (for example a search engine, an AI assistant or a forum) | Free check and sample report | The site's name only, never the page you were on. Kept with the check so we can see which places send people to us. Nothing is stored in your browser for it. |
| One tap on the waiting screen saying what you are doing with the address (browsing, inspecting, making an offer, you own it, renting, curious), if you answer | Free check, optional | To learn who runs a free check and when, so the check and what follows it fit. Kept with the check and in the same first-party events log; it names nobody and changes nothing about your result. |
| A yes/no and a line of feedback, if you leave one | Free check, optional | To find out what the check got wrong or left out. Kept with the check; please don't put personal details in it. |
| Payment details | Full report | Handled entirely by Stripe. We receive a confirmation and a payment reference, never your card number. |
| Your IP address | Every visit to the app | Ordinary web server logs, and a short-lived counter that limits how many free checks one connection can run per hour. |
| Which campaign link you came from, if you say | Full report, optional | A single optional question at checkout so we know what is working. |
We do not ask for your name. We do not collect anything about the property that is not already in the public record. We do not use analytics scripts, advertising trackers or cookies on the marketing site or the app. Our own server keeps a plain count of how checks go (started, finished, how long they took, whether a full report was ordered) against the check's own id, with nothing that identifies you.
3. Who else sees it
Producing a report means sending some of this information to services that do part of the work for us:
- Stripe takes your payment and holds your email and card details under its own privacy policy.
- Resend sends the report email on our behalf and sees your email address and the report.
- NSW Government and council services receive the coordinates of the address so we can query their mapping and planning data. This is how any lookup of a public dataset works.
- An AI language model provider (currently Anthropic, reached directly or through OpenRouter) receives the address and the public-record findings so that the report's explanatory text can be written. It does not receive your email or payment details, and we do not permit our data to be used to train models.
- Our hosting provider stores the server the app runs on.
We do not sell your information or share it with anyone else.
4. How long we keep it
Free-check results are kept for 14 days, or 90 days if you asked for the result by email, so that the link you were given keeps working. Full reports are kept so that their link keeps working. Purchase records, including your email and the Stripe payment reference, are kept for as long as Australian tax law requires us to keep records of sales. Server logs roll over on a short cycle.
If you would like a report or check deleted earlier, email us and we will remove it, together with your email address, unless a record must be kept for tax or refund purposes.
5. Where it is stored
The app and its data run on a single server we control. Some of the services in section 3 store data outside Australia under their own policies.
6. Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it, by emailing hello@provareports.com.au. We respond within a few days. If you are not satisfied with how we handle a privacy concern you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
7. Changes
If this policy changes the date at the top will change with it. Material changes will be noted on the home page for a period after they take effect.