Privacy policy
Who we are
ListStream is provided by Made By Matter Pty Ltd (ACN 699 846 896), Brisbane, Australia. This policy explains how we handle personal information, following the Australian Privacy Principles in the Privacy Act 1988.
What we collect
| Whose | What | Where it comes from |
|---|---|---|
| People with a ListStream account | Name, email address, and sign-in details (your password is handled by our sign-in provider; we never see it) | You, when you sign up or sign in with email or Google |
| Agencies | Agency name, ABN, contact email, office phone, website, CRM | You |
| Listing agents | Name, phone numbers, email address, and photo if supplied | The agency, directly or through its CRM |
| People who email us | Your email address and what you write | You |
| Website visitors | The page visited, the type of browser or crawler, the country and network it came from, and whether it came from an AI assistant. We don't keep IP addresses in these records and don't use tracking cookies. | Your browser, automatically |
We don't want details of vendors, landlords, tenants or buyers. Some CRM files include vendor details. When we process a file, we remove them, and we never publish them.
Why we use it
- To run ListStream: create and secure accounts, receive and process listings, and show agencies their reports.
- To publish listings. Listing agents' names and contact details are published with each listing, so buyers and renters can contact them. That is the main purpose of the service.
- To tell search engines about new and changed pages (we send page addresses only).
- To contact you about your account (such as verifying your email address or resetting a password) and about changes to our terms.
- To keep the service secure, fix problems, and meet our legal obligations.
We don't sell personal information, and we don't use it for advertising.
Who we share it with
- The public: listing pages, including listing agents' contact details, are public and can be read by anyone, including search engines and AI assistants.
- Cloudflare hosts ListStream and stores our data. Its network runs in many countries, including Australia and the United States.
- Google provides sign-in (Firebase Authentication, in the United States), receives our sitemap (page addresses only), and hosts the mailbox our contact address forwards to.
- Microsoft Bing and other IndexNow search engines receive page addresses when listings change.
- CRMs you connect receive processing reports about the listings they send for you.
Because these providers operate overseas, personal information may be stored or processed outside Australia, including in the United States. We use providers with recognised security practices and limit what we send them to what each one needs.
How we protect it
- All connections use encryption (HTTPS). Our providers encrypt stored data.
- Each agency can only see and change its own account and listings, and only listings carrying its ListStream ID are accepted.
- CRMs can only send listings for an agency that has approved them, and the agency can revoke that at any time.
- Access to our systems is limited to the people who run ListStream.
How long we keep it
- Account and agency details: while the account is open, and deleted within 30 days of it closing.
- Listings, including agents' details: while the listing is on ListStream. Sold and leased listings stay as records of the sale until the agency removes them.
- Copies of files delivered by CRMs (with vendor details removed): up to 90 days, to fix problems, then deleted.
- Website visit records: up to 90 days.
Seeing and correcting your information
You can see and update your account and agency details in your dashboard. To ask for a copy of the personal information we hold about you, or to correct it, email hello@liststream.com.au. If you are a listing agent, you can also ask your agency to update your details in its CRM. We'll respond within 30 days.
Complaints
If you're concerned about how we've handled your personal information, email hello@liststream.com.au and we'll respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Data breaches
If a data breach is likely to cause serious harm, we will assess it promptly, notify the people affected and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires, and tell you what we are doing about it.
Changes to this policy
We'll post any change here with a new version, and email agencies about significant changes.
Contact
Made By Matter Pty Ltd, Brisbane, Australia · hello@liststream.com.au