Privacy Policy
Last updated: 2 October 2026
1. Who we are
BondKeeper (bondkeeperau.com) is operated by Rakesh Vijayakumar, ABN 38 244 695 838, based in Sydney NSW. Contact: support@bondkeeperau.com. We handle personal information in line with the Australian Privacy Principles.
2. What we collect
- Account details: email address, and name and profile picture if you sign in with Google.
- Tenancy details: property address, state, lease dates, rent, bond amount, and your agent or landlord's name and email.
- Your records: photos, the time each reached our server, their SHA-256 hashes, annotations, condition ratings, notes, logged issues, and documents you upload such as the agent's entry condition report.
- Flatmates: email addresses of people you invite, and who added each photo or note.
- Emails you send through BondKeeper: the message, recipient, and when it was sent.
- Payments: processed by Stripe. We never see or store your card number.
- Technical data: IP address, browser type and timestamps, for security and troubleshooting.
- Feedback you send us.
3. Photos of your home
Your photos may show your belongings or other people. Avoid photographing people, identity documents or mail. If flatmates appear, get their permission first.
4. How we use your information
- To run BondKeeper: store your records, generate reports, and send the emails you approve.
- To analyse your photos with AI and suggest damage tags and descriptions. These are only suggestions until you confirm them.
- To send reminders you've set up and service emails.
- To process payments, give support, and keep the service secure.
We do not sell your information or use it for advertising. Your photos are not used to train AI models.
5. Who we share it with
- People you choose: your agent or landlord when you send a report or share link, and flatmates you invite.
- Our service providers: OMU SAS (France), which runs the platform BondKeeper is built on, hosted by Hetzner in Falkenstein, Germany. Two AI providers in the United States: Google (Vertex AI), which analyses photos and reads uploaded condition reports, and Anthropic (Claude), which writes text such as deduction responses and analyses photos if Google is unavailable. Stripe for payments. Resend (United States) for email. Google for sign-in.
- Authorities, only when the law requires it.
6. Storage outside Australia
Your information, including backups, is stored in Germany. When you use AI features, your photos, uploaded documents and related details are processed in the United States by Google and Anthropic. We choose providers with published privacy and security commitments. By using BondKeeper, you understand your information is held and processed overseas.
7. How long we keep it
- While your account is open, we keep your records so you can use them at move-out.
- When you delete a photo or your account, it's deleted straight away and share links stop working.
- Payment records are kept for 5 years for tax purposes.
- Nightly backups are kept in Germany. Deleted records drop out of all backups within 42 days.
8. Your choices
You can download your reports, correct your details, and delete your account and data in Settings. To request a copy of what we hold, email support@bondkeeperau.com. We reply within 30 days.
9. Security
Data is encrypted in transit, and access is limited to you, your invited flatmates and people you share a link with. No system is completely secure. If a data breach is likely to cause you serious harm, we will tell you.
10. Complaints
Contact us first at support@bondkeeperau.com. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
11. Age
BondKeeper is for people aged 18 and over.
12. Changes
If we make a significant change to this policy, we'll email you before it takes effect.