Privacy Policy

1. Introduction & Operating Entity

Welcome to novaly.au (the “Platform”). The Platform, including Novaly Plus, Novaly Connect, Novaly Get Matched, Novaly OS, and associated tools and mobile applications, is owned and operated by Carden Group Pty Ltd(“we,” “us,” or “our”).

We are committed to protecting the privacy and security of your personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Spam Act 2003 (Cth), and applicable third-party platform developer policies. This Privacy Policy explains how we collect, hold, use, disclose, automate, and manage your personal data when you use the Platform.

By accessing, browsing, registering for, or using the Platform and any of our services, you expressly acknowledge and agree to the collection, processing, disclosure, and handling of your information as described in this Policy. If you do not agree, you must immediately cease using the Platform.

2. Information We Collect

We collect information that you voluntarily provide to us, as well as data automatically generated through your use of the Platform:

3. How We Use Your Information & Platform Automation

Carden Group Pty Ltd uses your personal data for legitimate business purposes and automated platform functions, including:

• Service Delivery: Hosting property and build listings, managing directory showcases, operating community hubs, and processing subscriptions.
• Lead Routing & CRM Sync: Automatically routing your inquiries and OFI check-in responses to the person advertising the listing. That person may be the owner or the appointed agency, builder, or creative pro. Novaly also creates a CRM lead on their Novaly Board.
• Utility & Trade Introductions: Transmitting submitted utility connection requests to authorized referral partners (e.g. MyConnect) and routing project quotes to verified trade specialists.
• Transactional Communications: Sending automated SMS/email digital property brochures, inspection confirmations, subscription receipts, security notices, and password reset instructions.
• Platform Security & Fraud Prevention: Verifying account authenticity, enforcing our Terms of Use, preventing spam or abuse, and complying with Australian regulatory obligations.
• Generative AI (Concierge & Novaly AI): When you use Concierge or Novaly AI, the text you type is sent to Google Gemini to draft a reply. This is automated assistance. It does not decide whether you receive a listing, a Plus plan, credit, or a campaign. You can use the Platform without those AI tools.
• Get Matched lottery: Matching introduces you to up to three Plus professionals by service and suburb. It is a routing aid, not a credit, housing, or insurance decision. You can browse the Directory instead.

6. How We Share and Disclose Your Information

We do not sell, rent, or trade your personal information to third-party data brokers.

We only disclose your data in the following defined circumstances:

• With Listing Agents, Builders & Sellers (Lead Routing): When you inquire on a listing or complete an OFI check-in, your contact information, inquiry notes, and survey details are delivered to that specific real estate agency or builder to fulfill your request.
• Public Display on Your Behalf: Content and media you explicitly submit for public publication (e.g. directory profile, portfolio images, listing photos, forum comments) is publicly accessible across the internet.
• With Verified Service Providers: Trusted third-party cloud infrastructure (Supabase, Vercel), payment gateway (Stripe), email infrastructure (Resend), and telecom carriers (Twilio) strictly for operational delivery and bound by confidentiality.
• Legal Compliance & Protection: Where required by Australian law, court order, subpoena, search warrant, or government agency, or to protect the vital rights, safety, and property of Carden Group Pty Ltd, our users, or the public.

7. Third-Party Agents & Seller Privacy Obligations

All real estate agents, agencies, owners advertising their own property, builders, and professionals (“Sellers”) receiving lead data via Novaly agree under our Terms of Use to handle personal data in strict compliance with the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth). Sellers are strictly prohibited from selling or distributing buyer contact details to third parties.

Disclaimer: While Carden Group Pty Ltd imposes strict contractual requirements on registered professionals, Carden Group Pty Ltd is not responsible or legally liable for any independent privacy breaches, marketing practices, or data management actions committed by independent third-party agencies or professionals once lead data has been transmitted to them.

8. Data Security & Limitation

We implement robust technical and organizational security measures, including SSL/TLS encryption for all data in transit, encrypted storage, database row-level security (RLS), and restricted administrative access.

However, no internet transmission or electronic storage method is 100% immune to breach. While Carden Group Pty Ltd takes all reasonable steps to safeguard your personal data, we cannot warrant or guarantee absolute security, and you transmit information to us at your own risk.

9. Your Rights, Access & Data Deletion

Under the Australian Privacy Principles, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate, out-of-date, or incomplete data.
• Opt out of non-essential marketing communications via the unsubscribe link in any promotional email.
• Request deletion of your account and personal records, subject to statutory record-keeping, tax, or legal defense requirements.

You can manage your data directly in your Privacy Settings or submit a written request to our Privacy Officer.

10. Contact Our Privacy Officer

If you have questions, feedback, or wish to raise a complaint regarding our privacy practices, please contact: