Privacy

Last updated: 7 October 2026.

This policy explains what personal information HelloBuys collects, why, and what you can do about it. HelloBuys is operated by ideator Pty Ltd (ABN 32 647 704 292), Sydney, Australia.

1. What we collect

• Account details: your name, your email address and a hashed form of your password.
• Deal content: the project, the items, the price, the messages and the handover notes that you or the other party add.
• Signature records: your legal name, the time and your IP address when you sign a purchase agreement.
• Payment records: the amount and the status of your deal fee. Stripe holds your card details. We do not.
• Identity check results: whether and when Stripe verified your identity. Stripe holds your identity document. We do not.
• Connections: if you connect a SideProjectors account, the access token that lets us read your listings.
• Server logs: our web server records each request with your IP address and your browser type. We keep these logs for 14 days.

2. Why we use it

• To run your deals: show each party the deal, build the purchase agreement and keep the records.
• To send you emails about your deals: invitations, your turn, messages, payments and signatures.
• To keep the service secure and to prevent misuse.
• To meet our legal obligations.

3. Who sees it

• The other party in a deal sees your name, your email address, your messages and the deal content.
• Stripe processes fee payments and identity checks.
• Escrow.com receives the details it needs to hold and release the purchase price.
• Purelymail sends our emails. Contabo hosts the service in the United States. Cloudflare carries the traffic to it.

We do not sell your personal information. We do not use it for advertising.

4. The background check

The background check reads public information about the project address only, such as DNS records, the home page and domain registration data. It does not read private data.

5. Cookies and local storage

We use one session cookie and store a sign-in token in your browser so that you stay signed in. We use no analytics tool and no advertising tracker.

6. How long we keep it

We keep deal records, including the purchase agreement and the signature records, for 7 years after a deal ends, because both parties may need them. When you delete your account, we close it and remove your sign-in. Your name stays on the records of the deals you took part in.

7. Your choices

• Change your name, email address and password on the Account screen.
• Choose which emails you get on the Account screen. We always email you about payments and signatures.
• Delete your account on the Account screen, when all your deals are complete or cancelled.
• Ask for a copy of your personal information, or ask us to correct it. Email [email protected].

We handle personal information under the Australian Privacy Principles. If you are in the European Union or the United Kingdom, you also have the rights that the GDPR gives you, including the right to object and the right to have your information erased. If you are not satisfied with our answer to a complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

8. Security

We store passwords in hashed form and send data over encrypted connections. No service is completely secure. Tell us at once if you think someone else has used your account.

9. Changes to this policy

We can change this policy. If a change is important, we tell you by email before it applies.

10. Contact

Email [email protected] with any question about this policy.