Privacy Policy

Riseport Pty Ltd (ABN 90 677 874 261) (“Riseport”, “we”, “us”, “our”) is committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains what personal information we collect, how we collect and use it, who we disclose it to, and how you can access, correct or complain about our handling of it.

By using Riseport, you acknowledge that your personal information will be handled as described in this Policy.

1. Who we are

• Entity: Riseport Pty Ltd
• ABN: 90 677 874 261
• Country: Australia
• Contact: hello@riseport.co
• Privacy enquiries: hello@riseport.co

Riseport is a software-as-a-service (SaaS) platform that helps Australian residential-property investors and landlords manage their property portfolios. It tracks properties, leases, transactions, valuations and documents; surfaces portfolio insights such as equity, yield and cashflow; ingests and triages property-related email through its “Action Center”; and presents publicly-available macroeconomic information through “Market Pulse”.

2. What personal information we collect

We collect the following categories of personal information:

Account information

Your name, email address and authentication data (managed via our authentication provider — see Section 6).

Billing information

Subscription tier, subscription status and billing metadata. Card and payment details are collected and processed by our payments provider (Stripe) and are not stored by Riseport.

Property and financial data you enter

Information you input about your properties, leases, tenancies, transactions, valuations, loans and cashflow. This data may relate to you or to third parties (for example, tenants).

Documents you upload

Files you upload to Riseport, such as leases, statements, contracts, invoices and correspondence, together with any personal information contained in them.

Forwarded third-party email content

Email you forward into your per-property Riseport inboxes — for example, correspondence from real-estate agents, tenants, lenders and strata managers — including the message content, attachments, sender and recipient details, and any personal information contained within.

Usage, device and cookie data

Information about how you access and use Riseport, including log data, device and browser information, IP address, and information collected via cookies and similar technologies (see Section 10).

We do not intentionally collect sensitive information (as defined in the Privacy Act). Documents you upload and email you forward may nonetheless contain personal information — and potentially sensitive information — about you and about third parties who are not Riseport users. This information is collected indirectly (not from the individual concerned). We handle such indirectly-collected information only for the purposes described in this Policy and take reasonable steps to protect it.

3. How we collect personal information

We collect personal information:

• Directly from you — when you create an account, enter data, upload documents, subscribe, or contact us.
• Via forwarded email — when you forward third-party email into your Riseport inboxes, it is received on our behalf through our email provider (Mailgun — see Section 6). This may include personal information about third parties (see Section 5 on your responsibilities).
• Automatically — through cookies, analytics and server logs when you use the platform (see Sections 10 and 6).

4. Why we collect, hold and use your personal information

We collect, hold and use personal information to:

• provide, operate and maintain the Riseport platform and its features;
• authenticate you and secure your account;
• process subscriptions, billing and payments;
• store, organise and display your property, financial and document data;
• ingest, triage and process forwarded email, and suggest or draft actions;
• generate portfolio insights (such as equity, yield and cashflow) and present publicly-available macroeconomic information;
• provide customer support and respond to enquiries;
• improve, troubleshoot and secure the platform;
• send you service communications and, where permitted, marketing communications (see Section 9);
• comply with our legal obligations.

We do not use your content (whether in identified, de-identified or aggregated form) to train or fine-tune AI/LLM models, or for other model-improvement purposes. This position is stated consistently in Section 5 below and in Section 7 of the Terms of Service.

5. AI and automated processing of your content

Riseport uses automated processing, including artificial intelligence and large language models (AI/LLM), to:

• summarise documents and forwarded email;
• extract and organise information; and
• suggest or draft actions for you to review.

This means the content you enter, upload or forward may be processed by automated systems. Forwarded email and document content is processed using a third-party AI inference provider, DeepInfra, located in the United States (see the overseas-disclosure table in Section 7). DeepInfra does not use data submitted to its APIs to train models. During standard inference your input data is processed in memory only and is not stored to disk, the generated outputs are deleted after being returned, and DeepInfra logs only request metadata (such as the request identifier, cost and sampling parameters) — not the content of your requests.

Your content is processed only to provide the features described here. It is not used — in identified, de-identified or aggregated form — to train or improve Riseport’s or any provider’s AI/LLM models. This matches Section 4 above and Section 7 of the Terms of Service.

AI outputs can be inaccurate, incomplete or out of date. They are generated automatically, are provided for information and productivity purposes only, and are not financial, tax, legal or other professional advice. You must review and verify any AI-generated summaries or suggestions before relying on or acting on them. See our separate Disclaimer.

When you forward third-party email, you are responsible for ensuring you are authorised to share that content with us for processing as described in this Policy (see also our Terms of Service).

6. Who we disclose your personal information to (subprocessors)

We disclose personal information to trusted third-party service providers (“subprocessors”) who help us operate the platform. We only share what is reasonably necessary for them to perform their services, and we require them to protect your information.

We may also disclose personal information where required or authorised by law, to protect our legal rights, or in connection with a sale or restructure of our business (subject to appropriate protections).

We do not sell your personal information.

7. Overseas disclosure (APP 8)

Your personal information is primarily stored in Australia: our application is hosted in Sydney (Binary Lane), and identity and authentication data is held by Kinde in its Australian data region. Neither of these is an overseas disclosure.

Some of our other subprocessors do, however, store or process personal information overseas — specifically in the United States. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure the recipient handles it consistently with the APPs.

The following subprocessors process personal information overseas, in the United States:

8. Data location and security

Our application and its primary data store are hosted on infrastructure located in Sydney, Australia (Binary Lane), and identity and authentication data is held by Kinde in its Australian data region. Uploaded documents are stored via Cloudflare R2, located in the United States.

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure, including access controls, encryption in transit and at rest, and use of reputable service providers. Uploaded documents stored via Cloudflare R2 are encrypted at rest by default (AES-256). No system is completely secure, and we cannot guarantee absolute security.

If we become aware of a data breach that is likely to result in serious harm, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act.

9. Direct marketing and the Spam Act

With your express consent (or where otherwise permitted by law), we may send you marketing communications, such as a newsletter or product updates. This consent is obtained on an express opt-in basis when you sign up.

Consistent with the Spam Act 2003 (Cth), our commercial electronic messages will identify us and include a functional unsubscribe facility. You can opt out of marketing communications at any time by using the unsubscribe link in the message or by contacting us at hello@riseport.co. We will action unsubscribe requests within 5 business days.

Service and transactional communications (for example, billing notices, security alerts and important account notifications) are necessary to provide the service and are not marketing; you cannot opt out of these while you hold an account.

10. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the platform, and understand how it is used.

We use PostHog for product analytics to help us improve the platform. On our marketing site (riseport.co), analytics uses a cookie shared with the Riseport app, so we can recognise you if you move between the two — the cookie notice on our site discloses this and lets you opt out of analytics on this site (this opt-out does not extend to analytics within the app itself). If you later sign in, browsing you did on our marketing site may be linked to your Riseport account. Elsewhere on the platform, analytics remains primarily server-side event capture (recorded on our servers as you use the platform). If we introduce further browser-based analytics or session replay, we will implement a cookie-consent mechanism before doing so, as we have here.

You can control cookies through your browser settings. Disabling some cookies may affect how the platform works.

11. Access and correction (APP 12 and APP 13)

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Much of your data can be viewed and edited directly within the platform.

To make an access or correction request, contact us at hello@riseport.co. We will respond within a reasonable period. In limited circumstances we may decline a request as permitted by law, in which case we will explain why.

12. Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us first at hello@riseport.co so we can try to resolve it. We will acknowledge your complaint and aim to respond within a reasonable period.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992

13. Data retention and deletion

We retain personal information for as long as it is needed to provide the service, and thereafter as required to meet our legal, accounting and record-keeping obligations, resolve disputes and enforce our agreements.

You may delete data within the platform, and you may request deletion of your account and associated personal information by contacting us at hello@riseport.co.

Our standard retention and deletion policy is:

• Grace period. If you cancel, you have a 30-day grace period during which you may reactivate your account or export your data.
• Content deletion. After the grace period ends, your content is deleted within 90 days.
• Backups. Personal information in our backups is purged within 90 days as backups are cycled out.
• Billing and transaction records. We retain minimal billing and transaction records for approximately 7 years to meet our Australian tax and record-keeping obligations (including those of the Australian Taxation Office).

14. Children

Riseport is intended for use by adults (18 years and over) and is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected such information, please contact us and we will take appropriate steps to delete it.

15. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised effective date and, where the changes are material, take reasonable steps to notify you. Your continued use of Riseport after an update constitutes acceptance of the revised Policy.

Effective date: 7 July 2026

16. Contact us

Riseport Pty Ltd (ABN 90 677 874 261)
Email: hello@riseport.co