Last updated: 3 October 2026
Yohaan Shah trading as LeadBot AU, ABN 75 682 973 818 (“LeadBot AU”, “we”, “us”) provides a software service that helps real estate agents re-engage contacts in their CRM via SMS. This policy explains how we handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This policy covers personal information we handle about:
For an agent’s contacts, we collect and handle their information on behalf of the agent, as a service provider acting on the agent’s instructions. The agent has the direct relationship with those individuals and carries the primary obligations to them under the Privacy Act, including the lawful basis to contact them. Where we handle personal information on behalf of an agent, we require the agent to comply with the Privacy Act and the APPs.
From agents and prospective customers: name, business name, email, phone number, billing details, CRM account connection details, and information you submit through forms on our website.
About agents’ contacts (on the agent’s instruction): name, phone number, and contact/status information synced from the agent’s CRM; the content of SMS conversations between the Service and the contact; and derived information such as intent, timeline, and status notes.
Automatically: basic technical and usage data (for example, log data) needed to operate and secure the Service.
Sensitive information. We do not seek sensitive information (as defined in the Privacy Act — for example health, racial or ethnic, religious, or political information). We ask agents not to connect sensitive information through the Service, and not to steer conversations toward it.
We use personal information to:
Consent basis. We rely on each agent’s confirmation that they hold the lawful basis and any consent required to contact the people in the database they connect. We do not independently obtain consent from an agent’s contacts; the agent is contractually responsible for that.
Messages are sent from a replyable Australian mobile number and identify the sender. Every recipient can opt out at any time by replying as directed in the message. When a contact opts out, we suppress further messages to that contact and record the opt-out.
We disclose personal information to:
We do not sell personal information.
We store information using Railway (PostgreSQL) infrastructure in an Australian region (Sydney). Our SMS provider (Twilio) may transmit or process message content and phone numbers through infrastructure located outside Australia in the course of delivering messages. Where personal information is disclosed to or handled by a provider overseas, we take reasonable steps to ensure it is handled consistently with the APPs. We do not otherwise store your personal information outside Australia.
We apply reasonable technical and organisational measures — including access controls, encryption in transit, and hosting in a reputable Australian-region environment — to protect personal information against loss, misuse, and unauthorised access. No system is completely secure. If a data breach occurs, we will promptly assess it and, where it is an eligible data breach likely to result in serious harm, notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.
We keep personal information only as long as needed to provide the Service and meet legal obligations. Specifically: an agent’s connected contact data is deleted or returned within a reasonable period after the agent stops using the Service; records of an agent’s acceptance of our terms are kept for the period we may need them to establish the agreement (generally up to six years after the agreement ends); and we delete or de-identify other personal information when it is no longer needed.
The Service uses automated, AI-generated messaging to conduct SMS conversations with an agent’s contacts. These messages are automated and may occasionally contain errors or misinterpret a reply. The Service does not use these conversations to make decisions that have a legal or similarly significant effect on any individual; its role is to identify potential interest and hand the conversation to the agent. It does not provide property, financial, or legal advice.
You may request access to, or correction of, the personal information we hold about you. If you are an agent’s contact and wish to access, correct, or remove your information, the quickest route is usually the agent who holds your details; you may also contact us and we will assist and, where appropriate, direct the request to the relevant agent.
To make a request or a privacy complaint, contact our privacy contact at shah.yohaan@gmail.com. We will consider and respond within a reasonable time. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
We may update this policy from time to time. The current version is always available on this page, and the “last updated” date shows when it last changed.