Privacy policy

Who we are

EPIP — the Environmental Property Intelligence Platform — is operated by MouldAI Solutions Australia Pty Ltd (ABN 71 697 577 058). In this policy, “we”, “us” and “MouldAI” mean that company, which is responsible for the personal information collected through EPIP.

We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

When you request a Free Property Assessment. Your first and last name, email address and, if you give it, phone number; which best describes you (for example homeowner, buyer or tenant); the property’s street address, suburb, state and postcode; what prompted the request; and, if you tell us, details of earlier professional inspection, testing or remediation work at the property and who carried it out. We record the permissions you give on the form and when you gave them.

When you apply to join the provider network. Your name, email address, phone number, role, and the services and coverage you describe.

When you enquire about a product or register interest. Your name, email address, which best describes you, and, if you give them, your organisation and your question, with the product you asked about. We use these to reply to you and, only if you ask us to, to tell you when that product becomes available. They are sent by email, through Resend, to our contact mailbox, which is held by our email hosting provider; they are not added to any property record, and no account, order or payment is created. To limit repeated submissions we keep short-lived counters keyed to a one-way code derived from your IP address and email address; they expire within a day.

How you reached us. If the link you followed carried campaign details (such as a source or campaign name), we record those with your request.

Property information and evidence. Information about the properties you ask us about or hold a record for — water and moisture events, documents, photographs, reports, testing, investigations, remediation and verification — together with who submitted each item and when. Attribution is kept deliberately: evidence whose source is unknown cannot be relied on.

Signing in. EPIP does not use passwords. If you are given access to a property record, we send a single-use sign-in link to your email address and keep a record of sign-ins and access grants. A secure cookie keeps you signed in; it is necessary for the service and is not used for tracking.

Advertising measurement. Our public pages load the Meta Pixel, which records that a page was viewed. It sets a first-party cookie (_fbp) and sends Meta your IP address, browser details and the address of the page you are on, so we can measure whether our advertising on Facebook and Instagram brings people to EPIP. It does not send Meta anything you type into a form, and we do not send Meta your name, email address, property details or evidence. You can block or delete this cookie in your browser settings, and manage how Meta uses it in your Facebook or Instagram ad preferences. The sign-in cookie below is separate and is not used for advertising.

Technical information. Your IP address and basic request details are processed to deliver the site, limit repeated submissions and protect against misuse, and appear in our hosting provider’s logs.

If you use the property lookup, the address you enter is used to show you general context for that address.

What we do with it

We use your information to respond to your request and assess the property; to match it to any existing property record and to you; to communicate with you about it; to operate and secure the platform; and, for providers, to assess and manage network applications.

With the separate, optional permissions on the request form, we also use it to add your evidence to the property’s ongoing EPIP record; to contribute de-identified information to research and improvement of EPIP; and to contact the professional or company who produced evidence, to verify it or request missing material. Each is optional, and agreeing to one does not agree to the others.

We do not sell personal information and we do not use your property record for advertising.

Who can see your record

A property record is visible only to you, to authorised MouldAI staff, and to any provider explicitly granted access to that property. Provider access is per-property, carries an expiry, and can be revoked with immediate effect.

The public property lookup does not disclose case information, evidence, findings or client details, and does not reveal whether a record exists for an address.

Service providers and overseas processing

We use service providers to run EPIP. They process information on our behalf, and only for that purpose:

• Airtable — the database holding requests, property and case records (United States).
• Vercel — website hosting; the application runs in the United States.
• Resend — delivery of sign-in and service emails, and of product enquiries to our mailbox (United States).
• Our email hosting provider — holds our contact mailbox, including product enquiries.
• Upstash — short-lived counters, holding only one-way codes, used to limit repeated form submissions (United States).
• n8n — workflow automation that processes new requests to match them to property and client records.
• Meta Platforms — advertising measurement through the Meta Pixel, as described above (United States and elsewhere). Meta handles this information under its own privacy policy.
• Google Fonts — the site’s typefaces are loaded from Google, which receives your IP address when a page loads.

As a result, your information is stored and processed outside Australia, including in the United States. We choose providers that protect information to a standard consistent with the Australian Privacy Principles and take reasonable steps to ensure they handle it accordingly.

Where you ask us to arrange work, we share the information a provider needs to carry it out. We may also disclose information where the law requires it.

Paid services

EPIP does not currently take payment online. When paid services are offered, payments will be processed by Stripe, and tax invoices will be issued by MouldAI from its accounting system, Xero. Those providers will receive the details needed to process the payment and issue the invoice — such as your name, email address and the service purchased. We will update this policy before that begins.

Security

Access to records is controlled per person and per property, connections are encrypted, and backups are encrypted. No system is completely secure; if a data breach is likely to cause serious harm, we will notify you and the regulator as the law requires.

How long we keep it

A property intelligence record is intended to persist — that is its purpose. The verified property record remains associated with the property so that authorised future parties can build on established evidence rather than starting again.

Persistence of the property record does not mean that personal information, contact details, health information, claimant or tenant information, or confidential documents are transferred or disclosed to a future owner, tenant, insurer or professional. Access to that information remains subject to the access controls described above and to EPIP's applicable permissions, privacy and disclosure requirements.

Product enquiries are kept for up to 24 months after our last contact with you, then deleted. A request to be told when a product becomes available is kept until we have told you, or until you ask us to stop, whichever is first.

You may ask us to remove personal information that is not part of the property record. Where evidence has been relied on in a finding, we may retain it with its attribution, because removing the source of a conclusion while keeping the conclusion would make the record misleading.

Access, correction and complaints

You may ask for access to the personal information we hold about you, or ask us to correct it, by emailing operations@mouldaisolutionsaustralia.com.au. We will respond within a reasonable time, usually 30 days.

If you have a privacy concern or complaint, email us first so we can try to resolve it. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We will update this policy when the way we handle information changes, and the date at the top of the page will show the latest version.