Last updated: 15 April 2026
Privacy Policy
Version 1.0 | ABN 42 922 821 474
1. About this policy
This Privacy Policy explains how the operator of homestack.au (ABN 42 922 821 474) (“we,” “us,” “our”) collects, uses, stores, and discloses your personal information when you use homestack.au (“the Site”). We are committed to complying with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. What personal information we collect
| Category | What we collect | When |
|---|---|---|
| Calculator inputs | State, income, savings, property preferences, citizenship status, buyer type | When you use the wizard. Not stored server-side unless you choose to save or share your results. |
| Broker referral | Name, email, phone number, state | When you opt into being connected with a mortgage broker |
| Account registration | Email address, name (optional) | When you create a HomeStacker account |
| PDF purchase | Name, email, payment details (via Stripe) | When you purchase a PDF strategy report. Card details are processed by Stripe and never touch our servers. |
| Analytics | Page views, device type, browser, country | Automatically collected via privacy-preserving analytics. No personal identifiers, no cookies, no cross-site tracking. |
3. How we use your information
We use personal information for the following purposes:
- to operate the calculator and display your results;
- to save your scenarios to your account if you choose to register;
- to share your contact details with a licensed mortgage broker if you opt into a referral;
- to process your PDF purchase via Stripe;
- to send transactional emails related to your account or purchase;
- to monitor Site performance and usage patterns through aggregated, non-identifying analytics;
- to comply with our legal obligations.
We will not use your personal information for direct marketing unless you have explicitly opted in. We do not sell your personal information.
4. Who we share your information with
We share personal information only where necessary to provide the Site's services or to comply with law. Our third-party service providers are:
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Website hosting and serverless functions | United States / Global |
| Amazon Web Services (AWS) | Database (DynamoDB), authentication (Cognito), API hosting | Australia (ap-southeast-2) |
| Stripe | Payment processing for PDF purchases | United States / Australia |
| Resend | Transactional email delivery | United States |
| Plausible or PostHog | Privacy-preserving website analytics | European Union |
| Licensed mortgage brokers | Broker referral (only if you opt in) | Australia |
Each provider is bound by their own privacy policies and, where applicable, data processing agreements. We take reasonable steps to ensure they handle your data in accordance with the APPs.
5. Cross-border data transfers
Some of our service providers process data outside Australia, including in the United States and the European Union. Where personal information is transferred overseas, we take reasonable steps to ensure the recipient handles it in a manner consistent with the APPs. By using the Site, you acknowledge and consent to this transfer. The countries where data may be processed are listed in section 4 above.
6. Data security
We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Measures include: encryption of data in transit (TLS/HTTPS); access controls on our database and infrastructure; use of Stripe for payment processing so card details never touch our servers; and regular review of our security practices. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Data retention
- Calculator inputs: not stored server-side unless you save or share your results. Saved scenarios are retained while your account is active and deleted upon request.
- Broker referral data: retained for up to 7 years to comply with Australian tax record-keeping obligations.
- Account data: retained while your account is active. You can request deletion at any time.
- Payment records: retained for 7 years for tax and accounting purposes.
- Analytics data: aggregated and non-identifying; retained according to the analytics provider's policies.
8. Your rights
Under the Australian Privacy Principles, you have the right to:
- access the personal information we hold about you;
- request correction of inaccurate, out-of-date, incomplete, or misleading information;
- request deletion of your personal information, subject to our legal obligations to retain certain records.
To exercise any of these rights, email us at contact@homestack.au. We will respond within 30 days. We may need to verify your identity before processing your request. There is no fee for making a request, but we may charge a reasonable fee for providing access if the request is manifestly unfounded or excessive.
9. Cookies and tracking
We do not use advertising cookies, cross-site tracking pixels, or third-party profiling tools. Our analytics solution (Plausible or PostHog) is privacy-preserving and does not use cookies or collect personal identifiers. It tracks aggregated page views, device types, and referral sources only.
If we use any essential cookies in the future (such as for authentication sessions), we will update this policy accordingly.
10. Children's privacy
The Site is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a person under 18, we will take steps to delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will publish the revised policy on the Site with an updated date. Your continued use of the Site after changes are published constitutes your acceptance of the revised policy. We encourage you to review this page periodically.
12. Contact us
For questions about this Privacy Policy or to make a privacy-related request, contact us at contact@homestack.au. We will provide our ABN or registered business details on written request where legally required.