Privacy Policy

Last updated: 22 May 2026

Who we are

Report Decoded is operated by Morgan Smith (sole trader, Australia). You can contact us at info@reportdecoded.com.au.

What we collect

• The inspection report PDF you upload.
• The email address you provide for delivery of your analysis.
• The purchase price you enter (optional).
• Property type indicator (pre-purchase vs new-build handover; owner-occupier vs investment).
• Payment information — handled entirely by Stripe; we never see your card details.

How we use it

• Anthropic (Claude AI): your PDF is sent to Anthropic's Claude API to extract defects and produce the analysis. Anthropic does not train on data submitted via their API.
• HERE Maps: we send the property address from the report to HERE Maps to geocode it and search for local tradies. HERE Maps does not retain this data beyond the immediate query.
• Stripe: handles the $59 payment. They store your card and contact details under their own privacy policy.
• UploadThing: hosts your uploaded PDF temporarily so it can be processed.
• Resend: sends you the "your report is ready" email.
• Supabase: stores the analysis output linked to your email so we can deliver and re-show your report.

Where your data is processed

Several of the services we use to deliver your analysis are based outside Australia. By using Report Decoded you consent to your personal data being transferred to and processed in the following countries:

• United States: Anthropic (Claude AI inference), Stripe (payment processing), Resend (transactional email delivery), Vercel (web hosting + serverless functions).
• Singapore: UploadThing (where your uploaded inspection PDF is temporarily stored for processing) and Supabase (where your analysis result is stored so we can deliver and re-show your report).

Each of these providers is contractually required under their service agreements with us to protect your data to standards equivalent to the Australian Privacy Principles. Both the United States and Singapore have mature data-protection frameworks. We do not sell, lease, or otherwise transfer your data to any third party for marketing purposes.

If you would prefer your data not be transferred outside Australia, you should not use this service — the analysis cannot be performed without sending the inspection PDF to Anthropic for AI processing.

How long we keep it

We currently retain reports indefinitely so you can revisit them. You can request deletion of your data at any time by emailing info@reportdecoded.com.au. We aim to introduce automatic deletion after 30 days in a future update.

Your rights

Under the Australian Privacy Act 1988 you have the right to access, correct, or request deletion of personal information we hold about you. Email us at the address above and we'll action your request within 30 days.

Tradie listings

The tradesperson suggestions shown in your report are sourced from public business listings via HERE Maps and are not endorsed or verified by Report Decoded. Always verify a tradesperson's licence and insurance before engaging them.

Cookies

We use only essential cookies required for the site to function (e.g. session state during checkout). No advertising or third-party tracking cookies are set.

Changes

We may update this policy. The "Last updated" date at the top will reflect any changes. Material changes will be communicated by email where we have your address.

This page is a plain-English starter and not a substitute for advice from an Australian privacy lawyer. We will refine it as the product evolves.