Version 1.0 · effective 1 September 2026
IAMXO Pty Ltd (ABN 87 650 650 034) trading as Occubuy Australia.
IAMXO Pty Ltd (ABN 87 650 650 034) trading as Occubuy Australia (Occubuy, we, us or our) is committed to protecting your privacy in accordance with with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
This Privacy Policy explains how we handle your personal information and what rights you have.
We do not collect your banking passwords, and we do not collect government identity documents. We do not conduct any identity checks for users of our platform. However, if you go on to deal with a partner they may run their own.
You can browse our site, read our content and ask a general question without telling us who you are. Once you join we need your real details, because points depend on us knowing the activity is yours.
We collect personal information:
Where you use our platform, rent tracking uses Australia’s Consumer Data Right. We are not accredited under the CDR and never collect data from your bank ourselves. Yodlee, an accredited data recipient, and Effi as its CDR representative, collect it with your consent and disclose it to you in your Occubuy account. You can revoke your consent any time through the consent dashboard.
Before you first connect, we ask separately for your Data Processing Consent, including permission to use that data to award points for verified rent (including past rent, up to 24 months back), categorise transactions, generate insights, run your savings goals and calculate your Readiness Score.
Using de-identified data for the insights we sell is its own separate choice. You can withdraw the consent and have the data deleted at any time. You authenticate directly with your bank. We never see your passwords and we do not screen scrape.
To run the rewards program and fulfil your redemptions; to give you your Readiness Score, tools, goals and content; to run your account and answer you; to show factual listings; to work out which licensed professionals may be relevant and offer you an introduction; to prevent fraud; to improve the service; to send marketing you have agreed to; and to meet our legal obligations.
Licensed professionals you ask to meet: your name and contact details, and nothing else. Never your documents, payslips, identification, Readiness Score, transaction data or app data. All that comes back to us is confirmation you attended, so we can credit your points.
Partners who fund points or you buy from: confirmation that you completed the behaviour or purchase, so they can settle with us. Nothing more.
Reward suppliers: your name, a delivery or email address, and an order reference.
Real estate agencies: nothing. They advertise on our platform on a flat fee; you contact them yourself.
Other members: only if you ask to be introduced to someone to buy a home with, and only what you agree to share.
Service providers who help us run the platform and our business, including IT, data storage, web hosting, marketing, and analytics providers.
Professional advisers: including our bankers, auditors, insurers and lawyers; and
Corporate transactions: if we merge with, or are acquired by, another company, or sell our business assets, your information may be disclosed to our advisers, to a potential purchaser's advisers, and may be included in the transferred assets; and
Courts or regulators: where the law requires or authorises it.
We may sell cohort-level patterns (such as median rent for renters of a given age in a given city). These insights describe groups, never individuals, we de-identify them to OAIC standards, and recipients are contractually barred from trying to re-identify anyone. Only data from members who gave the Data Processing Consent is used. Opting out stops your data being included in future insights, but cannot recall ones already produced, because de-identified data cannot be traced back to you.
We use automated processing, including AI, on our platform to calculate your Readiness Score, categorise transactions, verify actions and award points, decide whether you meet a published reward condition, and personalise content. When we work with AI providers, we ensure that they only process your data in accordance with privacy laws, through appropriate contractual protections. Your information, prompts and outputs never train their models. Models we build ourselves stay inside Occubuy.
Any information generated or inferred about by you AI technologies is treated as personal information, and you maintain all the rights outlined in this Privacy Policy.
Where a computer program makes, or substantially helps make, a decision that could significantly affect you, we will tell you and you can ask a person to review it. Choosing which professionals to offer you an introduction to, flagging activity for fraud review, and preparing property qualification information are all cases where a person makes the final call.
Marketing is opt-in, every message has a working unsubscribe honoured within 5 business days, and turning it off never affects your points or access. We never use your open banking data for marketing. Browsing the catalogue in the app is program functionality, not marketing; emailing you about offers is marketing and needs your consent.
We use cookies and advertising tools including Google and Meta. They receive technical and usage data only. They never receive your banking data, transaction data, points activity or Readiness Score, and we never build advertising audiences from them.
We store your information in Australia. However, may disclose information overseas, including the United States, where our service providers, cloud, analytics and communications providers, and business partners are located overseas. Before disclosing your information overseas, we take reasonable steps to ensure that the recipient treats your information in accordance with applicable law.
We protect your information with encryption in transit and at rest, access controls, staff training and vendor checks, and if a breach is likely to cause serious harm we will tell you and the OAIC. We keep information only as long as we need it or the law requires, then destroy or de-identify it. You can ask us to delete your account and data and we will action it within 30 days unless the law requires us to keep something.
Access and Correction: You can ask for access to your information and to have it corrected. We aim to respond within 30 days and charge nothing to make a request.
How to Contact Us: Contact our Privacy Officer at admin@occubuy.com.au or Suite 8 Level 8, 84 Pitt Street, Sydney NSW 2000.
How to Make a Complaint: If you are unhappy with our answer you can escalate to senior management or contact the OAIC on 1300 363 992 or at oaic.gov.au. Complaints about the open banking part of the chain can also go to the accredited participants or the OAIC.
Occubuy is for people aged 18 and over. We do not collect, hold or use credit reporting information. We never obtain your credit score or credit report, and your Readiness Score has nothing to do with your credit file.
We may update this Privacy Policy at any time by posting the revised version on our website.
IAMXO Pty Ltd (ABN 87 650 650 034) trading as Occubuy Australia, Suite 8 Level 8, 84 Pitt Street, Sydney NSW 2000, admin@occubuy.com.au