Privacy policy

1. Who we are

Land Axis is a property development feasibility and planning-intelligence platform (map search, site attributes, feasibility studies, reporting, and related features) operated by Slate Projects Pty Ltd.

• Legal entity: Slate Projects Pty Ltd (ABN 38 633 404 109)
• Trading as: Land Axis
• Privacy contact: [email protected] (Privacy Officer)
• Postal address: Available on request by email (for privacy requests and formal correspondence)

2. Scope

This policy covers personal information we handle in connection with:

• Our marketing website and account registration / login;
• The authenticated web app (projects, feasibility, documents, settings);
• The map experience (including the map embedded or hosted at map.landaxis.com.au);
• Customer support and transactional email;
• Billing and subscription management.

It does not cover third-party websites or apps that we link to (for example a council planning portal). Those services have their own policies.

3. What personal information we collect

Depending on how you use the Platform, we may collect:

3.1 Account and company information

• Name, email address, and password (or sign-in via Google);
• Company / organisation name and company membership;
• Role or access level within a company account (for example admin vs member);
• Profile or preference settings you choose in the app.

3.2 Feasibility and project content (user content)

• Feasibility studies and scenarios you create (costs, revenues, financing inputs, assumptions, and calculated outputs);
• Projects, notes, and related business records you enter;
• Documents you upload (for example feasibility PDFs) and text extracted from them;
• Chat messages and prompts you send to AI-assisted features (for example document import helpers or Ask Sterling, our assistant), and the model responses stored for your use.

User content may include commercial information about developments and, in some cases, personal information about individuals if you choose to include it (for example names in a PDF). Please do not upload sensitive personal information unless it is necessary for your use of the service.

3.3 Map and site-use information

• Map searches, selected properties or parcels, and related queries;
• Technical map usage events needed to render maps and geocode addresses (via our map provider);
• Public planning and cadastral datasets we display (generally not personal information; see section 4).

3.4 Payment and billing information

• Subscription status, plan type, and billing history associated with your company;
• Payment card and invoice details are collected and processed by our payment provider (Stripe). We do not store full card numbers on our servers.

3.5 Technical and usage information

• IP address, browser type, device/OS, approximate network location;
• Pages and features used, timestamps, and diagnostic or error logs;
• Referrer URLs and similar telemetry needed to operate and secure the service;
• Cookie and local storage identifiers (see section 10).

3.6 Communications

• Messages you send us (email, in-app feedback, support requests);
• Records of service emails we send you (for example account or billing notices).

We do not intentionally collect sensitive information (as defined in the Privacy Act) as part of core Platform use. If you voluntarily provide it in user content, we will handle it only as needed to provide the service you requested.

4. Public planning and cadastral data

The Platform displays planning zones, overlays, parcel boundaries, addresses, and similar datasets sourced from government and open-data providers. That material is generally published information used to power map layers and property context. It is separate from your account and user content. Our Terms of Service explain limitations of accuracy and reliance on that data.

5. How we collect personal information

• Directly from you: when you register, sign in, update a profile, create studies, upload documents, use AI features, contact support, or complete checkout;
• Automatically: when you use the website, app, or map (logs, cookies, device data, map/API usage);
• From third parties: Google (if you use Google sign-in — basic profile/email as permitted by Google); Stripe (payment and subscription events); map infrastructure providers (Mapbox) for map delivery and geocoding; and, where relevant, your company administrator who invites you to a workspace.

6. Why we collect, use, and disclose personal information

We use personal information to:

• Provide, operate, secure, and improve the Platform;
• Authenticate users and manage company workspaces and permissions;
• Store and process feasibility studies, documents, and AI-assisted features you request;
• Display maps, geocode addresses, and return property/planning context;
• Process subscriptions, invoices, and payment-related notices;
• Send service communications (account, security, billing). Marketing emails, if any, include an unsubscribe option;
• Provide customer support and respond to enquiries;
• Monitor performance, debug errors, and prevent abuse or fraud;
• Comply with law, enforce our terms, and protect our rights and users.

We do not sell your personal information.

7. AI features (document import and study chat)

Some Platform features use machine-learning models to help you work with your own content:

• Feasibility PDF import: extracts structured inputs from documents you upload;
• Ask Sterling: answers questions using your company’s study content and related materials you have stored in the Platform.

When you use these features:

• Relevant text (for example extracted PDF content, study excerpts, or your chat message) is sent to our AI processing provider to generate a response;
• We use AI providers as service providers to deliver the feature you requested — not to sell your content;
• We do not use your user content to train public foundation models for unrelated third parties. Provider processing is governed by our agreements with them and their applicable terms;
• AI outputs can be wrong or incomplete. You remain responsible for checking results before relying on them (see also our Terms).

Our current AI inference providers are Anthropic (feasibility PDF import, and Ask Sterling inside a study, a specification and on the map) and Groq (Ask Sterling’s questions across all your studies, and design assist on the map). Embeddings used for retrieval are generated in our application environment. Provider locations are described in section 9.

8. Who we share personal information with

We disclose personal information only as needed to run the Platform, as required by law, or with your direction (for example sharing within your company workspace). Categories of recipients include:

8.1 Service providers (processors)

Providers may change as we evolve the Platform. Material changes will be reflected in this policy. We require service providers to protect personal information and use it only to provide services to us (or as required by law).

8.2 Within your organisation

If you join a company workspace, authorised members of that company may access shared projects, studies, and documents according to workspace permissions.

8.3 Legal and business transfers

• Regulators, courts, or law enforcement when required or permitted by law;
• Professional advisors (lawyers, accountants) under confidentiality obligations;
• Parties to a merger, acquisition, or asset sale, subject to appropriate confidentiality and continuity of privacy protections.

9. Overseas disclosure

Some personal information is disclosed to overseas recipients when we use the service providers in section 8. Likely countries and regions include:

• Australia — primary application databases (Supabase Sydney) and application hosting (DigitalOcean Sydney);
• United States — Mapbox, Stripe, Anthropic, Groq, and Google services as described above;
• Other locations — cloud hosting, CDN edge, or support infrastructure operated by our providers (exact nodes can vary).

Where the APPs apply to an overseas disclosure, we take steps required under APP 8 (for example contractual or other arrangements aimed at ensuring recipients handle personal information consistently with the APPs), unless an exception applies (such as your consent or a legal requirement).

10. Cookies and similar technologies

We use:

• Essential cookies / storage: session and authentication tokens, security, and preferences required for the Platform to function;
• Local application state: for example remembered UI preferences or map state in your browser;
• Provider cookies / beacons: Mapbox and similar infrastructure may set technical cookies or collect usage events needed to deliver maps.
• Analytics cookies: Google Analytics sets first-party cookies (for example _ga) so we can measure how the Platform is used — pages viewed, how visitors arrived, approximate location, and device and browser type — and improve content and navigation.

We use Google Analytics 4 for website measurement. It runs with Google Signals disabled, so we do not receive cross-device advertising or demographic reporting, and we do not use analytics data for advertising or remarketing. Google Analytics derives an approximate location from your IP address and does not retain the address itself; the event data we can report on is kept for 14 months. We do not operate a third-party advertising pixel network on the Platform. If we introduce marketing or advertising cookies, we will update this policy and, where appropriate, provide additional choices.

You can control cookies in your browser settings. Blocking essential cookies may prevent sign-in or core features from working. To opt out of Google Analytics measurement on every site that uses it, you can install Google’s Google Analytics Opt-out Browser Add-on.

11. How we hold and secure personal information

We hold personal information in electronic systems, including:

• Cloud databases and object storage operated by our providers;
• Application hosts and logs;
• Email systems used for support and transactional messages.

Security measures include, as appropriate to the risk:

• Encryption in transit (TLS);
• Access controls and authenticated APIs;
• Password hashing / managed authentication via our auth provider;
• Company-scoped separation of business data in the product design;
• Operational practices aimed at limiting staff access to production data.

No method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security. If we become aware of a data breach that is likely to result in serious harm, we will assess and, where required, notify affected individuals and the OAIC under the Notifiable Data Breaches scheme.

12. Retention

We retain personal information only as long as reasonably necessary for the purposes in this policy, including to:

• Provide the service while your account or company workspace is active;
• Meet legal, tax, and accounting obligations;
• Resolve disputes and enforce agreements;
• Maintain security logs for a limited period.

When you delete an account or request deletion, we will delete or de-identify personal information within a reasonable period, subject to backup cycles and legal retention requirements. Shared company content may remain available to other authorised members of that company until they remove it or the company account is closed.

13. Your rights

Subject to the Privacy Act and applicable exceptions, you may:

• Request access to personal information we hold about you;
• Request correction of inaccurate, out-of-date, or incomplete information;
• Request deletion of personal information (where we are not required or permitted to keep it);
• Opt out of marketing emails using the unsubscribe link or by contacting us;
• Withdraw consent where we rely on consent (this may limit some features).

To exercise these rights, email [email protected] with enough detail for us to verify your identity and locate the information. We aim to respond within a reasonable period (typically within 30 days).

You can often update basic account details yourself in the Platform. Company administrators may control membership and shared workspace content.

14. Complaints

If you believe we have mishandled your personal information:

1. Contact us first at [email protected] with the details of your complaint;
2. We will acknowledge and investigate, and respond in writing where appropriate;
3. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

15. Children

The Platform is directed to business and professional users and is not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

16. Anonymity and pseudonymity

You may browse public marketing pages without an account. Core Platform features require an identified account so we can secure workspaces, studies, and billing. We generally cannot provide the full service on an anonymous basis.

17. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. For material changes, we may also provide additional notice (for example email or an in-app notice). Continued use of the Platform after the effective date constitutes acceptance of the updated policy to the extent permitted by law.

18. Contact

Privacy Officer — Slate Projects Pty Ltd trading as Land Axis
ABN 38 633 404 109
Email: [email protected]
Web: landaxis.com.au

If you need this policy in another format, contact us and we will take reasonable steps to provide it.