Privacy policy.

Timed Property Pty Ltd (Timed, we, us, our) operates the Timed platform — an Australian real estate platform where agents list properties either with a fixed sale window and online bidding, or as a traditional private treaty listing.

We are committed to protecting your personal information and complying with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth) (the Act).

Personal information means information or an opinion about an identified or reasonably identifiable individual, whether or not it is true and whether or not it is recorded in a material form.

By using the Timed website, the Timed agent CRM, or our mobile application (together, the Timed Products), you acknowledge you have read and agree to this Privacy Policy. It should be read together with our Terms of Use.

What we collect depends on how you use Timed and the role you play on the platform.

We use personal information to:

• Operate the Timed platform and provide the Timed Products to you.
• Create and authenticate your account, and keep you signed in.
• Let listing agents verify who is bidding, so that sellers and other buyers can rely on the integrity of a sale.
• Run sales — accepting and displaying bids in real time, applying bid increments, extending a sale window where a late bid triggers an extension, and closing the sale at the scheduled time.
• Pass offers, enquiries and registration details to the listing agent for the property concerned.
• Send you notifications about activity that concerns you — that a sale you are watching is about to start, that you have been outbid, that a registration has been approved or rejected, that an offer has been received on your listing, and that a sale has closed.
• Respond to your enquiries, support requests and complaints.
• Maintain an audit record of significant actions taken on the platform, so that a disputed sale can be reconstructed.
• Detect, prevent and respond to fraud, misuse, abuse and breaches of our Terms of Use.
• Understand how the Timed Products are used, in aggregate, so we can improve them.
• With your consent, send you marketing about Timed and properties that may interest you.
• Comply with our legal obligations, and respond to court orders and lawful requests from regulators or law enforcement.

We will not use your personal information for an unrelated secondary purpose without your consent, unless the Act permits or requires it.

On a Timed sale, the public bid history shows bid amounts and times only. Bidder identities are replaced with labels — Buyer A, Buyer B, and so on — which stay consistent for the length of that sale, so you can follow the bidding without anyone being identified. This applies during the sale and after it closes.

These labels are specific to a single property. The same person bidding on two listings will not carry the same label across both.

Your real identity is visible to:

• The listing agent for any property you register to bid on or make an offer on, along with your registration details, so they can approve your registration, contact you, and prepare contracts if you are successful.
• The seller, where the agent shares your details with them as part of running the sale.
• Timed staff, for support, fraud prevention and compliance.

You should assume that if you win a sale, or are shortlisted at the end of one, your identity will be disclosed to the agent and the seller of that property.

Because photo ID is the most sensitive thing we ask for, we want to be specific about how it is handled.

When you upload a photo ID as part of a bid registration, the image file is stored on Cloudflare R2 object storage. It is retained for as long as it may be needed for the sale and for the record-keeping and dispute resolution purposes described in Section 12 — we do not delete the image immediately after the agent approves your registration.

Access to the image is limited to the listing agent handling your registration and to Timed staff who need it for support, compliance or fraud prevention. The image is not shown on any public page, is not attached to the public bid history, and is not shared with other buyers or with the seller by us.

Where we collect a government-related identifier from your ID — such as a driver licence number — we use it only to confirm your identity for bidding. We do not adopt it as our own identifier for you, and we do not use or disclose it except as permitted under APP 9.

You can ask us to delete an identity document once the sale it relates to has concluded and any dispute period has passed. Contact us at hello@timedproperty.com.au.

We share personal information with the following categories of recipients.

We do not sell your personal information, and we do not disclose it to third parties for their own direct marketing purposes.

Your account data, listings, bids, registrations and messages are held in Firestore in Google's Sydney (australia-southeast1) region, and our scheduled functions run in the same region.

Some of our providers operate globally distributed infrastructure, which means information may be stored, cached or processed outside Australia — including in the United States, Europe and Asia:

• Cloudflare — uploaded images and documents held in R2, Workers that send email and issue one-time codes, and the global edge network that delivers content.
• Brevo — email delivery, operating from the European Union and elsewhere.
• Google — some Firebase Authentication and operational data may be processed outside the region in which your Firestore data is stored.

Before disclosing personal information overseas we take reasonable steps under APP 8.1 to ensure the recipient handles it consistently with the APPs, including through contractual protections and by choosing providers with recognised security and privacy certifications. By using the Timed Products you acknowledge your personal information may be stored and processed overseas.

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These include:

• Encrypted connections (TLS) between your device and our services.
• Firestore security rules and role-based access controls that limit which users and which agents can read or write each record.
• Passwords held only as cryptographic hashes by Firebase Authentication — we never see or store your password.
• One-time codes for email verification that expire after ten minutes.
• Audit logging of significant actions taken on the platform.
• Limiting staff access to personal information to those who need it for their role.

No method of transmission or storage is completely secure. You are responsible for keeping your account credentials confidential, and for telling us promptly if you suspect someone has gained unauthorised access to your account.

We use cookies and browser local storage to keep you signed in between visits, to remember preferences such as your recent searches, and to keep the platform secure. These are necessary for the site to work — if you block them, sign-in and bidding will not function.

We do not currently use advertising, retargeting or third-party analytics cookies. If we introduce them, we will update this policy and give you a way to manage your preferences.

Two parts of the platform run automatically:

• Sale closing. A timed sale opens and closes at its scheduled time according to our server clock, not the clock on your device. Where a bid arrives close to the deadline, the window may extend automatically. Bids that arrive after the sale has closed are not accepted.
• Notifications. Alerts about sales starting, outbids and sale results are generated and sent automatically based on activity on listings you are involved in or watching.

Bid registrations are not decided automatically — a listing agent reviews and approves or rejects each one. If you believe a decision about your access to the platform is wrong, contact us and a person will review it.

We treat two kinds of message differently:

• Service messages — sale start alerts, outbid alerts, registration approvals and rejections, offer notifications, sale results, verification codes and security alerts. These are part of the service, and you cannot opt out of them while you hold an account with an active bid, registration or listing.
• Marketing messages — newsletters, property suggestions and other promotional content. You can opt out at any time using the unsubscribe link in any marketing email, through your notification settings, or by emailing hello@timedproperty.com.au. We action opt-outs promptly.

We handle marketing consistently with the Spam Act 2003 (Cth).

We keep personal information only for as long as we need it for the purposes in this policy, or for as long as the law requires. In practice:

• Account information — for the life of your account, and for a period after closure to handle any dispute or legal obligation.
• Bid, offer and registration records — retained after a sale concludes as the evidentiary record of how that sale ran, so a dispute about it can be resolved. This includes the bid audit details in Section 2.
• Identity documents — as described in Section 5.
• Enquiries, seller leads and support correspondence — kept while we deal with them and for a reasonable period afterwards.
• Marketing opt-outs — kept indefinitely, so we can honour your opt-out.

Where we no longer need personal information and are not required to keep it, we destroy it or de-identify it. We may retain a de-identified version of sale records for longer.

Under APP 12 and APP 13 you have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.
• Ask us to delete your account and the personal information we hold about you, subject to information we must retain for legal, record-keeping, dispute resolution or fraud-prevention reasons — including the record of sales you took part in.
• Withdraw your consent to marketing at any time (see Section 11).

You can update much of this yourself in your profile settings. For anything else, contact us at hello@timedproperty.com.au. We may need to verify your identity before acting on a request, and we will respond within 30 days. There is no fee to make a request, though we may charge a reasonable cost-based fee for giving access to a large volume of information — we will tell you before we do.

If we refuse access or correction in one of the limited circumstances the APPs allow, we will explain why in writing and tell you how to complain.

You can browse published listings without creating an account, and you can contact us with a general enquiry under a pseudonym. But we cannot list a property, approve you to bid, accept an offer, or resolve an account issue without knowing who you are.

Timed is not intended for people under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact us and we will delete it.

The Timed Products may link to third-party websites and services we do not control. This policy does not apply to them, and we are not responsible for their handling of your information. Review their privacy policies before using them.

We may update this policy from time to time. The version on this page is always the current one, and the date at the top shows when it last changed. Where a change materially affects you, we will take reasonable steps to notify you in advance by email or through the platform.

If you have a question, a request, or a complaint about how we have handled your personal information, please contact our Privacy Officer first so we can try to resolve it:

Email: hello@timedproperty.com.au

We will acknowledge a complaint within 5 business days and give you a written response within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au/privacy/privacy-complaints, by phone on 1300 363 992, or by post to GPO Box 5218, Sydney NSW 2001.