Privacy Policy
Privacy Policy
Prevue's privacy policy
Effective date: 25 September 2026
This policy explains how Prevue handles personal information when you visit prevueapp.io, use dashboard.prevueapp.io, interact with an embedded or shared Prevue map, submit an enquiry, or contact us.
1. Who we are
Prevue is operated by Commotion Games Pty Ltd, ABN 59 159 750 240, trading as Prevue, based in Queensland, Australia. In this policy, “Prevue”, “we”, “us” and “our” mean that entity. Contact us at hello@prevueapp.io or 14 Middle Street, Labrador QLD 4215, Australia. Our customers include developers, sales teams and agencies that create maps and collect enquiries. A customer decides what information to put on its map and how to use enquiries it receives. We provide the technology and handle that information to deliver the service. We also handle information for our own account administration, billing, support and security purposes.
2. Information we collect
Account and contact information includes your name, email address, business details, account identifiers, authentication records and information you provide when requesting support, a demonstration or onboarding assistance. Project information includes map backgrounds, site plans, floorplans, photographs, GLB models, logos, icons, property details, availability, prices, dimensions, descriptions, links and connected spreadsheet content. These materials may contain personal information where you include it. Enquiry information includes the fields requested by a map operator, which may include your name, email, telephone number, message and the property or lot you are asking about. We also process associated project and submission information needed to route and manage the enquiry. Billing information includes billing contact details, subscription status, plan, invoices, transaction references and payment status. Stripe processes payment details. [VERIFY BEFORE PUBLICATION: Prevue does not store full payment card numbers or card security codes; specify any limited card metadata received from Stripe.] Technical and usage information may include IP addresses, browser and device information, request and error logs, timestamps, page or map views, point clicks, popup opens and interaction events used for analytics and heatmaps. [VERIFY BEFORE PUBLICATION: list the actual identifiers, location data, referral data and events collected; remove fields not collected.]
3. How we collect information
We collect information directly when you register, upload content, connect a data source, submit a form, make a payment or communicate with us. Customers and their authorised users may supply information about other people. Our infrastructure and payment providers also return information needed to operate and administer the service. When you use a website or map, technical information can be generated automatically. An embedded map may communicate with Prevue and its service providers even though you are visiting a customer’s website. You can browse publicly available information without opening an account and may make a general enquiry anonymously or using a pseudonym where practical. Some features require information to work: for example, an email address for an account or a contact method if you want a response to an enquiry. If you do not provide required information, we may be unable to provide that feature. Please do not upload identity documents, financial account details, health information or other sensitive personal information into project fields or enquiry forms unless we have specifically agreed to support that use and you have a lawful basis to provide it.
4. Why we use information
We use information to create and authenticate accounts; store and display project content; deliver published maps and integrations; process and route enquiries; provide project analytics; administer subscriptions and payments; send verification and service messages; provide support; investigate errors, fraud and misuse; and meet legal obligations. We may use feedback and appropriately aggregated or de-identified usage information to improve Prevue. Information described as de-identified must not reasonably identify an individual. We do not sell personal information or use a customer’s buyer enquiries to market unrelated services to those buyers. We may send Prevue news or offers where permitted by law. You can unsubscribe from marketing messages using the link provided or by contacting us. Essential account, billing, security and service messages may continue while relevant to your account.
5. Customer maps and buyer enquiries
When you submit an enquiry through a customer map, we make it available to the relevant customer and its authorised users so they can respond. That customer may be a developer, agency, sales business or another map operator. Its own privacy notice governs its subsequent use, exports and disclosures of your information. Before submitting an enquiry, review the identity and privacy notice of the map operator. Contact that operator about its sales communications or use of your enquiry. You may also contact us about information held within Prevue; we may need to work with the operator to verify and action your request. Project information selected for publication is accessible to people viewing the map. Public links, embeds and displayed assets can be copied or shared by viewers. Account credentials and buyer enquiry records are not intended to be public map content. Customers must avoid putting private information into publicly displayed fields or assets.
6. Service providers and other disclosures
We disclose information only where reasonably needed for the purposes described in this policy, as authorised by you, or as permitted or required by law. Service providers may handle information on our behalf, and some also have their own legal responsibilities and privacy policies. Our core service providers are Supabase for login and authentication information, Stripe for billing, payments and subscriptions, and Cloudflare for project data and uploaded-file storage. [VERIFY BEFORE PUBLICATION: confirm other active providers and their roles, including application delivery, transactional email, marketing website hosting, demo bookings and forms.] Google services may be involved when a customer connects Google Sheets or uses Google Maps backgrounds. Information sent to Google depends on the enabled feature and its configuration. Demo bookings and other external forms linked from our website are handled through the provider identified when you open them. [CONFIRM BEFORE PUBLICATION: describe any active HubSpot forms, chat, CRM or tracking, other analytics tools, and customer-enabled enquiry integrations. A hidden widget should not be described as disabled unless its scripts and collection are also disabled.] We may share relevant information with authorised staff, contractors and professional advisers who need it for their work, or with authorities where legally required. If our business is sold or reorganised, relevant information may be disclosed under confidentiality safeguards and transferred as part of that transaction, subject to applicable law.
7. Overseas handling
Our cloud and service providers may store, process or access information outside Australia. A selected database region does not necessarily determine the locations of all backups, delivery networks, support personnel or connected services. [COMPLETE BEFORE PUBLICATION: identify the configured authentication, database and asset regions and the countries of likely overseas recipients, so far as practicable, including relevant support and subprocessor locations. Do not state that all information stays in Australia unless verified.] Where Australian privacy law applies to an overseas disclosure, we take the steps it requires to protect personal information. This policy does not ask you to waive those protections simply by using Prevue.
8. Cookies and similar technologies
Prevue and its providers use browser storage and similar technologies where needed for functions such as sign-in, session management and preferences. Analytics, embedded maps and optional third-party tools may involve additional storage or tracking depending on their implementation. [COMPLETE BEFORE PUBLICATION: describe the actual essential and optional technologies used across the marketing website, dashboard and embedded viewer; identify purposes, providers, durations and the available preference or consent controls. Do not describe analytics as cookie-free or anonymous without verifying this.] You can manage browser storage using your browser settings, although blocking essential storage may prevent some functions from working. Where consent is legally required for optional tracking, it must be obtained before that tracking operates. A customer’s host website may also set its own cookies, covered by its privacy and cookie notices.
9. Security
We take reasonable measures appropriate to the information and risks to protect personal information against misuse, loss and unauthorised access, alteration or disclosure. Access should be limited to authorised people who need it to operate or support the service. No internet service can guarantee absolute security. Keep your account credentials secure and contact us promptly if you suspect unauthorised access. We investigate suspected incidents and notify affected people and regulators where required by applicable law. [VERIFY the documented access controls, security measures and incident process before publication; do not add unsupported certifications or encryption claims.]
10. Retention and deletion
We retain personal information for as long as reasonably needed to deliver the service and for legitimate legal, accounting, security and dispute-resolution purposes. Different records may have different retention periods. Cancelling a subscription is separate from deleting an account or project. When paid access expires, published maps are unpublished and editing is disabled. When the 14-day trial ends, users cannot edit or change their maps without an active subscription. We retain the project for 60 days after paid access expires or the trial ends. If no subscription covering that project is activated during that period, the project and its associated content, enquiries and analytics are deleted. During that retention period, customers can download project data in JSON or Excel format. Customers may also use available deletion controls or contact us to request earlier deletion. Deleted information may remain in restricted backups until those backups expire, and records required by law may be retained separately. [VERIFY BEFORE PUBLICATION: confirm retention for accounts without projects, enquiries and analytics within active projects, logs and backups, and the timing of account deletion requests. Check that the implemented unpublishing, export and deletion processes match the rules above.] Deleting data within Prevue does not remove copies already exported by a customer, received by an enquiry recipient, held in an independently connected service or copied from a public map. Once deletion is completed, recovery may not be possible.
11. Access correction and complaints
Contact hello@prevueapp.io to request access to or correction of your personal information, ask about deletion, or make a privacy complaint. Describe your request and the account or project involved. We may ask for proportionate verification of your identity and authority, and may coordinate with the relevant map operator. We will respond within a reasonable period and any applicable legal deadline. Where a request cannot be fulfilled, we will explain the reason, to the extent permitted by law, and available complaint options. We aim to acknowledge complaints within seven business days and provide a substantive response within 30 days. If more time is needed, we will explain why and provide an update. If you are not satisfied, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au where the complaint falls within its jurisdiction, or another relevant regulator. Nothing in this policy limits rights under privacy laws that apply to you or to us.
12. Updates and contact
We may update this policy to reflect changes to Prevue, our practices or applicable law. We will publish the current version with its effective date and give additional notice of material changes where appropriate. New uses requiring consent will not be authorised merely by changing this policy. Privacy contact: Commotion Games Pty Ltd trading as Prevue • hello@prevueapp.io