Privacy Policy
Privacy at a glance
- Who we are: Sage is operated by Knowledge Seminars Pty Ltd, trading as Knowledge Source, an Australian company.
- What we collect: Your email, the financial profile you tell us about (income, employment, savings, goals, properties), and the conversations you have with Sage.
- Why we collect it: To run the service and personalise your responses. That's it.
- Who we share it with: A small set of named processors (Supabase, OpenRouter, Anthropic, ElevenLabs, Twilio, Firebase, Domain.com.au, Hot Property Finder) who help us deliver the service.
- Where it lives: Your data is stored in Supabase's Sydney, Australia region. Some AI processing happens in the United States.
- Retention: We keep your data while you have an account. Delete your account in Settings and we hard-delete within 30 days.
- Your rights: Under the Australian Privacy Principles you can access, correct, and complain about your data. You can export everything yourself in Settings.
- Contact us: privacy@iloverealestate.tv
1. About this policy and who it covers
This Privacy Policy explains how Knowledge Seminars Pty Ltd (ABN 26 169 818 099), trading as Knowledge Source ("we", "us", "our"), handles personal information when you use Sage, our AI advisor for property investing. Sage is available at sage.iloverealestate.tv (and the equivalent web address agents.iloverealestate.tv) and through our iOS and Android apps.
We are bound by the Australian Privacy Principles (APPs) in Schedule 1 of the Privacy Act 1988 (Cth). Sage is offered to Australian residents only.
This policy covers Sage. It does not cover other Knowledge Source products, websites, or services, which may have their own privacy policies.
2. Information we collect
We collect only what we need to run Sage.
Account information
- Your email address, used as your login
Profile and financial information you provide
- Personal details (e.g. first name)
- Employment status and income
- Savings, debts, and net position
- Investment goals and timeframe
- Properties you own or are considering
Chat content
- Messages you send to Sage
- Conversations and the responses Sage generates
- Tools Sage invokes on your behalf (for example, looking up a listing or running a calculation)
Technical and device information
- Push notification tokens, if you enable notifications
- IP address and basic request metadata in our standard server logs (for security and abuse prevention)
- Browser, OS, and app version information from standard server logs
- Diagnostic and error reports
Support communications
- Anything you send us by email or other support channels
We do not collect payment or billing information because Sage is free to current Knowledge Source program members.
3. How we use your information
We use your information for the following purposes, each of which is a lawful purpose under APP 6:
- Provide the service: authenticate you, store your profile, generate responses, deliver notifications you've opted into.
- Personalise responses: Sage uses the profile and chat history you've shared to give answers relevant to your situation.
- Support: diagnose and resolve issues you report.
- Security and integrity: detect and prevent abuse, fraud, and unauthorised access.
- Legal compliance: meet our obligations under Australian law.
Things we do not do with your information:
- We do not use it for marketing. Sage sends transactional notifications only, things like a response being ready or a system alert. We do not send promotional or marketing messages through Sage.
- We do not use it to train AI models. See section 6.
- We do not sell your information to anyone, ever.
4. Disclosure to third parties
To run Sage, we share certain information with the following processors. Each is bound by contract or platform terms to use the data only to provide their service to us.
- Supabase: database, authentication, and file storage. Data sits in the Sydney, Australia region. https://supabase.com/privacy
- OpenRouter: routes prompts to large language model providers on our behalf. https://openrouter.ai/privacy
- Anthropic: provides the Claude language models that power Sage's responses, accessed via OpenRouter. https://www.anthropic.com/legal/privacy
- ElevenLabs: voice synthesis for Sage's voice features. https://elevenlabs.io/privacy
- Twilio: SMS delivery for transactional messages. https://www.twilio.com/legal/privacy
- Firebase Cloud Messaging (Google): push notification delivery on mobile. https://firebase.google.com/support/privacy
- Domain.com.au: property data lookups when you ask Sage about a listing or address.
- Hot Property Finder: live listings data used by Sage when you ask about market activity.
We may also disclose information where required by law (for example, in response to a valid legal request) or to protect the rights, property, or safety of us, our users, or others.
We do not disclose personal information to overseas recipients except via the processors named above.
5. International data transfers
Most of your data stays in Australia. The exceptions are AI processing and some service providers:
- LLM prompts and responses are processed by OpenRouter and Anthropic in the United States.
- Some processors named above may operate infrastructure outside Australia.
We rely on contractual safeguards under APP 8.2 with each of these recipients, requiring them to handle your data consistent with the Australian Privacy Principles. Where we cannot enforce equivalent protection, we limit the data sent to the minimum needed.
6. AI use, and our promise not to train on your data
This is important enough to spell out plainly.
We do not use your data to train AI models. Our LLM providers (OpenRouter, Anthropic) are configured to not train on your data either.
We also remove direct identifiers — your name and contact details — from the financial profile we send to our LLM providers, so the model receives your financial situation without the personal details that identify you. Free-text you type in conversation is sent as you write it.
When you message Sage, your message and the relevant context from your profile and chat history are sent to a language model via OpenRouter to generate a response. The response is returned to you and stored in your account so you can refer back to it. The data is not retained by the model providers for training purposes.
If we ever change this position, it would be a material change to this policy and you would see the in-app re-acknowledgment flow described in section 12 before continuing to use the service.
7. Storage and security
Your data is stored in Supabase in the Sydney, Australia region.
Security controls include:
- Row-level security (RLS) policies in the database, so your records are accessible only to you
- TLS encryption in transit between you, our servers, and our processors
- Access controls limiting which staff can access production data, and only for legitimate operational reasons
- Standard server logging for security and abuse detection
If we suffer a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under the Privacy Act.
No system is perfectly secure. We do our best, and you can help by using a strong, unique password.
8. Data retention and deletion
We keep your data for as long as you have an active Sage account.
You can delete your account at any time from Settings. When you delete your account:
- We hard-delete your account record, profile, conversations, and related data immediately
- Backups and snapshots may retain copies for up to 30 days before they roll off, after which the data is gone permanently
- We keep a minimal, non-identifying audit record (a hashed user ID and the deletion timestamp) so we can prove we honoured your request
If your enrolment in your underlying Knowledge Source program ends, your access to Sage ends immediately. Your data follows the normal retention rules above until you delete it.
9. Your rights under the Privacy Act
Under the Australian Privacy Principles you have the following rights:
- APP 12 (Access): You can request a copy of the personal information we hold about you. The fastest way is Settings → Export my data, which gives you a JSON download of your account, profile, conversations, and related records.
- APP 13 (Correction): If we hold information about you that is inaccurate, out of date, incomplete, or misleading, you can correct it directly in your profile, or contact us at privacy@iloverealestate.tv.
- Complaints: If you think we've mishandled your information, contact us first at privacy@iloverealestate.tv. We aim to respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
10. Cookies and analytics
Sage uses minimal first-party cookies for authentication only. We need a session cookie to know you're logged in.
We do not use third-party advertising cookies. We do not use cross-site tracking. We do not run a third-party web analytics product like Google Analytics. We do not deploy any tracking pixels.
Because we don't do tracking, we don't show a cookie consent banner. There's nothing to consent to beyond keeping you logged in.
11. Children
Sage is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us at privacy@iloverealestate.tv and we will delete it.
12. Changes to this policy
We may update this policy from time to time.
- Material changes (anything that changes how we collect, use, or disclose your information in a meaningful way) will trigger an in-app re-acknowledgment. You'll see a one-time prompt asking you to read the changes and acknowledge before continuing.
- Non-material changes (typo fixes, formatting, clarifications that don't change the substance) will not trigger re-acknowledgment.
Each version is dated and listed in the Changes section at the bottom of this page.
13. Contact us and complaint escalation
For any privacy question, request, or complaint:
We aim to respond within 30 days.
If you are not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner (OAIC):
- Web: oaic.gov.au
- Phone: 1300 363 992
Changes
- v1.0 (2026-05-06): Initial publication