Privacy policy
Effective 30 September 2026 · Version 1.0
Who we are
Havvo is a property information and messaging service operated by 2000FIRST PTY LTD (ABN 32 697 895 613), Sydney, Australia. This policy covers our website, enquiries and conversations through our connected messaging channels. Contact admin@2000first.com for privacy questions. Our existing business email remains in use during the rebrand.
Information we collect
We collect information you provide: your name, phone number or messaging identifier, email address, messages, attachments, property addresses, listing links, search preferences, budget ranges and contact or alert preferences. Agents may provide agency and property details. We keep enquiry history and records of consent and opt-out requests. Website forms record submission time, consent wording and source. Our hosting providers may collect connection, device and security logs. The enquiry application uses a temporary daily identifier derived from your connection address to limit abuse rather than storing the raw address with the enquiry.
How we use information
We use information to answer your enquiry, research the property or topic you ask about, maintain conversational context, provide requested introductions or alerts, operate and secure the service, investigate complaints and meet legal obligations. Authorised operators may review conversations to respond and check quality. We use only the information reasonably needed for each task. You may use public pages without providing a name; answering a message or an introduction may require contact details.
AI and human review
Havvo is an early service and may use AI tools to help research or draft answers. Relevant message content may be processed by AI providers used to prepare a response. Do not send passwords, bank account details, identity documents, health information, private contracts or other sensitive records. Redact unnecessary personal information from attachments. Messages are not confidential professional consultations. We do not promise that every reply is independently verified or that every interaction is automated.
Service providers and overseas processing
Our current service uses OpenAI Sites and Cloudflare for website hosting and enquiry storage, respond.io for messaging management, Meta for WhatsApp, Facebook and Instagram, and Google Workspace for email. AI assistance may involve OpenAI. These providers and their subprocessors may store or process information outside Australia, including in the United States and other countries. Locations depend on the service and provider arrangements; an exhaustive country list has not yet been verified. You can contact us for available details before sending information. Each messaging platform also handles data under its own privacy policy.
Sharing and introductions
We do not sell buyer contact lists or publish your private property search. We ask before passing your contact details to an agent or another party for an introduction. An agent receives information you choose to send to them directly. We may disclose necessary information to service providers, professional advisers, or authorities where required or permitted by law, including to address fraud or protect rights. Agents must have permission to share third-party information with us.
Messaging and marketing choices
Starting a conversation lets us respond to that enquiry; it does not automatically enrol you in ongoing promotional property alerts. We seek consent for those alerts and record your preferences. You can ask us to stop by replying STOP in the conversation or emailing admin@2000first.com. We will honour commercial-message opt-outs within five working days and retain a minimal suppression record to avoid contacting you again. Necessary responses to a new request or legally required notices may still be sent. WhatsApp is the current entry point; traditional SMS alerts are not yet active.
Security and retention
We take reasonable steps to restrict access and protect information, but no website or messaging channel is risk-free. Keep your devices and messaging accounts secure. We keep enquiry records only while reasonably needed for your request, ongoing service, consent records, disputes or legal obligations, then delete or de-identify them. Retention depends on the record and purpose, rather than a single period. Backups and provider records may take longer to expire. We assess security incidents and provide notifications where required by applicable law.
Cookies and website services
The current landing page does not add advertising pixels or marketing analytics. Hosting and messaging providers may use technical cookies, logs or similar technologies for security and delivery. Following a link to another platform brings that platform’s own data practices into effect. We will update this notice if we add material tracking or change our collection practices.
Access, correction, deletion and complaints
Email admin@2000first.com to request access, correction, deletion or an explanation of how we handle your information, or to make a complaint. We may ask for proportionate identity verification. We aim to respond within 30 days; if more time is needed we will explain why. Some information may need to be retained, and we will explain applicable limits. You may also contact the Office of the Australian Information Commissioner at oaic.gov.au, where it has jurisdiction. Nothing in this policy limits rights you have under applicable law.
Children and updates
The service is intended for adults aged 18 or over. Tell us if you believe a child has supplied personal information so we can assess removal. We will date policy changes and give additional notice where a material change requires it. New purposes requiring consent will be put to you separately.