Security and Data Breach Policy

How PropPilot protects your data and responds to incidents

Effective: 1 June 2026 | RZBB Ventures LLC

1. Security Measures

PropPilot implements the following security safeguards:

• Encrypted data transmission using TLS for all data in transit

• Access controls and authentication requirements for all Platform access

• Role-based access controls limiting staff access to customer data

• Infrastructure hosted in Australia with reputable third-party providers

• Regular security reviews and updates

• Backend-only write access for all sensitive billing and payment fields

Despite these measures, no system is completely secure. We cannot guarantee that data will never be accessed, disclosed, or altered without authorisation.

2. Notifiable Data Breaches

PropPilot complies with Australia's Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). An eligible data breach occurs when:

• There is unauthorised access to, disclosure of, or loss of personal information; AND

• This is likely to result in serious harm to one or more affected individuals

If we have reasonable grounds to believe an eligible data breach has occurred, we will:

• Contain the breach and assess the risk of harm

• Notify affected individuals as soon as practicable

• Notify the OAIC as required by law

• Notify affected Customers without undue delay

3. Reporting a Security Incident

If you suspect your account has been compromised, your data has been accessed without authorisation, or you have discovered a security vulnerability, contact us immediately at security@goproppilot.com.

Do not publicly disclose a suspected vulnerability before we have had a reasonable opportunity to investigate and address it. See our Responsible Disclosure Policy.

4. User Security Responsibilities

• Use a strong, unique password for your PropPilot account

• Enable two-factor authentication if available

• Log out from shared devices

• Notify us immediately if you suspect unauthorised access

• Do not share account credentials with others

5. Contact

Security matters: security@goproppilot.com | General: support@goproppilot.com