Property manager messages and AI privacy: what landlord and tenant texts give away in ChatGPT or Claude.

Property managers live in text messages: the owner wants an update, the tenant is behind, and a tradie needs access, all in the same afternoon. When a thread turns difficult, the temptation is to paste it into ChatGPT or Claude to work out what to say next or to summarise it for a file note. The thread holds the owner’s instruction and his money worries, the tenant’s arrears and her safety, a mistake by the property manager and the agency’s own advice about the rules. This page marks every item in a routine thread and shows how the same messages are handled on Ermos inside the agency.

The landlord and tenant text messages

Kept on the property file as a record of what the owner and the tenant were told and when. Tenancy databases are governed by Part 11 of the Residential Tenancies Act 2010, and NSW Fair Trading says a tenant can be listed only after the tenancy has ended.

Messages for 4/31 Lorikeet Road, Summer Hill
Property manager: · exported 30 October 2026

Mon 19 Oct, 9.12am : Has Kayla paid?

Mon 19 Oct, 9.31am Bronwyn: I will write to her today and tell her that.

Mon 19 Oct, 1.58pm : I got your email. Please don’t list me.

Wed 21 Oct, 4.05pm Bronwyn: Gerald,

Wed 21 Oct, 4.20pm Gerald: Fine, but then I want her out.

Fri 23 Oct, 11.10am Kayla: I should tell you why this has been hard.

Fri 23 Oct, 11.40am Bronwyn: Thank you for telling me. I will arrange the lock change with the owner and I will not tell him why.

Wed 28 Oct, 3.15pm Bronwyn: Kayla, we agreed Is that still right?

Wed 28 Oct, 3.40pm Kayla: Yes. Thank you.

Fri 30 Oct, 9.02am Bronwyn: Gerald,

An invented message thread. The people and the address are fictional. Hover or tap any highlighted item for the analysis; the full list is below.

What leaves the agency

  1. 1
    The owner and the tenant

    Two named people tied to a property. Personal information about a client and a tenant. Privacy Act guide.

  2. 2
    An instruction to list the tenant

    The owner’s wish to put the tenant on a tenancy database if she does not pay by a date. NSW Fair Trading says a tenant can be listed only after the tenancy has ended, and only for a debt over the bond or a Tribunal termination order, so the instruction is one the agency cannot follow now. Privacy Act guide.

  3. 3
    The tenant’s money position

    Hours cut, pay down and arrears. Financial information about a tenant who is struggling. Privacy Act guide.

  4. 4
    A safety disclosure

    A separation, a former partner who still has a key and the tenant’s plan to leave. Sensitive and potentially dangerous if it reached the wrong person. Fair Trading says a tenant cannot be listed if the tenancy ended because of domestic abuse. Privacy Act guide.

  5. 5
    A staff error and the agency’s own advice

    That the property manager made a mistake and that the principal corrected it, with the rule stated. The rule is public. The admission is the agency’s own, and the sort of material a complaint file will hold.

  6. 6
    The owner’s finances and plans

    Mortgage pressure and a plan to sell the unit empty. A client’s confidential position that bears on what happens to the tenant. Privacy Act guide.

  7. 7
    The payment plan

    The amount, the start date and the arrears figure. Financial detail about the tenant, and the agreement that the agency is to enforce.

  8. 8
    Plumber booking and access

    Day and time, and that the key safe will be used. Operational detail that tells a reader when the home will be empty.

  9. 9
    The property manager

    Ties the thread to a named employee of the agency.

What happens in Frontier Models (ChatGPT, Claude)

  • The whole document is transmitted to the provider’s servers. On personal plans the user cannot choose where it is stored or processed, and for the major providers that has generally meant outside Australia, under that country’s legal process. Some business plans offer storage in Australia, but the provider still receives the content.
  • On consumer tiers, prompts can be retained and used to train future models.
  • The provider’s staff and systems can reach the content under the provider’s own policies.
  • Once sent, the agency no longer controls it. Retention and deletion happen on the provider’s terms.

The same document on Ermos

Ermos Dominion

The document is drafted on a unit in your office, from your own templates and the property file. Every marked item stays on the unit, which keeps working with the internet switched off. Nothing in it is transmitted to an AI provider, so there is no disclosure to analyse: the confidentiality work is the same as for your file server.

Ermos Edge

Your documents, the index and your access boundaries stay on your own instance in an Australian data centre. When a staff member asks for this draft, only their question and the excerpts they are permitted to see go to a named Australian provider, who is contractually barred from keeping the content or training any model on it. Nothing is processed outside Australia.

Frontier Models (ChatGPT, Claude)Ermos EdgeErmos Dominion
Where the document is processedProvider servers, generally offshore on personal plansYour instance in an Australian data centre; answers generated in AustraliaThe unit in your office
Who can read itProvider staff and systems, under policyYour staff, within the boundaries you set. The named Australian provider processes only permitted excerpts, under contract, and keeps nothingYour staff only
Is it keptOn the provider’s termsKept on your instance; the provider is barred from retaining itStays on the unit
Can it train a modelOn consumer tiers, yesNo, by contractOnly your own unit learns from it, on your hardware

Part of AI data leakage in real estate agencies.

Common questions

Do ChatGPT and Claude use the information in landlord and tenant text messages?
Messages pasted from the thread go to the AI company's servers and are processed there to produce a reply. As at October 2026, whether a conversation on a personal plan (ChatGPT Free, Plus or Pro; Claude Free, Pro or Max) can be used to train the models depends on a setting each user controls. Business plans (ChatGPT Business and Enterprise, Claude Team and Enterprise) and the developer APIs sit under commercial terms, and OpenAI and Anthropic each say they do not train on that content by default (OpenAI, Anthropic). On either product, the thumbs up and thumbs down buttons can send a whole conversation back for training. This thread holds an owner's mortgage worries, a tenant's cut hours and $1,440 in arrears, her disclosure that a former partner still has a key and a plumber's booking.
Is it safe to paste landlord and tenant text messages into ChatGPT or Claude?
No, because the thread carries two people's circumstances and a safety risk. The Office of the Australian Information Commissioner (OAIC) recommends in its guidance on commercially available AI products that organisations do not enter personal information, and particularly sensitive information, into publicly available generative AI tools, because of the significant and complex privacy risks. A tenant's disclosure that her former partner still has a key, with the address on the same page, could endanger her if it reached the wrong person, and the plumber's booking shows when the home will be empty.
What if staff use their own ChatGPT or Claude account for landlord and tenant text messages?
The agency cannot see or manage what was sent from a personal account. On a personal plan the user cannot choose where conversations are stored or processed. Some business plans let an organisation choose to store data at rest in Australia (OpenAI), which still leaves the content with the AI company. Both companies can also review content that is flagged for safety or policy reasons. A property manager who pastes a thread into a personal login could send a tenant's arrears, her safety disclosure and an owner's finances with no record at the agency. The tenant gave that disclosure to her property manager.
How can a real estate agency use AI for landlord and tenant text messages without sending them to ChatGPT or Claude?
Ermos is built so the document stays under your control. On the Dominion AI unit it is drafted inside your office and none of it is sent to an AI provider. On Ermos Edge your documents and index stay on your own instance in an Australian data centre, and only the question and the excerpts the user is permitted to see go to a named Australian provider that is contractually barred from keeping them or training any model on them. The file note or reply is drafted from the property file and the agency's own note template. The property manager checks it against the thread and signs it.
Can an owner instruct an agent to list a tenant on a database?
Only within the rules. NSW Fair Trading says a tenant can be listed only after the tenancy has ended, only if named on the agreement, and only for a debt over the bond or a Tribunal termination order. The tenant must get written notice and at least 14 days to respond, and failing to do this can attract a fine of up to $2,200.
Are text messages with tenants kept as part of the property file?
They are personal information the agency holds, and they are often the best record of what was said and when. Their usefulness as a record is also why they should stay inside the agency's systems, rather than being pasted into a tool whose retention is set by the provider.
What if a tenant tells the property manager she has experienced domestic abuse?
NSW Fair Trading says a tenant cannot be listed on a database if she ended the tenancy because of domestic abuse, or can provide evidence that she was affected by domestic abuse during the tenancy. If a victim-survivor asks, the landlord or agent must write to the database operator within 7 days to request removal.

See Dominion answering from your own documents.

A demonstration takes 30 minutes, uses no client data, and comes with no obligation.

Book a demo
Keep reading
AI data leakage in real estate agencies Resources The Privacy Act, the APPs and AI All professions