Exact Body Corporate-approved resident rules
OpenThe rules page shows draft 3. Launch still needs an explicit approval flag. Suggestions about alcohol, smoking, animals or children are not in this app.
Launch gates
Body Corporate approval to build this was recorded on 10 November 2026. That approval is not one of the open items. This test build does not close any gate, and production mode stays off.
Railway and bbq.cpmanagement.com.au are not set up. QR signs at both barbecues and a link in the welcome email are planned. None of that has been produced or sent.
Privacy, retention, reports, audit and email copies
OpenThe app anonymises inactive residents after 30 days, strips booking names after 12 months, deletes arrival notes and photos 90 days after the slot unless marked as an open issue, and deletes activity log entries after 12 months. Copies already sent by email are not removed. Privacy approval is still open.
Departure and unit handover
OpenA lease agreement end is not a move-out. Disabling one person does not disable the unit. Import never deletes or re-enables people. The actual removal workflow is still open.
Secure resident-list delivery and frequency
OpenThe app does not call PropertyMe. It can receive a snapshot at the sync endpoint. How tenant data passes from PropertyMe through CPM's assistant is an open privacy check. CSV import remains the fallback.
Sending provider, from address and Lisa’s mailbox
OpenResend is available when RESEND_API_KEY and EMAIL_FROM are set. Launch still needs an approved from address, Lisa’s mailbox, and the email approval flag. Test mode sends only to the allowlist.
Admin sign-in and recovery for production
OpenEmail and password sign-in is built for real admin accounts. Test accounts are refused outside test mode. An identity provider is not configured.
Railway hosting and bbq.cpmanagement.com.au
OpenRailway and the proposed domain are not provisioned. A hidden address is not a security control.
Rolling 30-day alert date basis
OpenThe demo can count by barbecue date or by the date the booking was created. The active demo choice is labelled as an assumption. It is not a production decision, and later bookings in the same stretch do not send another alert.
Optional temporary hold
OpenThis demo does not hold a slot before you submit. Sign-in happens first, and there is no second confirmation email. Whether a hold should exist at all is still unresolved.
What the demo is assuming
Frequent-use alerts: demo assumption, count by slot date. Threshold 4 in 30 days. This is not approved.
Holds: demo assumption, no hold and no second confirmation email. Not approved.
Contact details are anonymised 30 days after a resident becomes inactive. Booking names older than 12 months are removed. Arrival notes and photos are deleted 90 days after the slot unless an admin marks the note as an open issue. The activity log is deleted after 12 months. Messages already sent are not pulled back from an inbox. The schedule is running. Privacy approval for it is still open.
Not a departure policy. A lease agreement end does not remove access. Disabling one person does not disable the rest of the unit. Import never deletes or re-enables residents. The move-out workflow is unresolved.
This app does not call PropertyMe. A snapshot can be pushed to the sync endpoint with SYNC_TOKEN. How tenant data passes from PropertyMe through CPM's assistant is an open privacy check. CSV import remains the fallback. Manual residents are not changed by the sync.