Privacy Policy

SweatRecruit is operated from Melbourne, Victoria, Australia. For any privacy-related enquiry, complaint, or request, you can contact us at:

• Email: privacy@sweatrecruit.com [confirm/replace with live address]
• Post: SweatRecruit, Melbourne, VIC, Australia

The information we collect depends on whether you register as an Employer or a Candidate.

2.1 Information collected from all users

• Account details: name, email address, password (stored in encrypted/hashed form), and, if you choose to use it, Google account details for sign-in.
• Communications: any messages, expressions of interest, support enquiries or feedback you send us.

2.2 Information collected from Candidates

• Profile information: full name, profile photo, bio, suburb/state, fields of practice, years of experience, employment preferences and availability.
• Verification documents: a copy of a government-issued photo ID (driver licence or passport) and copies of qualification certificates (e.g. Cert III/IV, Diploma, Degree, specialisation certificates), uploaded for the purpose of identity and qualification verification.
• Optional profile links: LinkedIn and/or personal website URLs.
• Application data: job applications submitted, cover notes, and application status history.

2.3 Information collected from Employers

• Business information: company name, logo, business type, description, location, website and Australian Business Number (ABN).
• Job listing content: role details, descriptions, rates/salary ranges and related recruitment content you publish.
• Payment information: processed directly by Stripe, our third-party payment processor. We do not directly store full card numbers; we retain records of plan selection, transaction status, invoices and payment history as provided to us by Stripe.

2.4 Sensitive information

Government-issued ID documents and qualification/certification documents may constitute “sensitive information” under the Privacy Act. We only collect this information with your consent (given by uploading it for verification) and only use it for the identity and qualification verification purposes described in this Policy.

We use personal information to:

• Create and administer Employer and Candidate accounts and profiles;
• Operate the job listing, search, filtering and application features of the App;
• Manually review and approve or reject identity and qualification verification submissions;
• Display a “Verified” or “Pending” badge on Candidate profiles, and make verified profiles visible to Employers on eligible plans;
• Process Employer plan payments, issue tax invoices and manage listing duration and renewals via Stripe;
• Send transactional and account-related emails (e.g. application confirmations, status updates, verification outcomes, payment confirmations, listing expiry notices) via our email provider;
• Provide customer support and respond to enquiries;
• Maintain the security, integrity and proper functioning of the App, including fraud prevention;
• Comply with our legal obligations; and
• With your consent, send you marketing communications, from which you may opt out at any time.

We do not sell personal information to third parties.

We disclose personal information only as reasonably necessary to operate the App, including to:

• Employers — a Candidate's profile and application information is shared with an Employer when the Candidate applies to that Employer's listing, or, for Premium-plan Employers, when the Employer searches verified Candidate profiles and sends an expression of interest.
• Candidates — an Employer's company profile and listing information is visible to Candidates browsing or applying for roles.
• Stripe — for payment processing, invoicing and fraud prevention. Stripe's own privacy policy governs its handling of payment data.
• Cloud storage providers (e.g. AWS S3 or equivalent) — for secure storage of profile photos, ID documents and qualification certificates.
• Google — for Google Maps location/search functionality, Google Analytics usage analytics, and Google OAuth sign-in (if used).
• Email delivery providers (e.g. SendGrid or equivalent) — to send transactional notification emails.
• Our service providers, contractors and advisers (e.g. hosting, IT support, legal and accounting) who are bound by confidentiality obligations.
• Regulators, law enforcement or other third parties where required or authorised by law, or to protect the rights, safety or property of SweatRecruit, our users or the public.
• A purchaser or prospective purchaser, in the event of a sale, merger, restructuring or other transfer of all or part of our business or assets.

SweatRecruit's admin team manually reviews uploaded ID and qualification documents for verification purposes. Access to this material is restricted to authorised personnel.

Some of our service providers (including Stripe, Google, our cloud hosting provider and our email delivery provider) may store or process personal information on servers located outside Australia, including in the United States. Where personal information is disclosed overseas, we take reasonable steps to ensure the overseas recipient handles that information consistently with the Australian Privacy Principles, including through the provider's own contractual and security commitments. By using the App, you consent to this overseas disclosure.

• All data is transmitted over HTTPS.
• Profile photos, ID documents and qualification certificates are stored in secure cloud storage with access restricted to authorised personnel for verification and support purposes.
• Passwords are stored using industry-standard hashing; we never store passwords in plain text.
• We use reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

• Account and profile information is retained for as long as your account remains active.
• ID documents and qualification certificates are retained only for as long as reasonably necessary to complete and maintain your verification status, and are deleted or de-identified once no longer required, unless we are required to retain them for legal, accounting or dispute-resolution purposes.
• If you close your account, we will delete or de-identify your personal information within a reasonable period, except where retention is required by law or for legitimate business purposes such as financial record-keeping (e.g. Stripe transaction and tax invoice records).

Subject to the Privacy Act, you have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate, out-of-date or incomplete information;
• Request deletion of your account and associated personal information, subject to our legal and legitimate retention needs;
• Withdraw consent to particular uses (e.g. marketing communications) at any time; and
• Lodge a complaint, as set out in Section 11 below.

You can access and update most profile information directly within the App. For other requests, contact us using the details in Section 1.

The App is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a person under 18, we will take reasonable steps to delete it.

The App and any associated web properties may use cookies, SDKs or similar technologies, and Google Analytics, to understand how the App is used and to improve our services. You can control device-level tracking and permissions (such as location access) through your device settings.

If you believe we have breached the Australian Privacy Principles, please contact us first using the details in Section 1 so we can investigate and respond. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this Privacy Policy from time to time to reflect changes to our practices or legal requirements. We will update the “Last Updated” date and, where changes are material, provide notice within the App or by email prior to the changes taking effect.

Questions, requests or complaints about this Privacy Policy can be directed to privacy@sweatrecruit.com [confirm/replace with live address].