Privacy policy

Draft for review. This page is a starting template written for Tonga676. It is not legal advice and should be reviewed by a qualified lawyer (for example against the Australian Privacy Act 1988, the New Zealand Privacy Act 2020 and the Australian Consumer Law) before the site launches.

What we collect

• Account: your email address, and your name and photo if you sign in with Google or Facebook. Your email is never shown to other members.
• Profile: what you choose to add (display name, username, photo, bio, location, interests, region) and who may see it.
• What you post: chat messages, marketplace listings and photos, reports you make. Photo location and camera details are removed when you upload.
• Private messages: stored so the two of you can read them. Staff don’t read them, except a message that one of you reports.
• Premium: Stripe processes payments. We store only your Stripe customer number and subscription status, never card details.
• Technical: sign-in cookies, your region choice, and your cookie choices. IP addresses are used briefly to prevent abuse and aren’t stored with your account.
• Analytics and ads (only with your consent): Google Analytics and Google AdSense may set cookies. Change your choice any time on the cookie settings page.

Who we share it with

Service providers that run the site: Supabase (database, sign-in and photo storage), Fly.io (hosting), Stripe (payments), Google Cloud Translation (only the text you ask to translate), Google (sign-in, analytics and ads, with consent) and Meta (Facebook sign-in, if you use it). Some of these are outside Australia and New Zealand. We don’t sell personal information.

Your choices and rights

• Edit your profile and privacy settings any time on your account page.
• Download a copy of your data from your account page.
• Delete your account from your account page. This deletes your profile, messages and listings, and cancels Premium.
• Ask us to access or correct your information, or make a privacy complaint, through our contact page. In Australia you can also contact the OAIC, and in New Zealand the Office of the Privacy Commissioner.

Keeping it safe

The site uses HTTPS everywhere, access rules in the database so members only see what they’re allowed to, and regular backups.

[To be completed after legal review: data retention periods, overseas recipients in detail, children’s privacy and the date this policy was last updated.]