Privacy Policy

1. Overview

QuickGig operates a two-sided hospitality staffing marketplace connecting casual Workers with Venues across Australia and New Zealand. To deliver our services, we necessarily collect personal information from both Workers and Venues. We take our obligations under privacy law seriously and only collect information that is necessary for our legitimate business purposes.

By creating a QuickGig account or using our services, you consent to the collection, use, and disclosure of your personal information as described in this policy. If you do not consent, you should not use the Platform.

2. Personal Information We Collect

We collect personal information that you provide directly to us, information generated through your use of the Platform, and in some cases information from third parties.

2.1 Information You Provide — Workers

• Identity information: Full legal name, date of birth, profile photograph;
• Contact information: Email address, mobile phone number, suburb and postcode (we do not require a full street address unless necessary for payroll purposes);
• Tax identification: Australian Business Number (ABN) or New Zealand Inland Revenue Department (IRD) number;
• Certifications: Copies or details of RSA (Responsible Service of Alcohol), LCQ (Licence Controller Qualification), food handler certificates, and any other certifications uploaded to your profile;
• Work history and skills: Hospitality roles, years of experience, self-reported skills, and shift history on the Platform;
• Payment information: Bank account or debit card details collected and stored by Stripe for payout purposes (QuickGig does not store full card or bank account numbers);
• Location preferences: Maximum travel distance and preferred work areas;
• Availability: Your availability calendar data.

2.2 Information You Provide — Venues

• Business information: Business name, ABN (Australia) or NZBN (New Zealand), venue type, and address;
• Contact information: Name and email address of the account holder and any authorised managers;
• Payment information: Credit or debit card details processed and stored by Stripe;
• Shift and booking history: Details of all shifts posted and Workers engaged through the Platform.

2.3 Information Collected Automatically

• Device data: IP address, device type, operating system, browser type and version, and unique device identifiers;
• Usage data: Pages viewed, features used, search queries, and clickstream data within the Platform;
• Location data: Approximate geographic location inferred from IP address; precise location only if you grant permission;
• Log data: Server logs including timestamps, referring URLs, and error reports.

2.4 Information from Third Parties

• Stripe: Identity verification status and payment processing confirmations;
• Reviews: Ratings and written feedback submitted about you by other users.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Providing the Service

• Creating and managing your account;
• Matching Workers to available shifts and ranking applicants for Venues;
• Facilitating payment for completed shifts;
• Verifying certifications and identity documents;
• Displaying your profile to relevant Venues or Workers as appropriate.

3.2 Safety and Compliance

• Detecting and preventing fraud, abuse, and violations of our Terms of Service;
• Verifying that Workers hold required certifications before performing relevant roles;
• Complying with tax reporting and other legal obligations.

3.3 Improving the Platform

• Analysing usage patterns to improve features and performance;
• Training and improving our AI matching algorithms (using aggregated and anonymised data where possible);
• Conducting internal research and analytics.

3.4 Communications

• Sending transactional communications (booking confirmations, payment receipts);
• Sending service updates and important account notifications;
• Sending promotional emails about QuickGig features (you may opt out at any time).

4. Who We Share Your Information With

We do not sell your personal information. We share it only in the circumstances described below.

4.1 Other Platform Users

To facilitate bookings, we share certain profile information between Workers and Venues:

• Workers: When you apply for a shift, the Venue can see your first name, profile photo, role, rating, certification status, and AI match score. Your full legal name, ABN/IRD number, and contact details are only shared with a Venue once a shift is confirmed.
• Venues:Workers can see the venue name, suburb, shift details, pay rate, and the Venue's aggregate rating.

4.2 Stripe

We share payment-related information with Stripe, Inc. to process transactions. Stripe may collect and process identity and financial information directly from you as part of their KYC/AML obligations. Stripe's handling of your data is governed by their own privacy policy at stripe.com/privacy.

4.3 Supabase and Cloud Infrastructure

Our Platform is built on Supabase (which uses AWS infrastructure in the ap-southeast-2 / Sydney region by default) for database, authentication, and storage services. Your data is stored on Supabase-managed servers. Supabase's privacy policy governs their processing of your data as a sub-processor: supabase.com/privacy.

4.4 Anthropic (AI Matching)

QuickGig uses Claude AI, developed by Anthropic PBC, to power our shift-matching and applicant-ranking features. See Section 5 below for a full disclosure of what data is sent to Anthropic and how it is used.

4.5 Legal and Regulatory Disclosure

We may disclose your personal information if we believe in good faith that disclosure is necessary to:

• Comply with a court order, subpoena, or other legal obligation;
• Respond to a lawful request by a government authority (including the Australian Taxation Office, Fair Work Commission, or New Zealand Inland Revenue);
• Protect the rights, property, or safety of QuickGig, our users, or the public.

4.6 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of QuickGig's assets, your personal information may be transferred to the acquiring entity. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.

5. AI-Powered Matching and Anthropic

5.1 What the AI Feature Does

QuickGig's AI matching feature uses Claude AI to:

• Score Workers against a shift on up to six criteria: role match, certifications, experience level, average rating, distance from the venue, and availability;
• Generate a ranked list of applicants for Venues when multiple Workers apply for the same shift;
• Suggest relevant shifts to Workers based on their profile.

5.2 Data Sent to Anthropic

When a matching or ranking request is made, QuickGig sends a structured prompt to Claude AI via Anthropic's API. This prompt may include the following Worker data:

• Anonymised or pseudonymised Worker ID (not your full legal name);
• Your listed hospitality roles and years of experience;
• Certification types held (e.g., “RSA: valid”) — not copies of documents;
• Your aggregate rating on the Platform;
• Your approximate distance from the shift venue (calculated by QuickGig before sending — we send a kilometre figure, not your home address);
• Whether you are marked as available for the shift time.

We do not send to Anthropic: your full legal name, email address, phone number, ABN/IRD number, payment information, certification document images, or full street address.

5.3 Anthropic's Data Handling

Anthropic PBC is a United States-based AI company. Data sent to the Claude API is processed on Anthropic's servers, which are located in the United States. By using QuickGig, you consent to this international transfer of limited personal data to the United States for the purpose of AI-powered matching.

Under our API agreement with Anthropic, data submitted via the API is not used to train Anthropic's models by default. Anthropic's own privacy practices are governed by their privacy policy at anthropic.com/privacy.

5.4 Opting Out of AI Matching

AI-powered matching is integral to the core functionality of the QuickGig Platform and cannot be fully disabled without limiting your access to shift recommendations and applicant rankings. If you have concerns about AI data processing, please contact us at privacy@quickgig.com.au.

6. Data Retention

We retain your personal information for as long as necessary to provide the Platform services and to comply with our legal obligations. The following general retention periods apply:

After the applicable retention period, data is either securely deleted or anonymised so it can no longer be linked to you.

7. Security

We implement technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, alteration, or disclosure. These include:

• Encryption of data in transit (TLS 1.2+) and at rest;
• Row-level security on our database (Supabase RLS policies);
• Access controls limiting staff access to personal data on a need-to-know basis;
• Third-party payment processing via PCI-DSS compliant Stripe (we never store raw card numbers);
• Regular security reviews.

No method of transmission or storage is 100% secure. If you believe your account has been compromised, notify us immediately at security@quickgig.com.au. In the event of a data breach affecting your personal information, we will notify you and any required regulatory bodies (including the Office of the Australian Information Commissioner and/or the New Zealand Privacy Commissioner) in accordance with our legal obligations.

8. Your Privacy Rights

Depending on your location and applicable law, you have the following rights regarding your personal information:

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can request that we correct inaccurate or incomplete personal information.
• Deletion: You can request deletion of your personal information, subject to legal retention obligations (for example, tax records).
• Portability: You can request your data in a structured, machine-readable format.
• Opt-out of marketing: You can unsubscribe from marketing communications at any time using the unsubscribe link in emails or by contacting us.
• Withdraw consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at privacy@quickgig.com.au. We will respond to verified requests within 30 days. We may need to verify your identity before actioning a request.

We will not discriminate against you for exercising your privacy rights.

9. Australian Privacy Act Compliance

QuickGig is an Australian Privacy Act entity. We comply with the 13 Australian Privacy Principles (APPs) in Schedule 1 of the Privacy Act 1988 (Cth). In particular:

• APP 1 — We have an open and transparent privacy policy (this document).
• APP 3 — We only collect personal information that is reasonably necessary for our functions.
• APP 5 — We notify individuals at or before the time of collection about how their information will be used.
• APP 6 — We only use or disclose personal information for the primary purpose of collection, or for related secondary purposes that are within reasonable expectations.
• APP 8 — Where we disclose personal information overseas (e.g., to Anthropic in the US), we take reasonable steps to ensure the overseas recipient does not breach the APPs.
• APP 11 — We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access.
• APP 12 & 13 — Individuals have the right to access and correct their personal information.

Certain information we hold (ABN, certification documents, financial records) may constitute sensitive information under the Privacy Act. We handle sensitive information with heightened care and only collect it where strictly necessary for Platform operations.

If you have concerns about our privacy practices, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or call 1300 363 992.

10. New Zealand Privacy Act 2020 Compliance

For Workers and Venues based in New Zealand, QuickGig's collection and use of personal information is also subject to the New Zealand Privacy Act 2020 and its 13 Information Privacy Principles (IPPs). Key obligations under the NZ Privacy Act include:

• We collect personal information directly from you wherever practicable (IPP 2);
• We will inform you of the purposes for which information is collected and who it may be disclosed to (IPP 3);
• You have the right to access and correct personal information we hold about you (IPPs 6 & 7);
• We do not retain personal information longer than necessary (IPP 9);
• We take steps to ensure personal information is accurate before use (IPP 8).

Under the NZ Privacy Act 2020, if we experience a privacy breach that is likely to cause serious harm to any affected individual, we are required to notify both the affected individual(s) and the Privacy Commissioner as soon as practicable.

To make a complaint about QuickGig's handling of your personal information under New Zealand law, contact the New Zealand Privacy Commissioner at privacy.org.nz or call 0800 803 909.

11. Cookies and Tracking Technologies

QuickGig uses cookies and similar technologies to operate and improve the Platform. The types of cookies we use include:

• Essential cookies: Required for the Platform to function, including authentication session cookies (managed by Supabase). These cannot be disabled without breaking the Platform.
• Analytics cookies: We may use anonymised analytics tools to understand how users interact with the Platform. These do not identify you personally.
• Preference cookies: Used to remember your settings and preferences (e.g., saved location preferences).

We do not currently use third-party advertising or retargeting cookies.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in to the Platform.

12. Children's Privacy

The QuickGig Platform is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have inadvertently collected personal information from a minor, we will delete it promptly. If you believe a minor has registered on the Platform, please contact us at privacy@quickgig.com.au.

13. International Data Transfers

Your personal information may be transferred to, stored in, and processed in countries outside Australia or New Zealand. The key international transfers are:

We take reasonable steps to ensure that overseas recipients handle personal information in a manner consistent with Australian Privacy Principle 8 and the New Zealand Information Privacy Principles, including reviewing the privacy policies and contractual obligations of third-party processors.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last updated” date at the top of this page;
• Notify registered users by email at least 14 days before the changes take effect.

Your continued use of the Platform after the effective date of any updated policy constitutes acceptance of the changes.

15. Contact and Complaints

For any privacy-related questions, access/correction requests, or complaints, please contact our Privacy Officer:

We will acknowledge your privacy complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may escalate your complaint to:

• Australia: Office of the Australian Information Commissioner (OAIC) — oaic.gov.au or 1300 363 992
• New Zealand: Office of the Privacy Commissioner — privacy.org.nz or 0800 803 909