1) Who this policy applies to

This policy applies to job seekers, employers, team members, account administrators, website visitors, and users of Kwirl social/community features (for example: profiles, posts, comments, reactions, follows, public activity, direct or in-app messages, and shared content).

2) What personal information we collect

• Identity and contact data: name, email, phone, account credentials, job title, company details.
• Recruitment and profile data: resumes, qualifications, employment history, role preferences, portfolios, references, interview notes, communications.
• Social/community data: profile photos, posts, comments, reactions, follows, content uploads, moderation signals and reports.
• Usage and technical data: IP address, browser/device data, session logs, analytics, pages/features used.
• Support and compliance data: helpdesk requests, complaint records, abuse reports, verification records.

3) How we collect information

• Directly from you when you register, complete forms, apply for roles, or communicate with us.
• From your organization (for employer-managed accounts and team workspaces).
• Automatically through cookies, logs, analytics and device/browser signals.
• From integrations or service providers you authorize (for example scheduling or communications tools).

4) Why we use personal information

• To provide and operate the platform and social/community functionality.
• To manage hiring workflows, candidate pipelines, and communications.
• To personalize user experience and improve product quality and safety.
• To detect fraud, abuse, policy breaches and unlawful behavior.
• To comply with legal obligations and enforce our Terms & Conditions.
• To communicate service updates, support notices, and (where permitted) marketing.

5) AI-assisted processing

Certain features may use AI-assisted workflows (for example, draft suggestions, summaries, triage support, or ranking aids). We apply governance and controls consistent with our AI Policy. AI outputs are intended to assist users and are not a substitute for independent human review in high-impact decisions.

6) Social features and visibility

• Content you choose to post in public or shared spaces may be visible to other users.
• You are responsible for the personal information you publish about yourself or others.
• We may moderate, remove, restrict, or review content that breaches law or our terms.
• Metadata and moderation logs may be retained for trust, safety and legal compliance.

7) Disclosure of personal information

We may disclose personal information to:

• Your authorized employer or organization users (where account/workflow permissions allow).
• Service providers supporting hosting, analytics, support, security, communication and payments.
• Professional advisers, auditors, regulators or law enforcement where required or permitted by law.
• Parties involved in business restructuring, merger, acquisition or sale (subject to confidentiality safeguards).

8) Overseas disclosure

Some service providers may store or process data outside Australia. Where this occurs, we take reasonable steps to ensure recipients handle personal information in a manner substantially similar to the APPs.

9) Data security

• Encryption in transit and access controls based on role and need.
• Monitoring, logging and incident response procedures.
• Administrative, technical and contractual controls with vendors.

No internet-based service is completely secure, but we work to reduce risk through layered controls.

10) Data retention

We retain personal information for as long as reasonably necessary for service delivery, legal and compliance requirements, dispute resolution, and enforcement of our agreements. We then delete or de-identify data where practicable.

11) Cookies and analytics

We use cookies and related technologies to keep you signed in, remember preferences, measure usage and improve performance. You can manage cookie settings in your browser, but disabling cookies may affect functionality.

12) Access and correction rights

You may request access to personal information we hold about you, and request correction of inaccurate, out-of-date, incomplete, irrelevant or misleading information. Contact us via Contact us.

13) Complaints

If you have a privacy concern, please contact us first so we can investigate and respond. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

14) Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a revised effective date.