Privacy Policy

Effective Date: 2026-07-23

1. Introduction

execareerID Pty Ltd (ABN 73 695 695 437) (we, us, or our) is committed to protecting your privacy and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy describes how we collect, hold, use, and disclose your personal information in connection with the execareerID platform (the Service). It also explains your rights regarding your personal information and how you can contact us.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

2. Personal Information We Collect

We collect the following categories of personal information:

2.1 Information You Provide Directly

• Account information: name, email address, phone number, job title, and password.
• Career Data: employment history, qualifications, certifications, skills, professional references, career objectives, and professional achievements.
• Profile information: profile photo (optional), professional bio, and industry.
• Payment information: billing address and payment method details (processed securely by our third-party payment processor; we do not store full credit card numbers).
• Communications: information you provide when contacting our support team or responding to surveys.

2.2 Information Collected Automatically

• Usage data: pages visited, features used, time spent on the Service, and interactions with AI Features.
• Device and technical data: IP address, browser type, operating system, device identifiers, and referring URLs.
• Cookies and similar technologies: we use cookies, local storage, and similar technologies to enhance functionality and analyse usage. See Section 10 for details.
• Log data: server logs recording access times, error reports, and system activity.

2.3 Information from Third Parties

We may receive personal information about you from third parties, including Enterprise Customers who create or manage your Account, identity verification services (where applicable), and publicly available professional profiles (e.g., LinkedIn) where you authorise integration.

3. How We Use Your Personal Information

We use your personal information for the following purposes:

• Providing and operating the Service
• Processing payments and managing subscriptions
• Sending transactional and marketing communications
• Improving the Service and developing new features
• Ensuring security and preventing fraud
• Complying with legal obligations

3.1 Platform market insights.Where you tell us a job description you add to the Service is a public listing, we may reduce that description to de-identified requirement terms and aggregate those terms with other users' to produce market insight — for example, how often a capability is asked for in ads at a given seniority and in a given sector. The aggregate never stores the text of a job advertisement or the identity of the employer. It contains no user, job, company or persona identifier and cannot be linked back from its own contents. The only per-advertisement key is a salted hash whose salt is held only in the deployment environment, never in the database. Advertisements are counted once regardless of how many users add the same one.

3.2 You control this in two places. A job description is only ever included if you confirm it is a public listing when you add it, so confidential briefs — including retained-search material — are excluded by default. You may also withdraw all of your job advertisements from platform market insights at any time in Settings. Withdrawal is retroactive: the aggregate is rebuilt from source on a regular schedule, so your advertisements are removed from it rather than merely excluded from future updates.

4. Lawful Basis for Processing

Under the Privacy Act 1988 (Cth), we are permitted to collect personal information that is reasonably necessary for our functions or activities. We rely on the following bases:

• Consent: Where you have given us consent to collect, use, or disclose your personal information for a specific purpose (e.g., marketing communications, AI-enhanced features).
• Contractual necessity: Where processing is necessary to perform our contract with you (i.e., to provide the Service under our Terms of Service).
• Legal obligation: Where we are required by law to collect or retain certain information.
• Legitimate functions: Where the collection is reasonably necessary for our business functions, such as improving the Service and ensuring security.

5. Disclosure of Personal Information

We may disclose your personal information to the following categories of recipients:

5.1 At Your Direction

When you use the sharing features to share your career profile with recruiters, employers, or other third parties, we disclose the information you choose to share to those parties.

5.2 Service Providers

We engage third-party service providers to help operate the Service. These providers are contractually obligated to handle your information in accordance with this Privacy Policy and applicable law. Key categories include:

• Cloud hosting and infrastructure providers
• Payment processors
• Email and communication service providers
• Analytics and monitoring tools
• Customer relationship management (CRM) systems
• Marketing and advertising platforms
• Data enrichment and verification services
• AI and machine learning service providers

5.3 Enterprise Customers

If your Account is managed by or linked to an Enterprise Customer, that organisation may have access to certain Account information and usage data in accordance with their enterprise agreement.

5.4 Legal and Regulatory

We may disclose personal information where required by law, regulation, legal process, or enforceable government request, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.5 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of assets, your personal information may be transferred to the acquiring entity, subject to applicable privacy laws.

6. Cross-Border Disclosure of Personal Information

As a globally available service, we may disclose your personal information to recipients located outside Australia, including to our service providers and infrastructure hosts in countries such as the United States, the European Union, and other jurisdictions.

Before disclosing personal information overseas, we take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to that information, in accordance with APP 8. This includes:

• entering into contractual arrangements that require overseas recipients to handle personal information in accordance with the APPs;
• conducting due diligence on the privacy and security practices of overseas recipients; and
• ensuring that data is stored and transmitted using appropriate security measures, including encryption.

If you consent to cross-border disclosure in circumstances where the overseas recipient is not bound by obligations substantially similar to the APPs, we will inform you of this before obtaining your consent.

7. Artificial Intelligence and Automated Decision-Making

7.1 The Service uses AI and machine learning to provide career recommendations, profile optimisation suggestions, skills gap analysis, and other automated insights.

7.2 AI Features may process your Career Data, usage patterns, and profile information to generate personalised outputs. These outputs are intended as suggestions only and do not replace professional advice.

7.3 We may use aggregated and de-identified data to train and improve our AI models. We will not use your identifiable Personal Information for AI training without your explicit consent.

7.4 No personally identifiable information is sent to third-party AI providers. Where we use external AI or machine learning services to power AI Features, all data transmitted to those providers is anonymised and de-identified before transmission. We maintain technical safeguards, including data anonymisation pipelines and pre-processing filters, to strip all personally identifiable information from data before it leaves our systems. Third-party AI providers do not receive your name, email address, contact details, or any other information that could be used to identify you.

7.5 No training by third-party AI providers. Our contractual arrangements with all third-party AI providers expressly prohibit those providers from using any data we transmit — including anonymised and de-identified data — for the purpose of training, fine-tuning, or otherwise improving their AI models. Data sent to third-party AI providers is processed solely to generate outputs for the Service and is not retained by those providers beyond what is strictly necessary to deliver the immediate response.

7.6 You have the right to request information about how AI Features use your data. You may also opt out of certain AI Features through your Account settings without losing access to the core Service functionality.

7.7 No decisions with significant legal or financial consequences are made solely by automated means. Where AI-assisted decisions may materially affect you, human review is available upon request.

8. Data Security

8.1 We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure, in accordance with APP 11.

8.2 Security measures include:

• encryption of data in transit (TLS/SSL) and at rest;
• access controls and authentication mechanisms;
• regular security assessments and penetration testing;
• employee training on data protection practices; and
• incident response procedures for data breaches.

8.3 In the event of an eligible data breach as defined under the Notifiable Data Breaches (NDB) scheme in Part IIIC of the Privacy Act 1988 (Cth), we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required by law.

9. Data Retention

9.1 We retain your personal information for as long as your Account is active or as needed to provide the Service to you.

9.2 Upon Account closure, we will de-identify or delete your personal information within 90 days, except where retention is required:

• to comply with legal, tax, or regulatory obligations;
• to resolve disputes or enforce our agreements;
• for legitimate business purposes such as fraud prevention; or
• where you have consented to longer retention.

9.3 Aggregated and de-identified data that can no longer be used to identify you may be retained indefinitely for research and improvement purposes. The platform market insights aggregate described in section 3.1 is data of this kind; because it is rebuilt from source, a job advertisement you exclude or withdraw leaves it at the next rebuild.

10. Cookies and Similar Technologies

10.1 We use cookies and similar tracking technologies to operate and improve the Service.

10.2 Types of cookies we use:

• Essential cookies: Required for basic Service functionality, such as authentication and session management.
• Functional cookies: Remember your preferences and settings to enhance your experience.
• Analytics cookies: Help us understand how users interact with the Service so we can improve it.
• Marketing cookies: Used (with your consent) to deliver relevant advertisements and measure campaign effectiveness.

10.3 You can manage cookie preferences through your browser settings or through the cookie consent tool on our website. Disabling certain cookies may affect the functionality of the Service.

10.4 For a full inventory of the cookies and similar technologies we use, including their purpose, retention, and provider, see our Cookie Policy.

11. Your Rights

Under the Privacy Act 1988 (Cth) and the APPs, you have the following rights:

11.1 Access (APP 12)

You have the right to request access to the personal information we hold about you. We will respond to your request within 30 days. We may charge a reasonable fee for providing access where permitted by law.

11.2 Correction (APP 13)

You have the right to request correction of any personal information that is inaccurate, incomplete, out of date, or misleading. You can update most information directly through your Account settings.

11.3 Erasure and Account Deletion

You may request deletion of your Account and associated personal information at any time. We will process deletion requests within 30 days, subject to our retention obligations in Section 9.

11.4 Marketing Opt-Out

You may opt out of receiving marketing communications at any time by using the unsubscribe link in our emails or updating your communication preferences in your Account settings. We will process opt-out requests within 5 business days in accordance with the Spam Act 2003 (Cth).

11.5 Data Portability

You may export your Career Data in a commonly used, machine-readable format through the Service's export feature.

11.6 AI Opt-Out

You may opt out of AI-powered features and personalised recommendations through your Account settings. Opting out will not affect your access to the core Service.

12. Additional Rights for International Users

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with additional privacy rights:

• You may have rights under the General Data Protection Regulation (GDPR) or equivalent local laws, including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local supervisory authority.
• Where we rely on consent as a lawful basis, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• We will endeavour to honour data subject rights under applicable local laws in addition to our obligations under Australian law.

13. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us using the details in Section 17.

14. Do Not Track Signals

Some browsers transmit “Do Not Track” (DNT) signals. We currently do not respond to DNT signals, as there is no uniform industry standard for compliance. We will update this Policy if a standard is adopted.

15. Changes to This Privacy Policy

15.1 We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law.

15.2 We will notify you of material changes by email or in-app notification at least 30 days before they take effect.

15.3 The “Effective Date” at the top of this Policy indicates when it was last updated.

15.4 Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

16. Complaints

16.1 If you believe we have breached the APPs or handled your personal information inappropriately, you may lodge a complaint with us using the contact details below.

16.2 We will acknowledge your complaint within 5 business days and investigate it promptly. We aim to resolve complaints within 30 days.

16.3 If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au
• Post: GPO Box 5218, Sydney NSW 2001

17. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: