Privacy Policy

This policy explains how SOARR Pty Ltd ACN 696 424 898 handles personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It is written to be read, not to be survived.

1. What we collect

Category	Examples	Why
Account	Name, email, password (hashed), role	To create and secure your account
Business profile	Business name, industry, size, revenue range, location, challenges, goals, systems used	To produce your analysis and match you to people
Talent profile	University or open-board status, headline, skills, certificates, resume, availability, rate	To match you to roles and verify claimed skills
Engagement records	Applications, acceptances, hours, ratings and reviews	To run the marketplace and calculate fees
Legal records	Executed deeds, your drawn signature, date and time of signing	To evidence the agreement, as required by law
Message metadata	Who messaged whom, when, and your public encryption key	To deliver messages. We cannot read message content
Compliance flags	That a message was blocked and the category detected	To enforce platform rules. The message text is never sent to us
Technical	Device type, browser, IP address, log timestamps	Security, fraud prevention and diagnostics

We do not collect sensitive information as defined in the Privacy Act (health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal record) unless you volunteer it, and we ask you not to.

2. Encryption and what we genuinely cannot see

2.1 Messages are end-to-end encrypted. Your device generates a private key that never leaves it. We store only ciphertext and the initialisation vector. Neither SOARR, nor our hosting provider, nor a party serving us with a request can read your message content from our systems.

2.2 A consequence you should understand: if you lose your device and its stored key, past messages cannot be recovered by us.

2.3 Automated checks for off-platform contact details run on your device before encryption. When a message is blocked we receive only the fact that it happened and the category detected, never the text.

3. How we use your information

We use personal information to operate the Platform: to create and secure accounts, produce analyses and matches, run engagements, calculate and collect fees, verify certificates, comply with law, prevent fraud and misuse, and improve our services.

Model training. We use aggregated and de-identified information to improve our matching and analysis. We do not use the content of your encrypted messages for any purpose, because we cannot read it. We will not use identifiable business information to train models made available to other customers without your express consent.

4. Direct marketing

4.1 We may send you service messages about your account, engagements and legal documents. These are not marketing and you cannot opt out of them while you hold an account.

4.2 We will only send marketing where you have consented, and every marketing message contains a functional unsubscribe, as required by the Spam Act 2003 (Cth). You may opt out at any time in Settings.

5. Who we disclose to

5.1 Other users: a business you apply to sees your profile, skills, verified certificates and redacted resume. Contact details are removed automatically.

5.2 Service providers: hosting, payment processing, email delivery and analytics, bound by contract to protect your information and use it only for the services they provide us.

5.3 Law: where required by Australian law, a court order, or to prevent a serious threat to life, health or safety.

5.4 Business transfer: to an acquirer of our business, subject to this policy.

5.5 We do not sell your personal information.

6. Where your information is stored

6.1 We store personal information on servers located in Australia.

6.2 Some service providers may access information from overseas. Before disclosing personal information to an overseas recipient we take reasonable steps under APP 8 to ensure they handle it consistently with the APPs. Current overseas recipients are listed below.

6.3 SOARR AI. Where you use a SOARR AI feature, such as filling a form by voice or talking to SOARR AI, the words you speak or type for that feature are sent to our artificial-intelligence processor, Anthropic PBC, located in the United States, solely so your request can be understood and acted on. Under our agreement with that provider, this content is not used to train their models. You are always told when you are interacting with SOARR AI rather than a person, and every SOARR AI feature has a non-AI alternative: you can simply type.

7. Security

Access controls and role separation; passwords hashed with scrypt and never stored in plain text; end-to-end encryption for messages; encryption in transit; automatic redaction of contact details in uploaded documents; and logging of administrative access. No system is perfectly secure, and we will notify you and the Office of the Australian Information Commissioner of any eligible data breach as required by the Notifiable Data Breaches scheme.

8. How long we keep it

8.1 Account and profile information: while your account is open, then deleted within 30 days of closure.

8.2 Executed deeds and financial records: 7 years, as required by Australian record-keeping law. These survive account deletion.

8.3 Encrypted message ciphertext: deleted when either participant deletes the conversation or closes their account.

8.4 Compliance flags: 24 months.

9. Your rights

9.1 Access: request a copy of the personal information we hold about you.

9.2 Correction: correct anything inaccurate, from your profile or by asking us.

9.3 Deletion: delete your account and personal information at any time from Settings, Delete account, subject to clause 8.2.

9.4 Complaint: contact us at privacy@soarrindustries.com.au. We respond within 30 days. If you are not satisfied, contact the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

10. Children

The Platform is not directed at children under 16 and we do not knowingly collect their personal information. If we learn we have, we delete it.

11. Cookies and similar technology

We use a small number of strictly necessary cookies to keep you signed in and to remember which side of the Platform you are using. We do not use third-party advertising cookies.