Privacy Policy

1. Introduction

AIP Connect ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

2. Information We Collect

We collect the following types of personal information:

• Identity Information: Full name, email address, phone number
• Professional Information: Resume/CV, work history, qualifications, skills
• Account Information: Login credentials, preferences, saved searches
• Payment Information: Billing details processed securely through Stripe
• Usage Data: Job applications, saved jobs, search history
• Technical Data: IP address, browser type, device information

3. How We Use Your Information

We use your personal information for:

• Connecting job seekers with regional employment opportunities
• Processing job applications and facilitating employer-candidate communication
• Sending job alerts and relevant notifications (with your consent)
• Processing payments for job postings
• Improving our services and user experience
• Complying with legal obligations
• Preventing fraud and ensuring platform security

4. Legal Basis for Processing (APPs)

We process your personal information under the following legal bases as defined by the Australian Privacy Principles:

• Consent: When you create an account or apply for jobs
• Contract: To provide our recruitment services
• Legitimate Interest: To improve our platform and prevent fraud
• Legal Obligation: To comply with Australian law

5. Information Sharing

We share your information with:

• Employers: When you apply for jobs or allow your profile to be searchable
• Service Providers: Stripe (payments), Supabase (database), email services
• Legal Authorities: When required by law or to protect our rights

We do NOT sell your personal information to third parties.

Sponsored regional content does not give a partner access to candidate profiles, applications, salary information or visa information. If AIP Connect later offers a partner enquiry, the form will identify the partner, the exact information to be shared, the purpose and retention period. The separate consent box will be unchecked by default and may be withdrawn.

6. Geographic Coverage

AIP Connect holds valid recruitment licences and operates across all Australian states and territories, including Western Australia (WA). We collect, process, and store data related to job postings and applications for all supported states in accordance with the Australian Privacy Act 1988.

7. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Row Level Security (RLS) policies in our database (Supabase)
• Regular security audits and vulnerability assessments
• Strict access controls and authentication requirements
• Rate limiting and fraud detection systems

8. Your Rights Under the Privacy Act

Under the Australian Privacy Act 1988, you have the right to:

• Access: Request access to your personal information we hold
• Correction: Request correction of inaccurate or outdated information
• Deletion: Request deletion of your personal information
• Restrict Processing: Limit how we use your data
• Data Portability: Receive your data in a portable format
• Object: Object to certain processing activities

To exercise these rights, contact us at privacy@treeshift.com.au

9. Data Retention

We retain your personal information for:

• Active Accounts: As long as your account remains active
• Job Applications: 6 months after application (archived after 90 days)
• Job Postings: 6 months after expiry
• Payment Records: 7 years (legal requirement)
• Audit Logs: 90 days for security purposes

10. Cookies and Tracking

We use essential cookies for authentication and security. We do not use third-party tracking cookies. Analytics data is anonymized. You can control cookies through your browser settings.

11. Third-Party Services

Our platform integrates with:

• Supabase: Database and authentication (hosted in Australia)
• Stripe: Payment processing (PCI DSS compliant)
• Vercel: Hosting infrastructure

These services have their own privacy policies and are contractually bound to protect your data.

12. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or platform notification. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Information

15. Complaints

If you believe we have breached the Privacy Act 1988, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).