Privacy Policy
Last updated: April 2026
What we collect
When you apply for membership, we collect: business name, ABN, industry, contact name, contact email, website URL, phone number, business categories you offer and are looking for, and any invite code. Once you become a member, we additionally store: uploaded logos and images, deal and contract history, messages sent through the platform, payment method token and transaction records, and basic usage telemetry.
How we use your information
We use your information to operate the platform: approve applications, match you with other members, display your business to members with complementary needs, facilitate contracts between parties, charge platform and subscription fees, send transactional emails (digests, trade notifications, credit expiry warnings), and protect the platform from fraud or misuse.
Who we share with
We share the minimum information necessary with the following processors: Supabase (database and auth hosting), Stripe (payment processing — we never store full card numbers), Resend (transactional email delivery), and Vercel (application hosting and edge infrastructure). We do not sell or rent your data. We do not share member-level data with advertisers.
Your data in the product
Other approved members see: your business name, logo, tagline, city, categories you offer and are looking for, deal listings you publish, and public activity such as completed trades and (once available) ratings. Your contact email, phone number, ABN, and billing details are never visible to other members.
Data retention
We retain application data — including ABN — for the duration of your membership and for up to 24 months after account closure to meet our tax and anti-fraud obligations. Message content is retained for the lifetime of the parent conversation. Contract PDFs are retained for the legal retention period applicable to written contracts in Australia (currently seven years).
Your rights
You can request access to, correction of, or deletion of your personal information by emailing privacy@contraclub.com.au. We will respond within 30 days. Where we cannot delete data (e.g. contract records needed to meet legal retention), we will explain why.
Cookies and tracking
We use strictly-necessary cookies for authentication and session management. We do not run third-party advertising trackers. Anonymous analytics may be added in the future; any such change will be notified here and in product before it takes effect.
Changes to this policy
Material changes will be notified by email to the address on your account and, where the change expands what we collect or share, take effect no earlier than 30 days after notification.
Contact
Privacy questions: privacy@contraclub.com.au.