CaliberGuild

CaliberGuild — Privacy Policy

Last updated: 10 July 2026

1. About this policy

CaliberGuild operates a curated online marketplace at caliberguild.com (the "Platform") that connects senior freelance operators ("Freelancers") with businesses that engage them ("Companies").

We take your privacy seriously. This policy explains what personal information we collect, why we collect it, how we use and protect it, who we share it with, and the rights you have. We handle personal information in accordance with the Privacy Act 1988 (Cth) (the "Privacy Act") and the Australian Privacy Principles (the "APPs").

By using the Platform, you agree to your personal information being handled as described here. If you do not agree, please do not use the Platform.

In this policy, "personal information" has the meaning given in the Privacy Act: information or an opinion about an identified individual, or an individual who is reasonably identifiable.

2. The personal information we collect

The information we collect depends on how you use the Platform.

2.1 If you are a Freelancer

  • Account details: your name, email address, and account login credentials.
  • Your CV / résumé: a document (usually a PDF) that you upload. A CV typically contains extensive personal information — your name, contact details, work history, education, and sometimes more. Please see section 4, which explains how an AI service reads your CV.
  • Profile information derived from your CV or entered by you: headline, professional summary, skills, roles and experience, rates, location, languages, and links (e.g. LinkedIn, portfolio, GitHub). Your published profile is public-facing — see section 7.
  • Payment onboarding information: to be paid, you complete identity and payment onboarding directly with Stripe (see section 5). We store your Stripe account identifier and payment-capability flags (for example, whether payouts are enabled). We do not collect or store your sensitive banking or government-identity ("KYC") details — Stripe handles those directly.

2.2 If you are a Company

  • Account and business details: company name, contact person's name, an optional logo, and account login credentials.
  • Job requests you post: title, description, required skills, budget, and expected duration.

2.3 Information we collect from everyone

  • Engagement and transaction records: the engagements you enter into, amounts, statuses, and related dates.
  • Communications: messages you send us (for example, support requests) and our responses.
  • Technical information: limited technical data such as your IP address and basic device/browser information, collected automatically through server logs and essential cookies, for security, fraud-prevention, and to keep the Platform working.

2.4 Sensitive information

We do not ask for "sensitive information" (as defined in the Privacy Act — for example, health information or details of professional or trade association membership). However, a CV you upload may contain sensitive information that you have chosen to include. If it does, by uploading your CV you consent to us handling that information for the purposes described in this policy (see APP 3). You can remove such information from your CV or profile at any time.

3. How we collect your information

  • Directly from you: when you create an account, upload a CV, complete or edit your profile, post a job request, enter an engagement, or contact us.
  • Automatically: through essential cookies and server logs when you use the Platform (see section 12).
  • From third parties: we receive limited information back from Stripe about your payment-onboarding status (for example, whether you are able to receive payouts). We do not receive your full KYC details from Stripe.

4. How your CV is read by an AI service (important)

When you upload a CV, we send it to a third-party artificial-intelligence (AI) provider whose service reads the document and automatically extracts information from it (such as your name, roles, skills, and experience). We use that extracted information to pre-fill an editable draft of your profile, so you don't have to type everything in by hand.

We want to be clear about how this works:

  • You stay in control. The AI only pre-fills a draft. You review, correct, and edit the draft, and nothing is published until you choose to publish it. The AI does not make any decision about you, your eligibility, your ranking, or your suitability — it simply reads a document to save you time.
  • Your CV is not used to train the AI. The AI provider processes your CV solely to perform this extraction for you and does not use your CV to train its models.
  • The AI provider may process your CV overseas. See section 8 (overseas disclosure).
  • You don't have to use it. If you prefer, you can skip the AI import and complete your profile manually.

We consider this to be assisted data-entry with you as the decision-maker, rather than automated decision-making about you. We keep this practice under review as Australia's automated-decision-making transparency rules take effect (from 10 December 2026) and will update this policy if our practices change.

5. Payments and Stripe

We use Stripe to process payments and to onboard Freelancers so they can be paid, using Stripe Connect. When a Freelancer sets up payments, Stripe collects identity and payment information ("KYC") directly and is responsible for that information as its own controller/handler. We store only your Stripe account identifier and capability flags.

Stripe handles your payment information under Stripe's own privacy policy and terms. We encourage you to read them. Stripe may process and store information overseas (see section 8).

6. Why we use your information and how

We use personal information to:

  • create and manage your account;
  • read your CV (via the AI provider) to pre-fill your profile, and publish your profile once you choose to;
  • operate the marketplace — including letting Companies browse and search Freelancer profiles, and letting Companies and Freelancers form engagements;
  • facilitate and process payments, hold funds, release funds on validation, and issue refunds;
  • verify a Freelancer's payment-readiness before their profile is shown as "available for hire";
  • keep the Platform secure, prevent fraud and misuse, and enforce our Terms of Service;
  • respond to your enquiries and provide support;
  • send you transactional messages necessary to operate the service (for example, account, payment, and engagement notifications); and
  • comply with our legal obligations.

We do not use your information for third-party advertising, and we do not sell your personal information.

7. Public profiles vs. your private CV (please read)

There is an important distinction:

  • Your published Freelancer profile is public-facing. That is the point of the marketplace — Companies (and potentially members of the public who reach the profile) can view the profile information you choose to publish (such as your headline, summary, skills, roles, rates, location, languages, and links).
  • The raw CV file you upload is not public. We do not publish or expose your uploaded CV document. Only the profile information you review, edit, and choose to publish is visible.

You control what appears on your public profile. You can edit or unpublish it at any time through your account.

8. Overseas disclosure (APP 8)

Some of the providers we rely on may store or process your personal information outside Australia. In particular:

Recipient Purpose Likely location
The AI provider Reads your CV to pre-fill your profile United States
Stripe Payment processing and payment onboarding (KYC) United States and other countries
Our hosting provider (Vultr) Hosting the Platform and storing data Australia (Sydney)

Before disclosing personal information overseas, we take steps that are reasonable in the circumstances to ensure the recipient handles it consistently with the APPs — for example, through the provider's contractual commitments and their own privacy and security practices.

9. How we store and protect your information (APP 11)

  • The Platform is hosted on a dedicated server (Vultr) located in Sydney, Australia.
  • We take steps that are reasonable in the circumstances to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These include technical measures (such as access controls and encryption of data in transit) and organisational measures (such as limiting who can access data and to what).
  • We store CVs securely and do not expose raw CV files publicly.
  • If a data breach occurs that is likely to result in serious harm, we will act in accordance with the Notifiable Data Breaches scheme under the Privacy Act, including notifying affected individuals and the OAIC where required.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. How long we keep your information (retention) and deletion

We keep personal information only for as long as we need it for the purposes described in this policy, or as required by law.

  • Your uploaded CV file is deleted when you request it, or when you close your account, whichever is earlier. (We keep it while your account is active because it underlies your profile and lets you re-import or update.)
  • Transaction and engagement records are retained for approximately 7 years after the relevant transaction, to meet Australian tax and record-keeping obligations, even after you close your account.
  • Other account and profile data is deleted or de-identified when it is no longer needed, or on account closure, subject to the retention above and any legal hold.

To request deletion of your data, contact us using the details in section 15. Some information may need to be retained for the periods described above; we'll tell you what we can and can't delete.

11. Your rights (APP 12 and APP 13)

You have the right to:

  • Access the personal information we hold about you;
  • Correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading; and
  • Request deletion of your data (subject to section 10).

To make a request, contact us using the details in section 15. We may need to verify your identity first. We will respond within a reasonable time (generally within 30 days) and, in most cases, at no cost. If we refuse access or correction, we'll explain why and how you can complain.

12. Cookies

We use essential cookies only — the ones needed to log you in, keep the Platform secure, and make it function. We do not use third-party advertising or analytics cookies in this version of the Platform. If this changes, we'll update this policy.

13. Marketing communications

We currently send transactional messages only (for example, account, payment, and engagement notifications) — not marketing. If we introduce marketing communications in future, we'll do so consistently with APP 7 and the Spam Act 2003 (Cth), and give you a simple way to opt out.

14. Children

The Platform is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, please contact us and we'll take appropriate steps.

15. Contact us, and complaints

If you have a question, a request about your information, or a privacy complaint, contact our privacy contact:

CaliberGuild — Privacy Loopsu Pty Ltd (ACN 676 832 894) Email: hello@caliberguild.com Post: 9 Bond Street, Maroubra NSW 2035

We'll acknowledge your complaint and aim to resolve it promptly. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC):

  • Website: www.oaic.gov.au
  • Phone: 1300 363 992

16. Changes to this policy

We may update this policy from time to time. The current version will always be available on the Platform, with the effective date shown. If we make a significant change, we'll take reasonable steps to let you know (for example, a notice on the Platform or an email).