Privacy Policy

1. What We Collect

GigYard collects personal information that is necessary to operate the platform and facilitate bookings. This includes:

For all users: - Full name and email address - Phone number - Location and state - Profile information you choose to provide (bio, photos, videos) - Payment card details (collected and stored by Stripe, GigYard does not store raw card data) - Communications sent through the platform

For bands (additional): - Government-issued photo ID (passport or driver's licence) for identity verification - Australian Business Number (ABN) if applicable - Bank account details (provided directly to Stripe for payouts)

We may also collect technical information automatically, including your IP address, browser type, device information, and how you interact with our platform (pages visited, clicks, search queries).

2. How We Use It

We use your personal information to:

- Create and manage your GigYard account - Facilitate bookings and payments between venues and bands - Send booking notifications, reminders, and receipts via email and SMS - Verify the identity of band members as required by our payment provider - Improve the platform through analytics and user feedback - Respond to support requests and enquiries - Send platform updates and announcements (you can opt out at any time) - Comply with our legal obligations under Australian law - Investigate and resolve disputes between users

We will not use your information for any purpose that would be incompatible with the purpose for which it was collected without your consent.

3. Who We Share It With

GigYard shares limited personal information with trusted third-party service providers:

- Stripe (stripe.com), for payment processing and band identity verification. Stripe is our primary payments partner and handles all card data and payouts in compliance with PCI DSS. - Resend (resend.com), for transactional email delivery (booking confirmations, notifications, receipts). - Cloudinary (cloudinary.com), for storing and serving profile photos and band media. - Supabase (supabase.com), our hosted database and authentication provider. - Twilio, for SMS notifications.

We do not sell your personal information to third parties. We do not share your information with advertisers. We may disclose information to law enforcement or regulatory bodies if required to do so by law.

If GigYard is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Data Security

We take reasonable steps to protect your personal information from unauthorised access, disclosure, or loss. These measures include:

- Encrypted connections (HTTPS/TLS) for all data in transit - Encrypted storage for sensitive data at rest - Access controls limiting which team members can view personal data - Stripe-managed storage for all payment card data (GigYard never stores raw card numbers) - Government ID documents stored securely and accessible only for verification purposes

No method of transmission over the internet is completely secure. While we take data security seriously, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.

5. Your Rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the right to:

- Access: Request a copy of the personal information GigYard holds about you - Correction: Ask us to correct any inaccurate or outdated information - Deletion: Request that we delete your personal information, subject to our legal obligations to retain certain records - Opt-out: Unsubscribe from marketing emails at any time using the unsubscribe link in any email, or by contacting us

To exercise any of these rights, contact us at the details in Section 8. We will respond within 30 days.

Note that some information may be retained after account deletion where required by law (e.g. financial records under the Corporations Act 2001).

6. Cookies

GigYard uses cookies and similar tracking technologies to operate the platform. These include:

- Essential cookies: required for authentication and session management, the platform cannot function without these - Analytics cookies: help us understand how users interact with the platform (page views, session duration) - Preference cookies: remember your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in. We do not use cookies for advertising or cross-site tracking.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. After account deletion:

- Profile data is removed from public display immediately - Account data is retained for 7 years where required for tax and financial record-keeping obligations - Government ID documents are deleted within 30 days of account closure, unless a dispute or legal matter requires retention - Communication logs may be retained for up to 2 years for dispute resolution purposes

You may request early deletion of your data where not prohibited by law.

8. Contact for Privacy Matters

If you have questions about this Privacy Policy, wish to make a privacy complaint, or would like to exercise your rights, please contact:

Gig Yard Privacy Officer Email: aus.gigyard@gmail.com

We will acknowledge your inquiry within 5 business days and respond fully within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

This Privacy Policy was last updated June 2026. We may update it from time to time, the current version is always available at gigyard.com.au/privacy.

Privacy questions?

Contact us at gigyard.com.au/contact or email aus.gigyard@gmail.com.