Privacy Policy
Version 2026-10-17-draft
This policy explains how TicketWise (“we”, “us”) handles personal information. We aim to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) to the extent they apply to us. [Legal review: confirm whether TicketWise is an APP entity, e.g. turnover threshold or an exemption exception such as trading in personal information or providing health services.]
1. What we collect
- Account details: first name, last name, email address and a password (stored only as a one-way hash).
- Optional profile details you choose to add: mobile number, occupation or trade, state or territory, industry, employment status and whether you're interested in FIFO work.
- Documents you upload and the details you record about them, such as qualification names, unit codes, issuers, licence numbers and dates. Some documents, such as medical or police clearances, may contain sensitive or health information. You decide whether to upload these.
- Résumé content you enter, including employment history and referee details. Only add referees who have agreed to be contacted.
- Technical information: session data, and salted, non-reversible hashes of IP addresses used for security and abuse prevention.
2. Why we use it
- To provide the wallet, reminders, résumé builder and sharing features you ask for.
- To send essential account emails (e.g. email confirmation, password resets, security notices).
- To send date reminders you have set up. You can turn these off at any time.
- To send training and promotional emails only if you have opted in. Every such email includes an unsubscribe link, as required by the Spam Act 2003 (Cth).
- To produce aggregate, de-identified statistics about how TicketWise is used.
- To keep the service secure and prevent misuse.
3. AI-assisted document reading
By default, TicketWise reads documents using processing hosted in Australia. If an optional AI service is offered that processes documents outside Australia, we will tell you before each use, and only send a document if you choose to. Extracted details are always shown to you as suggestions to confirm or correct; they are never saved automatically. [Legal review: APP 8 cross-border disclosure wording and named provider/country once selected.]
4. Who can see your information
- Your documents are private by default. They are stored in private storage and are never publicly accessible.
- Employers and recruiters cannot see your profile or documents unless you create a share link. A share link shows only what you select, expires, and can be switched off at any time.
- A small number of authorised TicketWise staff may access account information where needed to provide support, verify documents or meet legal obligations. Staff access to personal documents is restricted, requires a recorded reason and is logged.
- Service providers who host or operate parts of TicketWise for us (for example, Australian cloud hosting and an email delivery provider), under contract and only for that purpose.
- Where required or authorised by law.
We do not sell your personal information.
5. Future talent pool
If you opt in to a future employer and recruiter talent pool, we record that choice. This feature is not live. No information is shared with employers or recruiters through it, and we will ask you again with full details before it launches.
6. Where your information is stored
Account data and uploaded documents are stored with hosting providers in Australia. Some service providers (for example, our email delivery provider) may process limited information, such as your email address and the content of an email, outside Australia. [Legal review: list providers and countries.]
7. Security
We use encryption in transit and at rest, access controls, audit logging, malware scanning of uploads, multi-factor authentication for staff, and regular backups. No system is perfectly secure; we will notify you and the OAIC of an eligible data breach as required by the Notifiable Data Breaches scheme.
8. Your choices and rights
- Access and correct your information at any time in the app.
- Download a copy of your data from Settings.
- Withdraw marketing or talent pool consent at any time in Settings.
- Delete your account from Settings. Uploaded files are deleted straight away and the remaining account data is permanently removed within 30 days, except limited records we must keep by law (for example, security audit logs).
- You may use a pseudonym where practicable, although employers may need your real name on shared documents.
9. Contact and complaints
Contact our privacy officer at privacy@ticketwisewallet.com.au. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
10. About TicketWise and training
TicketWise stores and organises documents you provide. It does not issue nationally recognised qualifications. TicketWise is not currently a Registered Training Organisation. A document marked “self-reported” has not been independently verified.