Privacy Policy

Who runs Jack of All Trades

Jack of All Trades is a community job marketplace operated by the JAT team. This policy explains what we collect, why, and the choices you have. For privacy questions or requests, reach us through Help & Support.

What we collect

• Account details. Your display name, sign-in method (Google), and verification state — whether your email has been confirmed.
• Contact number. If you choose to add a mobile number, it is used only to coordinate with members you're matched with on a job — the poster and the selected workers. It is never public.
• Profile details you add. Your usual work area (suburb and travel distance), skills, categories, introduction, transport and your confirmation that you are 18 or over.
• Job details. Jobs you post, including the suburb and schedule. The exact address and access notes you enter are stored separately and are never public.
• Activity. Applications, selections, confirmations, job lifecycle events, reviews, ratings, and no-show outcomes.
• Messages. Job chat and question-and-answer messages between members on a job.
• Safety records. Reports you file or that are filed about you, blocks, moderation actions, suspensions and related notes.
• Notification preferences and the notifications the platform sends you.
• Technical logs. Our hosting providers keep standard operational records (such as request and error logs) needed to run and secure the service.

Why we use it

• To run the marketplace: showing jobs, matching workers, managing selections and reservations.
• To verify members: confirming email and phone details when members choose to add them.
• To protect the community: enforcing rules, reviewing reports, suspending abusive accounts and keeping an audit trail of staff access to personal information.
• To communicate with you: job updates, messages and important account notices.
• To operate and secure the service: diagnosing problems and preventing abuse.

Who can see what

• Anyone can see a job's public details — title, description, suburb, pay and schedule. The exact address stays hidden until the poster selects a worker.
• Job chat and private details are visible only to the job's participants.
• Your email, phone and contact number are not shown publicly. A contact number you add is visible only to the poster and selected workers on a job you're matched to.
• Moderation, audit and internal safety records are restricted to authorised staff. Staff access to personal details is role-limited and recorded in an audit log.
• Reports are private — the person reported is never told who reported them.
• Reviews stay hidden from the other party until both sides submit or the review window closes.

Service providers & overseas processing

We rely on a small number of providers: Supabase hosts the database and sign-in service (stored in Sydney, Australia), Vercel hosts the application (its network is global, so some request data may be processed overseas), and Google processes sign-in when you choose Continue with Google (subject to Google's own terms and privacy policy).

Suburb and locality names, postcodes and coordinates come from Geoscape G-NAF, the national address file published via data.gov.au under a Creative Commons Attribution 4.0 licence. That dataset is public reference data, not member information.

Security

Access to data is enforced at the database level, not just in the interface. Verification status comes from the authentication service itself — application code cannot mark an account verified. No system is perfectly secure, but access boundaries are designed to be enforced even if the application layer misbehaves.

Retention

We keep account and activity records while your account is open. If you close your account, your name is anonymised and you are hidden from new work, but completed-job history, reviews you gave and moderation records are retained as part of the community's record and for dispute handling.

Your choices

• Edit your profile, area and notification settings any time from Profile → Settings.
• Block members from Settings → Blocked members.
• Close your account from Profile → Settings → Account. Closure anonymises your identity rather than deleting history.
• Request access to or correction of your information via Help & Support.

Complaints

If you believe your privacy has been mishandled, contact us first so we can look into it. You may also have the right to complain to the Office of the Australian Information Commissioner (OAIC).

Changes to this policy

If this policy changes, the updated version will be posted here with a new date. Significant changes may also be announced in the app.