Privacy Policy

Our approach to privacy

Nurai Connect is a global digital marketplace designed to connect people with employment opportunities, clients with service providers, and businesses with talent. Protecting personal information is fundamental to the trust needed for those connections. This Global Privacy Policy explains what personal information we collect, why and how we use it, who may receive it, how long we keep it, the choices available to you, and how you may contact us about privacy.

Our services bring together distinct activities: employment listings and applications; tasks and service bookings; independent and remote projects; flexible work opportunities; and related business, account, payment and support functions. Not every function is available in every country or to every account. This Policy applies to the features that are actually offered and used, and any additional privacy notice presented for a particular feature, country or regulated service.

A key distinction: Nurai Connect provides a platform for connections. When you choose to submit an employment application to an employer, or share information with another user to arrange a service, that recipient may have separate legal duties and privacy practices. We explain the relevant sharing below. The Nurai Connect Terms and Conditions govern use of the Platform; this Policy governs how personal information is handled.

1. Who we are and when this Policy applies

1.1 Nurai Connect is operated principally by Nurai Group Pty Ltd, an Australian company. Nurai Group may establish or engage locally incorporated subsidiaries, affiliated companies, branches or authorised operating entities to support Nurai Connect in particular markets. Where a local entity independently determines how and why personal information is used, or is a joint controller with another entity under applicable law, we will identify the relevant entity and explain its responsibilities through a country or feature-specific notice where required. The mere appearance of a country on the Platform does not mean a Nurai company is incorporated there.

1.2 This Policy applies when you visit our websites; create or use an account; create a job seeker, worker, employer, client, team or organisation profile; post or respond to opportunities; apply for jobs; book, provide or pay for services; use a wallet or withdrawal function; contact our support or staff; attend a platform-supported online interaction; or otherwise interact with official Nurai Connect services.

1.3 It covers information about identifiable individuals, including sole traders, company representatives and staff members. Information about a company may be personal information when it identifies an individual. Anonymous or irreversibly de-identified information is generally not personal information, although some laws may treat it differently.

1.4 Other Nurai Group businesses, events and non-platform products are not automatically covered by this Policy merely because they share a parent company. Their own notices apply where they independently collect or use information. Links to external websites, employers and third-party services do not make those services subject to this Policy.

2. Who uses Nurai Connect

2.1 We process personal information about visitors; job seekers and applicants; workers, contractors, freelance professionals and service providers; employers, recruiters, agencies and hiring managers; individual clients and households; business and organisation representatives; authorised team members; applicants for verification; and people who contact us about an opportunity, complaint, safety incident or support request.

2.2 An individual may use more than one role on the Platform. We may connect activity across those roles to operate one account, apply appropriate eligibility rules, manage wallet activity, prevent fraud, and avoid inaccurate or duplicated records. An individual choosing to hire a worker on one occasion and seek work on another does not automatically make all their personal information public to both types of users.

3. Categories of personal information we collect

We collect information only when relevant to the functions used, to a lawful purpose or to an applicable obligation. Categories can include the following.

3.1 Identity and contact information. Name, display name, date of birth or age confirmation where required, email address, telephone number, username, country, city, address, preferred language, time zone, profile photograph and account identifiers. We may request additional identity information to verify your identity, age or eligibility for an activity.

3.2 Account and organisational information. Account roles, login and authentication records, linked organisations, team permissions, employer or client details, business trading name, company registration and tax identifiers, authorised representatives, business contacts, business addresses, job postings, company branding and verification status.

3.3 Career and professional information. CVs and résumés, work history, education, qualifications, training, skills, languages, portfolios, references, work preferences, desired locations, availability, expected pay, work-authorisation declarations, relocation preferences, job applications, screening responses, interview records, offers and application status information.

3.4 Service provider and task information. Offered services, service area, stated rates, quotes, bookings, scheduled times, task descriptions, attachments, photos, completion records, relevant communications, reviews, ratings, complaints and evidence provided in a dispute. A service address may identify a private home and is treated more carefully than a general city or service radius.

3.5 Identity, eligibility and professional evidence. Where justified by the actual service, country and sector, information from identity documents, professional licences or registrations, ABN or equivalent business records, insurance evidence, right-to-work checks, police or background checks, working-with-children or vulnerable-person screening and related verification decisions. The specific information required depends on the activity and local law. We do not require every type of document from every person.

3.6 Wallet, transaction and payment information. Wallet account identifiers, balances and ledger entries, top-ups, task payments, service charges, membership purchases, earnings, amounts available or pending, withdrawal requests, payment status, refunds, reversals, invoices, billing details, applicable taxes and transfer destination details. Where we use a payment-processing partner, that provider may collect card details or other payment credentials directly. We do not need to receive or display complete card numbers for ordinary card transactions.

3.7 Messages and support information. In-platform communications, contact enquiries, correspondence, support tickets, incident and dispute reports, feedback, files or images you choose to provide, and records of how a matter was handled. Private messages are not necessarily end-to-end encrypted; access may be permitted to authorised staff when necessary for support, safety, moderation, compliance or dispute resolution, subject to controls and applicable law.

3.8 Technical, usage and device information. IP address, device or browser type, operating system, language, log-in time, cookie and similar identifiers, approximate country or city inferred from an IP address, referring pages, pages viewed, search terms, feature use, session records, errors, and device-security or fraud-prevention signals.

3.9 Location information. Approximate location inferred from IP address or selected market; location entered in profiles, job or task postings; map coordinates; service area; and, if an available feature requests and you grant the relevant device permission, more precise location for location-dependent services. We do not assume that every user grants continuous location access. Public users should normally see an approximate service area rather than a private residential address before access is legitimately needed.

3.10 Preferences and marketing records. Settings, language preferences, saved searches, notifications, subscriptions, newsletter preferences, marketing consents and opt-outs, survey responses, and interactions with communications where permitted.

3.11 Sensitive or specially protected information. Some identity, screening, health, disability, criminal-record or other information may be sensitive under applicable law. We seek to collect it only when justified and permitted, apply additional safeguards, and do not assume a general right to process it simply because a user uploads it. Do not insert unnecessary sensitive information about yourself or others into an ordinary CV, public listing, chat message or review.

4. Where information comes from

4.1 You provide information directly when registering, completing a profile, applying for a role, listing a task, sending a message, submitting a document, making a payment or contacting support.

4.2 Other Platform users may provide information about you. An employer may record application status or an interview decision; a client or provider may submit a review, booking record or incident report; an organisation administrator may add an authorised staff member. We assess such information in its context and provide correction or review routes where required.

4.3 Technical systems collect limited information automatically when you use the website or application, including security logs, session information, IP-derived location and permitted cookies or analytics events.

4.4 Third-party sources may provide information when lawfully used for identity, business, licence, payment, fraud or professional status verification, or when you authorise an integration. This can include official registries, verification vendors, payment institutions, corporate administrators, referral or recruitment sources and relevant public records. Where law requires us to notify you about information obtained from others, we do so.

5. Why we use personal information

We process personal information for legitimate, specific purposes connected to operating and protecting the Platform. These include:

5.1 Creating and maintaining accounts: registration, authentication, account recovery, role management, profile settings, organisation permissions, security and user support.

5.2 Connecting opportunities and people: showing jobs and services; organising searches and filters; enabling profile discovery where chosen or permitted; displaying appropriate qualifications and availability; helping clients and employers discover people with relevant skills; and managing saved jobs, alerts and recommendations.

5.3 Applications and recruitment: enabling applications, CV transmission, applicant management, screening questions, interview coordination, offer communication and application status tracking when these functions take place on the Platform.

5.4 Tasks, services and projects: preparing requests and quotes, forming supported bookings, facilitating relevant communications, recording agreed scope and changes, coordinating fulfilment, handling completed work, reviews and disputes.

5.5 Wallets, billing and payments: recording wallet balances and top-ups for eligible account holders on both sides of the marketplace; supporting wallet-funded task payments; calculating and recording fees; maintaining earnings and transaction histories; reviewing withdrawal requests; arranging eligible payments; resolving failed or returned transfers; handling refunds, reversals and reconciliations; and meeting tax, fraud and accounting requirements.

5.6 Identity, eligibility and compliance: confirming user or business identity, work eligibility, qualification or licence status where relevant; monitoring document expiry; meeting lawful screening obligations; identifying fraud and prohibited activity; and responding to regulators or valid legal processes.

5.7 Trust, safety and service quality: moderating content, receiving reports, investigating fraud or abuse, resolving complaints, safeguarding private service addresses, operating review systems, ensuring fair use, maintaining security logs and preventing platform misuse.

5.8 Platform operation and improvement: providing technical support, maintaining availability, investigating errors, measuring performance, improving navigation and accessibility, testing features, managing capacity, and analysing aggregate marketplace performance using appropriately protected information.

5.9 Communications: responding to enquiries, sending transaction and security notifications, updates affecting your account or service, and marketing where permitted and with any required consent or choice.

5.10 Legal duties and rights: maintaining records required by law, complying with financial or tax reporting, preventing unlawful acts, responding to legal claims, defending rights and cooperating with competent public authorities as legally required.

6. Legal grounds for using information

Where a legal basis is required, such as under EU or UK data protection law, the basis depends on the specific use:

6.1 Contract or pre-contract steps: registering and administering an account, providing a service that you request, processing an application submitted through the Platform, managing a booking, providing wallet transaction records or responding to a withdrawal request.

6.2 Legal obligation: keeping required financial and tax records; responding to valid legal orders; carrying out mandatory screening, identity checks or reporting; and handling legally required privacy or security obligations.

6.3 Legitimate interests where recognised and not overridden: securing services, preventing fraud, managing abuse, improving reliability, defending claims, reasonably administering the marketplace and matching relevant opportunities where a balancing assessment supports this basis.

6.4 Consent where required: optional marketing, non-essential cookies or similar technologies, certain precise-location functions, optional integrations and categories of sensitive information where consent is the appropriate lawful ground. You may withdraw consent subject to applicable law and the consequences of disabling an optional feature.

6.5 Other lawful grounds: vital interests, public interest or another ground only when an applicable law recognises that basis for the specific situation.

We do not treat acceptance of our Terms and Conditions as blanket consent for every use of personal information. Where a local law uses different lawful-basis terminology, we apply the relevant standard rather than assuming that GDPR grounds apply identically everywhere.

7. Job seeker profiles, visibility and recruitment information

7.1 A job seeker may provide details intended to help relevant employers or recruiters evaluate their suitability. The information available to others depends on supported visibility settings, profile design, application choices and the lawful needs of the feature. A profile that is displayed for discovery can reveal selected professional details; restricted verification documents and private account credentials are not part of a public professional profile.

7.2 When you apply to an opportunity within Nurai Connect, we may disclose the application, CV, contact details, screening answers and relevant profile information to the employer, recruiter or authorised organisation for that opportunity. Employers and their authorised staff may save, evaluate and communicate about those submissions for legitimate recruitment purposes. Employers are responsible for their own privacy obligations when they independently decide how applications are handled.

7.3 A profile may be accessible to a prospective employer or client in accordance with its settings even if you have not applied for a specific job. Do not include information in a discoverable profile that you would not want appropriately authorised viewers to see. Search engines or other users may copy information that is publicly displayed; a later visibility change may not immediately erase copies lawfully or unlawfully retained outside our control.

7.4 If an employer or recruiter sends a lawful invitation or reaches out through permitted platform tools, we may use relevant profile information to enable that interaction. We do not guarantee that a recipient will respond or offer employment. We do not provide the contents of a user's unrelated private job-search activity to the user's existing employer merely because that employer operates an organisation account, except where that user chooses to share it or another lawful ground applies.

7.5 We may preserve necessary application history and associated records to manage user requests, platform integrity, disputes, legal obligations and legitimate recordkeeping. You may request available corrections or deletion subject to the rights of employers and lawful retention requirements.

8. External job applications and third-party recruitment

8.1 Some listings direct you to an external employer website or applicant-tracking system. When you follow such a link, you leave Nurai Connect. The external employer or service decides what additional information it collects, how it evaluates your application and how long it keeps it, under its own notices and applicable law.

8.2 Nurai Connect may retain limited records that a listing was viewed or an external application link was opened, together with necessary technical, fraud or performance data, but we do not automatically receive the completed external application, all employer communications, their selection decisions or documents you later provide to that external site.

8.3 Review the third party's privacy terms before submitting information. Contact the receiving organisation directly for access, correction, deletion or hiring-process queries relating to information it controls. Nurai Connect remains responsible for its own privacy practices and any duties imposed on it by law.

9. Employer, client and organisation accounts

9.1 Business accounts may include business contact information, authorised administrators and staff profiles, job and task listings, candidates, service providers, quotes, bookings, invoices and support records. Administrators may access relevant activity undertaken within the organisation account, subject to account permissions and lawful notices.

9.2 Organisations must have a lawful reason to upload or use candidates', workers', customers' or staff members' personal information. They should restrict access to people who genuinely need it, secure downloaded CVs or documents, provide their own required privacy notices, and avoid using candidate information for unrelated advertising, resale or prohibited profiling.

9.3 When an organisation independently determines the purposes and means of processing applicant or worker data it receives, it may be an independent controller or equivalent responsible entity under applicable law. Our enabling an application or communication does not automatically mean that we control all subsequent processing by that organisation.

10. Service requests, private addresses and location data

10.1 Location is relevant to searching nearby opportunities, eligibility by country, time zones, services areas, scheduled tasks and matching. We may use user-selected country/city, IP-based approximate location and map services for these purposes.

10.2 A private service address, such as a household address, should not be publicly disclosed simply because a client posts a task. More precise details may be provided to an eligible provider when reasonably necessary for an accepted service arrangement, access instructions or safety, using available product controls.

10.3 Where mobile location permissions are available, you may choose to grant or refuse them in your device settings. Disabling precise location may reduce functions requiring it, but will not necessarily prevent location being approximated through IP address, information you enter or transaction records.

10.4 We do not permit users to publish or disclose another person's private address, exact location or sensitive access instructions without lawful authority. Logs of locations connected with an incident or payment dispute may be retained where reasonably necessary and lawful.

11. Identity, licensing, screening and sensitive records

11.1 Requirements vary by country, sector, job, task and legal status. A licence that is mandatory for a regulated role in one place may not be needed for an unrelated service or in another jurisdiction. We may collect and evaluate the documents reasonably necessary for the particular activity and may re-check their validity or expiry.

11.2 We use relevant verification information to confirm identity, business status, professional qualifications, right-to-work declarations, screening outcomes or service eligibility; to protect users; and to meet applicable legal duties. We may share necessary information with specialised verification providers, public registries or competent authorities where lawful. Where legally appropriate, an employer or client may be shown a verification status, credential name or validity indication rather than the underlying confidential document.

11.3 We do not ordinarily publish photographs of identity documents, complete licence identifiers, police-check certificates, bank documents or other confidential evidence in public profiles. Access is restricted to authorised purposes and personnel as technically and operationally appropriate.

11.4 Sensitive information uploaded by mistake or not needed for a legitimate purpose may be removed, masked or restricted where appropriate. The outcome of a verification is not a guarantee of the person's character, suitability or future compliance. Legal duties of employers and other users remain applicable.

12. Wallets, top-ups, task payments and withdrawals

12.1 Eligible clients, employers, workers and service providers may have wallet functions. Permitted uses depend on account role, country and the specific functionality. These may include topping up a wallet, paying for tasks using an available wallet balance, receiving eligible earnings or credits, viewing transaction history and requesting withdrawals of available funds.

12.2 To operate these functions, we record information such as the payer and recipient account, amount, currency, date, funding reference, task or invoice reference, wallet balance, transaction status, eligibility checks, refunds, reversals, deductions, withdrawal instructions and support correspondence. We use these records to show accurate balances, complete transactions, prevent duplicate entries, investigate errors and meet lawful financial obligations.

12.3 When you request an eligible withdrawal, we use the payment details you provide and any required verification or transaction information to arrange and reconcile the payment. Transfer completion varies by financial institution, jurisdiction, payment system, currency and other factors. A pending or approved withdrawal is not necessarily a completed receipt by the destination account. A delayed, returned or failed transfer may require us to retain relevant records, ask for corrected details, perform further checks or reconcile the balance. We do not promise a fixed number of business days in this Policy.

12.4 The Platform may engage financial, verification, fraud and payment-service organisations where relevant. Those third parties receive only the information needed for their role and may have independent legal duties and notices. This Policy does not suggest that a particular payment brand directly sends all withdrawal payments or that Nurai Connect is a bank or deposit-taking institution.

12.5 Legitimate balances and transaction records may need to remain available for refunds, chargebacks, taxation, accounting, fraud prevention, audits, claims and unresolved disputes after an account is restricted or closed. We handle them subject to applicable privacy and financial laws.

13. Communications, ratings, reviews and dispute records

13.1 A job application, service request or booking may lead to messages, quotes, interviews, scheduling notices, completion evidence and feedback. Such records are used to administer the relevant relationship, provide support and respond to disagreements.

13.2 Reviews and ratings can identify the person being reviewed and may be visible to others as part of a public or restricted professional profile. We may investigate reports of fabricated, retaliatory, discriminatory or unlawful content. We may preserve evidence necessary to investigate misconduct even if a particular review is removed from public display.

13.3 Messages and documents related to safety, harassment, abuse, non-payment, fraud, cancellation or legal claims may be viewed by appropriately authorised personnel, to the extent necessary, and disclosed to competent authorities when required or otherwise lawful. We do not promise that every message will remain exclusively visible to the two participants.

14. Matching, recommendations, analytics and AI

14.1 Where supported, we may use information such as your skills, selected job sectors, professional credentials, country or city, availability, preferences, prior platform activity and lawful eligibility status to sort or recommend jobs, services and potential matches. Relevant inputs and outcomes vary with the feature. A suggestion does not guarantee a job, booking, professional eligibility or payment.

14.2 Automated systems may support search, translation, content categorisation, fraud detection, spam prevention, safety screening, customer support and profile or opportunity suggestions. These tools may produce inaccurate results. They are not an independent substitute for professional licensing or a final employment decision by an employer.

14.3 If a decision based solely on automated processing produces legal or similarly significant effects, we will provide information, review or contest mechanisms where applicable law requires them. We do not assume that a general ranking or recommendation is automatically such a decision, but we assess significant automation according to its actual effect and relevant law.

14.4 AI and cloud service suppliers may process limited information necessary to deliver an enabled AI-assisted function. We apply appropriate access, security and supplier controls and do not authorise use of sensitive user documents for unrelated model training merely because those documents are supplied to an optional AI feature. Processing for improvement or model training, where relevant, requires its own lawful and appropriately disclosed basis.

14.5 We may analyse aggregated or de-identified data to understand adoption, industry categories, job supply and demand, service quality, fraud patterns and platform performance. We seek to minimise direct identifiers where they are unnecessary.

15. Cookies, analytics and similar technologies

15.1 Cookies and similar technologies can be used to remember session status, protect authentication, detect abuse, maintain preferences, assess site performance and, where deployed and permitted, understand usage or support marketing. Cookies vary in duration and in whether they are set by us or a third party.

15.2 Strictly necessary technologies may be required to provide secure login, fraud controls or requested functions. Optional analytics, advertising and comparable technologies will be subject to the consent or opt-out requirements of applicable law. Where a cookie preference interface is available, you can manage applicable options there; browser and device settings may also provide controls.

15.3 Blocking essential cookies may prevent login or other requested functions. Disabling optional technologies should not remove access to services when those technologies are not necessary. We will not treat a general acceptance of Terms as consent to non-essential cookies where separate consent is required.

15.4 Information about particular technologies, providers, categories and durations may be supplied through the active cookie settings panel or an accompanying Cookie Notice where legally required. If a legally recognised opt-out preference signal applies to a deployed technology, we will honour it as required by law.

16. Marketing, notifications and surveys

16.1 We may send messages needed to administer your account or transactions, such as security alerts, application updates, task confirmations, withdrawal status, legal notices or material service changes. These are distinct from optional advertising.

16.2 We send promotional communications only when permitted by applicable law, subject to any required consent, unsubscribe method and user preferences. You may unsubscribe from marketing by using the relevant message control or contacting us; certain operational communications may still be necessary to provide a requested service or satisfy legal duties.

16.3 We do not permit independent users to use candidate contact details obtained through the Platform for unrelated unsolicited marketing or resale without a separate lawful basis.

17. When we share personal information

We do not publish confidential user records indiscriminately. Depending on the activity and lawful grounds, we may share relevant information with:

17.1 Other users and transaction participants. Employers or recruiters receiving applications; clients receiving offers or service-provider details; workers receiving agreed scope or necessary access information; organisation team members managing an authorised account; and participants receiving booking, review or dispute information. Sharing is limited by the feature, visibility setting, access permissions and transaction needs.

17.2 Nurai Group entities. Authorised subsidiaries, affiliates, local operating companies and their personnel providing support, verification, administration, compliance or platform operations, subject to their actual responsibilities and lawful safeguards.

17.3 Service providers. Hosting and infrastructure suppliers; authentication and messaging providers; secure file-storage and document-check vendors; payment and banking-related service providers; fraud and cybersecurity vendors; mapping and geolocation services; analytics providers; customer-support systems; and AI suppliers when an enabled feature requires them. Contracts, access restrictions and required protections are applied according to the nature of the relationship.

17.4 Independent employers, recruiters and external partners. A receiving employer or applicant-tracking system may independently control personal information submitted to it. This is especially relevant where an application leaves Nurai Connect through an external link.

17.5 Professional advisers, insurers, regulators and authorities. Accountants, auditors, legal advisers, competent regulators, courts and law-enforcement bodies when relevant to lawful advice, rights, obligations, claims, investigations or compulsory disclosure.

17.6 Business transitions. A proposed or completed merger, financing, restructuring, acquisition or transfer of all or part of the Platform may involve a lawful and appropriately safeguarded transfer of relevant records, subject to applicable notice, consent and other requirements.

17.7 We do not disclose private identification or financial documents to ordinary users merely because they are connected through a job or task. We do not authorise users to scrape, bulk market, resell or misuse candidate and client data.

18. Public content and your choices

18.1 Certain profile sections, listings, ratings, service categories and content you choose to publish may be visible to members or the public depending on the actual feature and settings. Treat information you intentionally make public differently from confidential documents submitted for verification or support.

18.2 You should avoid uploading someone else's CV, identity document, private photographs, exact address or other personal information without lawful authority. Where an organisation account supplies information about employees or representatives, it must have an appropriate basis and provide any notice required by law.

18.3 Where supported, you may edit profile fields, update visibility and communication preferences, replace an outdated document, or request assistance to remove inappropriate information. Changes may not reverse a prior lawful disclosure to a separate employer or remove third-party copies immediately.

19. International processing and transfers

19.1 Nurai Connect is intended for international use. Information may be accessed, stored or processed across borders by authorised Nurai entities, platform infrastructure providers, verification providers, employers, transaction participants and other recipients described in this Policy. The countries involved depend on the user, service, supplier and actual deployment.

19.2 The laws and privacy protections of a receiving country may differ from those of your country. Where required, we apply appropriate legal mechanisms and safeguards, which may include recognised adequacy arrangements, contractual safeguards, access restrictions, security reviews or another lawful transfer mechanism. Specific country or feature notices may identify overseas recipient locations and additional rights where needed.

19.3 If EU, UK, Australian, New Zealand or another local law places particular conditions on cross-border transfers or disclosures, we assess and implement those conditions for relevant transfers. We do not represent that one global policy by itself authorises every transfer.

20. Information security

20.1 We use organisational and technical measures appropriate to the information and risk, such as role-based access, account-security controls, encryption in transit where supported, protected storage, appropriate authentication, monitoring, logging, backup practices, controlled document access and procedures for responding to suspicious activity.

20.2 No online service or transmission method is risk-free. Users should protect their credentials, enable available security features, promptly report suspected misuse, and avoid sending passwords, one-time codes, complete payment card details or unnecessary identity documents through ordinary messages.

20.3 In the event of a suspected personal-information incident, we assess and investigate it, contain and remedy issues where feasible, and notify regulators or affected people when required by applicable law. We may ask users to take proportionate protective action.

21. How long we retain information

21.1 We keep personal information only for as long as reasonably needed for the purpose for which it was obtained, including requested services, a user relationship, relevant safety, dispute, tax and financial records, fraud prevention, security, legal obligations and the establishment or defence of legal claims. Different categories have different retention needs.

21.2 Account and profile data are generally retained while an account remains active, with necessary additional time for closure, user requests, security, unresolved transactions or legal obligations. Optional profile content may be deleted or de-identified when no longer needed, subject to lawful exceptions.

21.3 Applications and recruitment information may remain available to an applicant and relevant employer while a recruitment process is open and for a subsequent period justified by legitimate records, complaints and legal duties. An employer that independently retains a copy follows its own retention rules.

21.4 Wallet, payment, accounting and withdrawal records may be kept after account closure to reconcile balances, support refunds and disputes, and comply with financial reporting and recordkeeping obligations. Removing the visible wallet interface does not necessarily mean the underlying legally required ledger is erased.

21.5 Verification records are held for periods justified by the specific checks, renewal or expiry needs, regulatory obligations, auditability and security. We seek to avoid retaining complete sensitive documents longer than necessary when a verified status or suitably restricted record will suffice.

21.6 Support, disputes, safety and security logs are retained according to the severity of the event, investigatory needs, ongoing risks, recordkeeping and legal limitation periods. Backups may be deleted in accordance with normal secure rotation or restoration processes rather than instantaneously.

21.7 We periodically review retention and may securely delete, anonymise or restrict records when they are no longer needed. Where law requires us to state specific periods for a particular processing activity, we will disclose them through the relevant feature or country notice when determined.

22. Your privacy rights

22.1 Depending on your location and the law that applies, you may have rights to request information about our processing; access personal information; correct inaccurate information; delete eligible information; restrict or object to certain processing; receive or transfer certain data in a portable format; withdraw consent where processing depends on consent; opt out of eligible marketing, sale, sharing or targeted advertising activities where relevant; and challenge certain significant automated decisions where law provides that right.

22.2 You may use available profile, visibility, communication and cookie settings for routine choices. For a formal request, contact us using the official contact details in Section 28. We may ask for reasonable identity verification before releasing sensitive account, wallet, employment or identity documents, and may seek sufficient detail to identify the request.

22.3 We respond within the period required by applicable law and explain a lawful refusal, partial response or extension when appropriate. Rights may be limited where compliance would prejudice another person's rights, legal duties, fraud prevention, contractual obligations or protected records. We will not discriminate or retaliate against you for exercising protected privacy rights.

22.4 You may ask an independent employer or third-party applicant-tracking provider to exercise rights over an external application or data that it independently controls. We cannot necessarily alter records it keeps under a separate legal basis.

23. Country and regional rights

23.1 European Economic Area and United Kingdom. Where EU GDPR or UK data-protection law applies, you may have rights of information, access, rectification, erasure, restriction, portability, objection, withdrawal of consent and safeguards around legally significant automated decisions. You may also complain to a competent data protection authority. We identify a relevant controller and any legally required representative or data protection officer contact where such appointment is required. International transfer safeguards apply where required.

23.2 Australia. Where the Australian Privacy Act and Australian Privacy Principles apply, relevant rights and obligations include transparent privacy practices, access and correction, restrictions on disclosure and direct marketing, security and cross-border disclosure duties, and the right to complain to us and, where appropriate, the Office of the Australian Information Commissioner.

23.3 United States. Privacy rights differ by state and by whether a specific state law applies to us and the relevant processing. Eligible individuals may have rights to know or access, correct, delete, obtain certain data, opt out of sales or certain targeted-advertising uses, limit qualifying sensitive-data uses, appeal a denied request or use a recognised opt-out signal where legally required. If relevant technologies would constitute a sale or sharing under an applicable law, the required disclosures and effective opt-out mechanisms must accompany them; we do not assume that describing those technologies here is a substitute for implementing a control.

23.4 Canada. Where federal or provincial private-sector privacy law applies, we respect requirements for meaningful notice, appropriate consent, reasonable collection and use, access, correction and complaint processes, subject to lawful exceptions.

23.5 New Zealand. Where applicable, we comply with relevant information privacy principles, including access, correction, collection transparency and conditions governing disclosures to recipients overseas.

23.6 Other jurisdictions. We respect applicable requirements in supported countries, including data subject rights, lawful grounds, local registration or representation obligations, required breach reporting, and restrictions on transfers under legislation such as Brazil's LGPD and relevant privacy laws in African and Asian markets. Where country rules require additional information or rights, we provide local notices or operational channels accordingly.

23.7 Nothing in this Policy reduces rights that you cannot lawfully waive. We do not suggest that each listed law automatically applies to every person everywhere or to every Nurai service merely because it is mentioned.

24. Complaints, requests and supervisory authorities

24.1 You may raise concerns about inaccurate data, unwanted disclosure, a compromised account, use of screening information, a verification decision, a wallet record, an employer receiving an application or any other privacy matter through the contact routes in Section 28. Please describe the relevant account, transaction or incident without sending unnecessary sensitive documents in an initial unprotected message.

24.2 We review enquiries in context, may request appropriate evidence, and work to correct errors, explain outcomes or take proportionate remedial steps. If another organisation independently controls the information, we may direct you to that organisation where appropriate and lawful.

24.3 Where a privacy regulator, supervisory authority or independent complaint mechanism has jurisdiction, you may complain to that body, regardless of whether you first contact us, subject to the applicable procedural rules. We do not require you to waive a statutory complaint right as a condition of using the Platform.

25. Children and younger users

25.1 The general Nurai Connect account service is intended for adults who can lawfully use the relevant platform features and enter into applicable agreements. We do not intentionally offer ordinary unrestricted marketplace accounts to children. If a legally compliant youth service is introduced, it will have suitable eligibility rules, notices and protections.

25.2 We do not intentionally collect children's personal information for unrestricted marketplace participation. If we learn that information was collected without a necessary legal basis, we will take appropriate steps, which may include restricting access or deleting information unless retention is legally necessary. Parents or authorised guardians may contact us about such information.

26. Information you must provide and consequences of withholding it

26.1 Some information is necessary to create or secure an account, send an application, arrange a task, verify eligibility for regulated work, issue an invoice, process a withdrawal or comply with law. If you do not provide required information, we may be unable to offer the relevant service or complete a transaction.

26.2 Other information, such as optional portfolio materials, profile photos, some preferences, marketing subscriptions or precise location permissions, may be voluntary. You can usually decline them, although the quality of matching or location-dependent features may be reduced.

26.3 We aim to explain why a document is requested and whether it is required by law, a particular role, a specific transaction or an optional feature. We will not require unrelated licences or screening from everyone merely because regulated occupations exist on the Platform.

27. Changes to this Policy

27.1 We may update this Policy to reflect legal changes, country rollout, new or retired functionality, security and supplier changes, or improved disclosures. The effective date at the beginning shows when the published version took effect.

27.2 If a change materially affects how personal information is used, we will provide additional notice and seek consent or another lawful basis where required before implementing the affected processing. Earlier versions or records of material changes may be retained for legitimate compliance purposes.

27.3 New use of sensitive information, significant profiling, new advertising technology or a materially different transfer arrangement may require feature-specific information or controls beyond a general update to this Policy.

28. Contact Nurai Connect about privacy

For privacy enquiries, requests to access, correct or delete personal information, complaints or questions about this Policy, contact Nurai Connect through the Contact Us facility on the official Platform at www.nuraiconnect.com. The Platform is operated principally by Nurai Group Pty Ltd (Australia), subject to any country-specific notice that identifies a local operating entity or other legally responsible controller.

Use a secure account support channel, where available, for identity verification, documents, detailed account or financial records. Do not send passwords, one-time codes or full payment card details through ordinary messages. Where a local law requires a particular representative, officer or contact method, that information will be made available to affected users in the corresponding local notice.

NURAI CONNECT | GLOBAL PRIVACY POLICY

© Nurai Group Pty Ltd · Nurai Connect Global Privacy Policy