JobDrop › Privacy Policy

Privacy Policy

Last updated 15 October 2026

JobDrop is a local marketplace where people post jobs, local businesses and taskers list services and openings, and the two connect directly. This policy explains what personal information we collect, why, and the choices you have. We aim to handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1. What we collect

Account details: your email address, and your name and profile photo if you sign in with Google.
Jobs, offers and bookings: what you post (job title, description, photos, suburb or approximate location, budget, timing), offers and questions you send, and the name and contact details (email or phone) you give when you book or post.
Business profiles: business name, ABN, logo and photos, services, prices, opening hours, address or shopping centre, website, phone, email, staff members you invite, and the availability, offers and walk-in times you publish.
Family care carers: if you list yourself as a babysitter, nanny or au pair, the roles and children's age groups you work with, whether you hold first aid or can drive children, and your blue card number and expiry date.
Shift applications: when you apply for a shift, your name, phone or email, availability and message, and a link to your JobDrop profile if you have one. Businesses that post shifts give us the ad details and see the applications for their own ads.
Claims: information you provide to show you own or manage a business listing.
Reports and messages to us: what you tell us when you report a listing or contact us.
Technical and security information: IP address, browser and device type, sign-in times, and a device label used to warn you about new sign-ins. Our hosting and database providers keep short-term server logs.

We do not ask for or store payment card details. Payments are arranged directly between customers and providers.

2. How we collect it

Mostly directly from you when you use JobDrop. Some business listing information comes from public sources (see section 7). If a business invites you as staff, they give us your email address so we can send the invitation.

3. How we use it

To run JobDrop: show jobs, offers, listings and openings; connect customers with providers; manage bookings and claims.
To sign you in and keep your account secure, including sign-in codes and new-device alerts.
To send service emails you would expect, such as booking confirmations, offer and booking notifications, and staff invitations.
To prevent scams, spam and misuse, and to act on reports.
To understand how JobDrop is used and improve it.
To meet legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

4. What is shown publicly

Jobs, offers, business profiles and openings are public so that people can find them. Business profiles show the details the business chooses to publish (for example name, phone, website, address, hours and prices). For jobs we show a suburb or approximate area, not your exact address. Contact details you enter when booking are shared only with the business you are booking with, and a business's booking details are shared with the customer who booked. Please don't put private information in public text such as job descriptions. When you apply for a shift, only that business sees your contact details and message. For family care carers we publicly show your roles, age groups, first aid and driving details, your blue card expiry date and only the last 4 characters of your card number. We never show your full blue card number publicly. In family care jobs, please don't include children's names, photos, school or address.

A small number of JobDrop administrators can see listings, reports and claims, including contact details, when they need to check a report, verify a business claim or remove content that breaks our Terms. Every administrator action is recorded.

We use trusted service providers to run JobDrop. They handle data only to provide their service to us:

Supabase: database, sign-in and file storage.
Cloudflare: website hosting, security and email forwarding.
Resend: sending emails such as sign-in codes and notifications.
Google: only if you choose "Continue with Google", and for web fonts.
Photon / OpenStreetMap: when you search for a place, the text you type is sent to look up the location. Map tiles are loaded from OpenStreetMap.
Australian Business Register (ABN Lookup): to look up publicly listed business details from an ABN.
Stripe: only if you buy a boost. Stripe processes the payment on its own page. We receive the amount, the payment reference and the email address you give Stripe, so we can switch the boost on and help with any problem. We never see or store your card details.

We may also disclose information if the law requires it, to protect someone's safety, or to investigate fraud or misuse.

Phone notifications. If you turn on notifications, your browser gives us a notification address and encryption keys for that device. We store them with your email address so we can send your alerts, bookings and replies to that device, using the push service run by your browser or phone maker (for example Google or Apple). The message text passes through that service. Turn notifications off at any time in your account or your device settings, and we delete the address.

Partner offers. When you click a partner offer or hotel search link (for example a Viator tour, a hotel booking site, a car hire, transfer or eSIM site, a business insurance comparison or an energy comparison site), we count the click for that offer, without recording who you are, and you go to the partner's website. What you do there, including any booking, is covered by the partner's own privacy policy.

6. Overseas storage

Some of our providers store or process data outside Australia, including in the United States and other countries where they operate. We choose reputable providers with strong security practices.

7. Business listings from public sources

To help people find local businesses, JobDrop shows basic listings compiled from public sources: Foursquare Open Source Places (Apache 2.0) and the public ABN Lookup service. These listings contain business information such as name, category, address, and public phone or website. They are marked as unclaimed until the owner claims them. We do not send marketing emails to these businesses.

If you own a listed business you can claim it to manage it, or ask us to correct or remove it by emailing [email protected]. We act on removal requests promptly.

8. Emails we send

Most emails we send are service messages linked to something you did, such as a sign-in code, a booking, an offer or a staff invitation. If we ever send marketing or newsletters, we will only do so with your consent, and every message will have a working unsubscribe link, as the Spam Act 2003 requires.

9. Cookies and device storage

JobDrop does not use advertising or tracking cookies. We use your browser's local storage to keep you signed in, remember your preferences (such as light or dark theme), keep drafts, and remember things like which items you have already reported. If you clear your browser data, these are removed. Our hosting provider may set a strictly necessary security cookie.

10. Security and retention

Data is encrypted in transit, and access to our database is restricted with row-level security. Sign-in uses one-time codes or links, so we never store a password for you. No system is perfectly secure, so please keep your email account secure and tell us straight away if you think your JobDrop account has been misused. You can sign out of all devices from your account page.

We keep information while your account or listing is active and for as long as reasonably needed for the purposes above, including resolving disputes and meeting legal obligations. Old jobs and openings expire from public view automatically.

Adult age checks (not live)

JobDrop does not currently run an adult age-check, collect selfie/video or identity documents for adult listings, or accept adult-provider applications. Before any age-assurance feature is enabled, we will assess the privacy impacts and update this policy to name the provider and methods, explain the purpose and retention, and describe alternatives and a way to challenge a result. Our proposed design is for a specialist provider to process any selfie, video or ID directly and return only the minimum result needed to JobDrop. Do not email or upload identity documents to JobDrop for an age check.

11. Access, correction and deletion

You can edit most of your information yourself in JobDrop. You can also ask us for a copy of the personal information we hold about you, or ask us to correct it or delete your account, by emailing [email protected]. We will respond within 30 days. If we can't do what you ask (for example because the law requires us to keep something), we will explain why.

12. Children

JobDrop is for people aged 18 and over. We do not knowingly collect personal information from children. Parents posting family care jobs should describe children only in general terms (for example ages), and we may remove posts that identify a child. If you think a child has given us their information, contact us and we will delete it.

13. Complaints and contact

For privacy questions or complaints, email [email protected]. We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy from time to time. We will post the new version here with a new "last updated" date, and tell signed-in users about any significant changes.

14. Optional business connections

When enabled, owners can authorise Square or ServiceM8. JobDrop stores encrypted account tokens, connection status and a limited summary on its backend. Square provides booking settings and a booking link. ServiceM8 job records are read to calculate aggregate counts; customer records are not imported. Disconnecting removes stored tokens and summaries. ServiceM8 access can also be revoked in provider settings.

ABN checks store the register entity name, status and lookup date. Optional Google Maps searches send search text to Google. Live results are not saved in JobDrop's directory. See the Google Privacy Policy.