Privacy Policy

[Four Swags Pty Ltd, ABN ___] follows the Australian Privacy Principles. This policy explains how we handle personal information.

What we collect

• Account and profile: name, email, suburb and state, family, bio, camping likes and photo. Your date of birth is kept private and used only to confirm you're 18 or over.
• Identity check: run by Stripe. We receive only whether you passed. We never see or keep your ID images.
• Payments: handled by Stripe. We don't see or store your full card number. Owners' bank details go to Stripe, not to us.
• Bookings and messages: what you hire or list, dates, prices, messages, handover photos, reviews and claims.
• Listing photos: when you use "snap a photo", the photo is sent to our AI provider to identify the item. Photos are shrunk on your device and their hidden location data is removed before upload.
• Camp photos: photos you choose to share, with the stamp details you enter.
• Location: only the suburbs and places you type in. We don't track your device's location.
• Technical: sign-in cookies that keep you logged in. We don't use advertising trackers. Partner deals are matched to your camping likes only, and clicks are counted without recording who clicked.

Why we use it

• To run your account, bookings, payments, payouts, bonds and claims.
• To keep the community safe: ID checks, first-listing checks, fraud prevention and dispute resolution.
• To show gear and deals that suit your camping likes (you can switch this off in your profile).
• To send emails about your bookings and account.
• To meet legal duties, including reporting owners' hire income to the ATO under the Sharing Economy Reporting Regime.

Who we share it with

• The other person in your booking: your first name, surname initial, suburb, profile, reviews and messages. The exact pick-up address is shared only once a booking is confirmed.
• Service providers who help run Four Swags: Stripe (payments and ID checks), Supabase (database and storage, Sydney region), Vercel (hosting), Anthropic (AI item recognition and price lookup), Amazon Web Services (emails, sent from Sydney), Mobile Message (text messages, Australia), and [our damage protection insurer].
• The ATO, police or courts when the law requires.

Some providers store or process data outside Australia, including in the United States. [Lawyer to confirm the overseas disclosure wording and list of countries.]

Keeping and deleting it

We keep booking and payment records for [7] years for tax law. Other information is deleted or anonymised [12] months after you close your account. Camp photos can be taken down at any time on request.

Your choices

You can see and update your profile at any time, ask for a copy of your information, ask us to correct it, or close your account. Email [privacy@fourswags.com.au]. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).