Privacy Policy

1. Who we are

MysteryShopper.com.au Pty Limited (we, us) operates the MysteryShopper platform. This policy explains what personal information we collect from shoppers, business users and visitors to this site, why we collect it, and who we share it with. It applies alongside the Shopper Terms and the Business Terms.

2. What we collect

From shoppers:

• Your name, email address, telephone number and the account you sign in with (Google, Microsoft, Apple or email).
• The locations you save, and your location when you look for jobs, check in, take a job photo and submit a job.
• The answers and photos you submit (photos are kept as taken, including the time and place your camera records), and your conversation with our assistant during a job.
• Your identity check: the result, the date of birth and gender on your document, the face-match scores and a one-way fingerprint of the document. The document itself is held by our verification provider, not us.
• For payouts: the bank name, last four digits and currency of the account you gave Stripe. We never hold your account number.

From business users:

• Your name and email address.
• Your business's name, locations and members.
• The questionnaires you build, the jobs you post and the reports you receive.

From everyone: technical records such as your IP address, the requests you make and errors that occur, kept to run and secure the service. We use a cookie to keep you signed in. Site analytics are collected without cookies and without identifying you.

3. Why we collect it

To operate the platform:

• to match jobs to shoppers near them;
• to verify shoppers' identity;
• to pay shoppers;
• to deliver reports to the business that posted a job;
• to answer support requests;
• to detect fraud and misuse, and to keep the service secure;
• to meet our legal obligations, including tax and record-keeping.

With your consent we may also send you marketing messages, and you may withdraw that consent at any time.

4. Who we share it with

With the business that posted a job: the report of that job, drawn from the answers and photographs submitted for it. A business never receives a shopper's name, contact details or location.

With providers who process information for us:

• Stripe, for shopper payouts;
• our identity verification provider, for shopper identity checks;
• hosting, storage and email delivery providers;
• a maps provider that turns addresses and coordinates into places, including your phone's position when you search for a place to save;
• an AI provider that runs the assistant conversation and checks and scores what shoppers submit, including photographs and the location where the shopper checked in;
• an error monitoring provider;
• a site analytics provider.

Some of these providers hold information outside Australia, including in the United States. We require them to protect it.

We do not sell personal information. We disclose it otherwise only where the law requires or permits, for example in response to a lawful request.

5. Storage and security

Information is encrypted in transit and at rest, and access is limited to the people and systems that need it. We keep it while your account is active and afterwards for as long as the law or a genuine business need requires, then delete or de-identify it. To delete your account, see Delete your account.

Some records stay after an account is deleted, without the person's name or contact details:

• Visit work (answers, photos, reports): while the business that posted the job keeps its account.
• Payout and tax records, including the Stripe account: 5 years after the last payout.
• Identity check records: the ID document's fingerprint and the verification provider's face record.
• Account activity logs: 5 years.

6. Access and correction

You may ask for a copy of the personal information we hold about you, or ask us to correct it, by writing to support@mysteryshopper.com.au. We respond within a reasonable time and may need to confirm your identity first.

7. Complaints

If you believe we have mishandled your information, write to us at the address above and we will investigate and reply. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner.

8. Changes

When this policy changes we publish a new version with a new date on this page.

9. Contact

MysteryShopper.com.au Pty Limited, support@mysteryshopper.com.au.