Privacy Policy
Version 1.1 · Last updated 18 October 2026
This policy covers information we handle through PeopleStack.
1. Who we are and where we stand
PeopleStack is operated by Kairos Recruitment Pty Ltd, ABN 91 669 675 003. You can reach us at hello@peoplestack.com.au.
Most Australian businesses with an annual turnover of $3 million or less are not bound by the Privacy Act 1988. On current turnover we sit in that group, so this policy is a commitment we are choosing to make rather than one the Act imposes on us. We will tell you if that changes, and we apply the Australian Privacy Principles as our working standard either way.
2. What we collect
| Information | Where it comes from |
|---|---|
| Name, work email, business name and role | You, when you apply and set up your account |
| Your answers to the vetting questions | You, when you apply |
| Billing name, billing address and subscription history | You and Stripe, at checkout |
| What you open, download and search on the platform | Automatically, as you use it |
| Resource and feature requests, and your votes on them | You, when you submit them |
| Posts, comments and messages in the member community | You, when you post them |
| Support and dispute correspondence | You, when you contact us |
We do not store your card number. Card details go directly to Stripe, which processes payments for us.
3. Information about your own people
Some tools let you enter details about your workers and candidates, such as a new starter's name or an intern's plan.
That information stays yours. We hold it to provide the tool and we do not use it for anything else. You are responsible for having a proper basis to enter it and for telling the people concerned how their information is handled in your business.
If you would rather not put real names into the platform, the tools work with initials or role titles.
4. Why we use it
We use your information to give you access, process your payment, review your application, run the community, respond to you, decide what to build next, and tell you about changes to your membership.
We send you membership and service emails because you hold a membership. We send marketing emails only if you have opted in, and every one has an unsubscribe link.
5. Who else sees it
We use these providers to run the platform. Each sees only what it needs.
| Provider | What it handles | Where |
|---|---|---|
| Supabase | The database, your account and platform content | Sydney, Australia |
| Lovable AI gateway | What you type into the AI tools on the platform, passed to the model provider that answers it (currently OpenAI and Google) | United States |
| Stripe | Payments, billing and subscription records | United States and elsewhere |
| Slack | The member community | United States |
| Our email provider | Membership and service emails | United States |
Using Stripe, Slack, our email provider and the AI gateway means some of your information is handled overseas. By using PeopleStack you agree to that disclosure. We choose established providers and rely on their own security commitments.
We do not sell your information. We do not give your contact details to our partners. If a partner offer requires you to identify yourself as a member, you do that directly with them.
6. The AI tools on the platform
Some tools write something for you from what you tell them. The intern plan writer and the employer brand check both work this way. What you type is sent to our AI gateway, passed to a model provider, used to produce your result, and returned to you.
These tools make suggestions only. They do not make decisions about you, your membership or your price, and nothing they produce is advice.
The Claude skills in our library work differently. You download them and run them inside your own Claude account, so whatever you put into them is handled under your own agreement with Anthropic and never reaches us.
7. How long we keep it
We keep your account and platform information while you are a member and for 12 months after your membership ends, so you can rejoin without starting again.
We keep billing and tax records for seven years, because tax law requires it. We keep community posts unless you ask us to remove them.
After those periods we delete or de-identify what we hold.
8. Security
Access to the platform requires a login. The database enforces row-level security so members can only reach their own records and the resources their membership covers. Payment card details never reach our systems.
No system is perfectly secure. If a breach occurs that is likely to cause you serious harm, we will tell you and tell you what to do about it, whether or not the law requires us to.
9. Getting at your information
Email hello@peoplestack.com.au to ask for a copy of what we hold about you, to correct it, or to ask us to delete it. We will respond within 30 days.
We may need to keep some information to meet our tax and record-keeping obligations, and we will tell you if that applies.
10. Complaints
Email hello@peoplestack.com.au and tell us what went wrong. We will respond within 30 days.
If you are not satisfied with our response, you may be able to take the matter to the Office of the Australian Information Commissioner at oaic.gov.au. Whether the OAIC can act depends on whether we are covered by the Privacy Act at the time, as set out in clause 1.
11. Changes
If we change this policy we will post the new version with a new date and, where the change affects your rights, tell you directly.