Privacy Policy

1. Who we are

GigGoblin is provided by Traswen Pty Ltd (ABN 79 639 057 364), trading as GigGoblin where permitted (GigGoblin, we, us or our).

Our registered address is 17 Maroondah Highway, Lilydale VIC 3140, Australia. Our postal address is PO Box 887, Lilydale VIC 3140, Australia. Our privacy contact is contact@traswen.com.

This Privacy Policy explains how we collect, hold, use and disclose personal information when people visit our website, create or use GigGoblin accounts, communicate with us, receive our messages or appear in a Customer workspace.

Where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply to us, we comply with them. We also use the Australian Privacy Principles as a practical guide to responsible information handling where an exemption may apply.

2. Our role and Customer workspaces

We handle account, billing, security and support information for our own business purposes.

Customers also use GigGoblin to enter information about their staff, contractors, clients, suppliers and other contacts. For that Customer Data, the Customer generally decides what is entered, why it is used and which workspace users may access it. We process it to provide, secure and support the service and to follow authorised Customer instructions, subject to law.

If your information appears in a Customer workspace, contacting that Customer may be the fastest way to correct or remove it. You may also contact us and we will assist where reasonably possible.

3. Information we collect

Depending on how you interact with GigGoblin, we may collect:

• identity and contact information, such as your name, work email, phone number, company and role;
• account information, such as your user ID, authentication provider, profile details, workspace memberships and permissions;
• company and operational information, such as clients, suppliers, crew, jobs, locations, equipment, availability, hire activity, notes and uploaded branding or files;
• commercial and billing information, such as subscription selections, billing contacts, transaction status, invoice details, tax information and Stripe customer or subscription identifiers;
• support and communication information, such as messages, bug reports, feedback and records of assistance;
• technical and security information, such as IP address, browser or device information, session records, timestamps, request logs and security events;
• legal acceptance evidence, such as the document versions presented, acceptance time, IP address and authentication method; and
• website and product usage information about pages, features and actions used.

Stripe handles payment card details. GigGoblin does not store complete card numbers or card security codes.

Please do not enter sensitive information unless it is genuinely required for an authorised business workflow and the Customer has confirmed that GigGoblin is appropriate for that information.

4. How we collect information

We collect information:

• directly from you when you sign up, configure an account, pay, contact us or use the service;
• from a Customer or workspace administrator who invites you or enters information about you;
• automatically through the website, application, authentication systems, logs, cookies and similar technologies; and
• from service providers such as Google when you choose federated sign-in and Stripe when it processes billing activity.

If you do not provide required account, security or billing information, we may not be able to provide the relevant service.

5. Why we use information

We use personal information to:

• create, authenticate and administer accounts and company workspaces;
• provide jobs, equipment, availability, invoicing, reporting and other selected features;
• process trials, subscriptions, payments, tax records and billing support;
• send account confirmations, invitations, security alerts, service notices and support responses;
• provide support, investigate bugs and improve usability, reliability and performance;
• prevent fraud, abuse, unauthorised access and security incidents;
• maintain backups, business records and legal acceptance evidence;
• comply with legal, regulatory, tax and accounting obligations;
• establish, exercise or defend legal rights; and
• send marketing where permitted and consistent with your choices.

We may use aggregated or de-identified information for analytics, planning and service improvement where it is no longer reasonably capable of identifying an individual.

6. When we disclose information

We may disclose personal information:

• to authorised users and administrators of the relevant Customer workspace;
• to infrastructure, database, authentication, hosting, backup, email, payment, monitoring and support providers that help us operate GigGoblin;
• to professional advisers, insurers, auditors and contractors who need it for legitimate business functions and are subject to appropriate obligations;
• where a Customer enables a feature that shares information with another connected company or provider;
• to regulators, courts, law-enforcement bodies or other parties where required or authorised by law;
• where reasonably necessary to prevent serious threats, fraud, abuse or security harm; and
• in connection with a genuine financing, restructure, merger or sale, subject to appropriate confidentiality and lawful handling.

We do not sell personal information or provide it to data brokers.

Our core service providers currently include Supabase for application data and authentication, Stripe for payments and subscription records, Resend for transactional email, and our web-hosting and backup providers.

7. Overseas processing

Some service providers may store or process information outside Australia or allow support personnel in other countries to access it. Depending on the provider configuration, these locations may include Australia, the United States and other countries in which the provider or its subcontractors operate.

We take reasonable steps when selecting and configuring providers and review their security and privacy information. Exact processing locations can change as providers update their infrastructure. Contact us if you need current information about a material provider used for your workspace.

8. Workspace administrators and shared access

Workspace owners and administrators control user invitations, roles and access within their company. They may view account details, activity and Customer Data associated with that workspace.

Some GigGoblin features allow Customers to establish relationships or share selected operational information with another company. The interface should identify the access being granted. Customers are responsible for reviewing those settings and granting only appropriate access.

9. Direct marketing and service messages

We may send operational messages needed to provide the service, including authentication, invitations, billing, security, legal and material service notices.

We send electronic marketing only where we have consent or another lawful basis. Marketing messages will identify the sender and include a functional way to unsubscribe. Unsubscribing from marketing does not stop essential service messages.

10. Cookies and local storage

GigGoblin uses cookies and browser storage that are reasonably necessary for authentication, session security, tenant routing, preferences and application functionality.

We do not currently use third-party advertising cookies. If we introduce non-essential analytics or advertising technologies, we will update this Policy and provide any choices required by applicable law.

Blocking necessary cookies may prevent sign-in or other parts of the service from working.

11. Security

We use administrative, technical and organisational safeguards designed to protect information against loss, misuse, interference and unauthorised access, modification or disclosure.

Measures include access controls, tenant separation, row-level database security, encrypted network connections, restricted privileged credentials, logging and backup processes.

No internet service is completely secure. Customers and users must also protect their credentials, devices, administrator roles and exports and promptly report suspected unauthorised access.

12. Retention and deletion

We retain personal information for as long as reasonably necessary to provide and secure the service, maintain business and acceptance records, comply with legal, tax and accounting obligations, resolve disputes and enforce agreements.

Workspace information may remain available in read-only form after a trial or subscription ends to allow reactivation or export. It may also remain temporarily in protected backups until those backups rotate or are securely retired.

Retention periods vary by information type and legal requirement. We delete or de-identify information when it is no longer reasonably required, unless retention is required or authorised by law.

Legal acceptance records are retained as evidence of the agreement and policy versions presented to an account.

13. Access, correction and deletion requests

You may ask what personal information we hold about you, request access, ask us to correct inaccurate information or request deletion where applicable.

Send requests to contact@traswen.com and include enough information for us to identify the relevant account or workspace. We may need to verify your identity and authority before acting.

There may be lawful reasons why we cannot provide or delete particular information, including another person's privacy, security, legal privilege, record-keeping duties or the need to establish or defend legal claims. If so, we will explain where reasonably possible.

Account profile information may also be corrected through available GigGoblin settings or by a workspace administrator.

14. Privacy complaints

Send privacy questions or complaints to contact@traswen.com with details of the concern and the outcome you seek.

We will acknowledge and investigate a complaint within a reasonable time and aim to provide a substantive response within 30 days where practicable. If we need more time, we will explain why.

If the Privacy Act applies and you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner at oaic.gov.au.

15. Data breaches

We maintain processes for assessing and responding to suspected data breaches.

Where the Notifiable Data Breaches scheme or another applicable law requires notification, we will notify affected individuals and the relevant regulator. We may also notify Customers or users where doing so is reasonably necessary to reduce harm even if formal notification is not legally required.

16. Children

GigGoblin is a business service and is not intended for children. People creating accounts must be at least 18 years old.

17. Changes to this Policy

Each published version identifies its version number, release date, effective date and change summary.

We may publish minor or patch updates for clarifications, new features and corrections without interrupting normal use. We will require acknowledgement of a release marked as requiring acceptance before further authenticated use.

Previous effective versions may remain available from the public policy page for transparency and audit purposes.

18. Contact

Privacy contact: contact@traswen.com

Traswen Pty Ltd ABN 79 639 057 364 Registered address: 17 Maroondah Highway Lilydale VIC 3140 Postal address: PO Box 887 Lilydale VIC 3140 Australia