Privacy Policy

Last updated: May 2026

Notice: This is a draft template. Xquip strongly recommends having this policy reviewed by an Australian lawyer before going live. It is provided as a starting point and is not legal advice.

1. Who we are

Xquip ("we", "us", "our") operates an online marketplace for the rental, sale, and hire of film and video production equipment and crew services in Australia. This policy explains how we handle your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. Information we collect

Account information: username, email address, password (stored hashed), and any skills or profile links you provide.
Contact & verification: phone number where you enable SMS two-factor authentication.
Listings & transactions: equipment details, pricing, rental dates, messages, and order history.
Payment information: processed by Stripe. We do not store full card numbers on our servers.
Technical data: IP address, browser type, and usage logs for security and abuse prevention.

3. How we use your information

To create and manage your account and listings.
To process payments and payouts via Stripe.
To enable messaging between users for bookings.
To send transactional emails (verification, receipts, notifications).
To protect the platform against fraud and abuse.

4. Third parties we share data with

We share the minimum necessary personal information with service providers who help us operate Xquip:

Stripe — payment processing and payouts.
Resend — transactional email delivery.
Twilio — SMS for two-factor authentication.
Cloudinary — image hosting for listing photos.
Railway — application and database hosting.

Each operates under its own privacy terms. We do not sell your personal information.

5. Data storage and security

Your data is stored on servers operated by our hosting provider. We take reasonable steps to protect it, including password hashing, encrypted connections (HTTPS), and rate limiting on authentication. No method of transmission or storage is completely secure.

6. Access and correction

You can view and update most of your information from your profile. To request access to, correction of, or deletion of your personal information, email support@xquip.com.au.

7. Data retention

We retain account and transaction records for as long as your account is active and as required for legal, tax, and dispute-resolution purposes.

8. Cookies

We use a session cookie to keep you logged in. We do not use third-party advertising cookies.

9. Complaints

If you believe we have mishandled your personal information, contact us at support@xquip.com.au. If unresolved, you may contact the Office of the Australian Information Commissioner (OAIC).

10. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the latest version.

11. Contact

Questions about privacy? Email support@xquip.com.au.