Privacy Policy

1. About This Policy

CoHub Pty Ltd (ACN 701 652 557, ABN 88 701 652 557) (“CoHub”, “we”, “us”, “our”) respects your privacy. This Privacy Policy explains what personal information we collect through the CoHub website, mobile application and related services (the “Platform”) — including its space marketplace and CoHub Gigs, its task marketplace — how we collect, hold, use and disclose it, and how you can access it, correct it, or make a complaint. It applies to Hosts, Members, Posters, Workers, and anyone else who visits or uses the Platform.

This Policy should be read together with our Platform Terms of Service and, for each Booking, the Host Licence Agreement. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Compliance position. CoHub may not be required to comply with every part of the Privacy Act while it remains below the small-business threshold, but it will design and operate this Policy as if the Australian Privacy Principles apply. This includes clear notice at collection, collection only where reasonably necessary for Platform functions, fair use and disclosure, reasonable security safeguards, overseas-disclosure controls, access and correction rights, and complaint handling.

Notice at collection. When you provide personal information to CoHub — including when creating an account, making a Booking, posting or applying for a Task, joining an Event, Hub, Community or Collaboration, or contacting us — you are providing that information to CoHub for the purposes described in this Policy. This notice is provided at or before the point of collection, in accordance with the Australian Privacy Principles.

Australian Consumer Law. Nothing in this Privacy Policy limits any rights you may have under the Australian Consumer Law, including rights relating to services provided with due care and skill, and guarantees that cannot be excluded.

2. The Personal Information We Collect

• Identity and contact information — your name, email, phone number, date of birth, and residential or business address, plus, for Hosts, Workers, and for identity verification, government ID details collected via our payments provider.
• Professional Profile information — your headline, industry, role, company, skills, and any bio or photo you choose to add.
• Booking and transaction information — the Listings you create or book, Booking dates and history, prices paid or received, and communications about a Booking.
• Task and Gig information — Tasks you post or apply for, Application messages and proposed prices, hiring decisions, Task completion status, and communications about a Task.
• Payment information — collected and held by our payments provider (currently Stripe), not directly by CoHub; we receive limited information such as payment confirmation and payout status, for both Bookings and Tasks.
• Location information — the suburb or area of a Space you list or book, or a Task you post or apply for, and, for the “Who’s Here” feature, which Space and approximate time you are booked into, used to show relevant nearby Users.
• Content you post — messages to other Users, reviews, Connection requests, and any other content you submit to the Platform.
• Sensitive information — in limited circumstances, and only with your consent, CoHub may collect sensitive information such as accessibility requirements, dietary information, incident details, or information relevant to safety or emergency management for Events, Hubs, Communities or Collaborations. This information is used only for the specific activity for which it was provided.
• Technical and usage information — device, browser, and IP address information, and how you use the Platform, collected automatically including through cookies and analytics tools.

3. How We Collect Personal Information

• Directly from you — when you sign up, build a Professional Profile, create a Listing, make a Booking, post or apply for a Task, or message another User.
• Automatically — through cookies, analytics tools, and log data generated as you use the Platform (see Section 11).
• From third parties — from our payments provider, which shares identity-verification and payment/payout results with us; and, if we introduce social or professional network sign-in in future, from that provider.

4. Why We Collect, Hold, Use and Disclose Your Information

• To operate the Platform — creating and managing accounts, Listings, Bookings, payments, and payouts.
• To operate CoHub Gigs — posting and browsing Tasks, submitting and reviewing Applications, hiring a Worker, and processing Task payments and payouts.
• To provide the networking features — Professional Profiles, Connections, “Who’s Here”, reviews, and messaging.
• For trust and safety — verifying identity, investigating suspected breaches of our Terms, and preventing fraud.
• To support safe Events, Hubs, Communities and Collaborations — including attendee communications, access lists, safety notices, incident reports, moderation, dispute handling, insurance checks, and compliance with venue, council or legal requirements.
• To communicate with you — Booking and Task confirmations, customer support, and service updates.
• To improve the Platform — analytics and product development.
• Automated decision-making — we use automated systems for fraud detection, platform integrity, and ranking or visibility of Listings, Tasks or content. These systems assist our operations but do not make binding decisions about your rights or access to the Platform; human review is available where reasonably necessary.
• To meet our legal and regulatory obligations.
• For direct marketing, where permitted by law and subject to your right to opt out (see Section 10).

5. The Professional Network Features — What’s Visible, and to Whom

CoHub’s networking features are designed to share only the information needed to make them useful, and only with other registered Users — never with the public internet or search engines.

• Professional Profile — your headline, industry, role, company, skills, bio, and Booking- and Task-based reviews are visible to other registered Users of the Platform.
• Connections — when you send or accept a Connection, both Users can see it on each other’s profile. Either User can remove a Connection at any time.
• “Who’s Here” — not yet available on the Platform. Once live, it will show limited profile information (such as name, headline, and industry) to other Users booked into or near the same Space around a similar time, with a visibility/opt-out control described here before launch.
• Reviews — visible on the relevant Listing or Task, and on the reviewer’s and reviewee’s Professional Profiles.
• Messages — visible only to the sender and recipient. CoHub may access message content where reasonably necessary to investigate a breach of our Terms, resolve a dispute, or comply with the law.
• Events, Hubs, Communities and Collaborations — where you RSVP, register, attend, host, facilitate or participate, relevant limited information such as your name, profile, attendance status, role, dietary/accessibility information you provide, emergency or incident information, and communications may be visible to or shared with the relevant Host, organiser, facilitator, venue, supplier, insurer, professional adviser or authority where reasonably necessary for the activity, safety, dispute resolution, insurance or legal compliance.

5A. CoHub Gigs — What’s Visible, and to Whom

• Task listings — a Task’s title, description, industry, location, and budget are visible to other registered Users once the Task is approved and live in the CoHub Gigs feed. The Poster’s name and Professional Profile are visible alongside their Task, in the same way a Host’s profile is visible alongside their Listing.
• Applications — an Application’s message and proposed price are visible only to the Poster of that Task and to the Worker who submitted it, not to other Workers or the public.
• Hiring and completion — once a Poster hires a Worker, each can see the other’s name and Professional Profile. Payment and completion status for a Task is visible to the Poster and the hired Worker, and to CoHub and our payments provider as needed to process it.
• Declined and unsuccessful Applications — a Worker whose Application is declined is notified that it was unsuccessful; the Poster’s reasoning is not shared with the Worker unless the Poster chooses to provide it directly, for example through Platform messaging.

6. Who We Share Your Information With

• Our payments provider (currently Stripe), for identity verification, payments, and payouts — for both Bookings and Tasks.
• IT, hosting, and analytics providers who help us run the Platform, under contracts that limit their use of your information to providing that service.
• Other Users, in the limited, purpose-built ways described in Sections 5 and 5A.
• Professional advisers, regulators, courts, or law enforcement, where required or authorised by law.
• A buyer or its advisers, if CoHub is involved in a merger, acquisition, or sale of assets, subject to confidentiality protections.

We do not sell your personal information to third parties for their own marketing purposes.

6A. CoHub, Hosts, Members, Posters and Workers — Platform Role and Minimum Responsibilities

CoHub operates a marketplace platform that helps Hosts and Members connect and arrange Bookings, helps Posters and Workers connect and arrange Tasks through CoHub Gigs, and helps facilitate Events, Hubs, Communities and Collaborations. Unless expressly stated in the relevant terms or event-specific rules, CoHub is only a facilitator of the Platform and is not the owner, occupier, employer, agent, insurer, event organiser, venue manager, security provider, first-aid provider, recruiter, or labour-hire provider, and is not the provider of a Host’s Space, a Worker’s labour, or any Event, Hub, Community or Collaboration. CoHub does not control the day-to-day condition, safety, access, supervision, suitability, professional advice, attendee behaviour, staffing, equipment, alcohol service, food service, emergency management or legal compliance of a Host’s Space or Host-led activity, and does not control the standard, method, supervision, or legal compliance of work a Worker performs under a Task. Hosts remain responsible for the accuracy of Listings and activity descriptions, their lawful right to offer the Space or activity, workplace-health-and-safety duties, permits, licences, venue rules, capacity limits, building rules, insurance, tax, cleanliness, security, accessibility representations, safe-space obligations and compliance with all laws that apply to their Space or activity. Members remain responsible for using Spaces and activities lawfully, safely and respectfully, complying with Host and CoHub rules, not damaging property, not misusing personal information, and ensuring their intended use is suitable for the Space, Event, Hub, Community or Collaboration they join. Posters remain responsible for the accuracy of their Task description and budget, for having a lawful basis to engage a Worker as an independent contractor rather than as an employee, and for providing a reasonably safe environment where a Task is performed at the Poster’s premises. Workers remain responsible for the accuracy of their Application, for holding any qualification, licence, insurance or permit their Task requires, for their own tax and superannuation position as an independent contractor, and for completing a Task lawfully, safely and to the standard agreed with the Poster.

Personal information shared between Users must only be used for the Booking, Task, networking or dispute-resolution purpose for which it was disclosed. Hosts, Members, Posters and Workers must not scrape, export, sell, misuse, harass, spam, profile, discriminate against, or contact another User outside the Platform except where reasonably necessary for an agreed Booking or Task, or lawful dispute resolution. CoHub may suspend, restrict or terminate accounts where it reasonably believes these obligations are breached.

Reliance on user-generated content. CoHub does not verify or guarantee the accuracy, completeness or legality of Listings, Tasks, reviews, profiles, representations or other user-generated content on the Platform. Users must make their own assessment before relying on information provided by another User (see also “Verification, representations and reliance” in Section 6B).

Host, Poster and Worker representations. Hosts, Posters and Workers are solely responsible for the accuracy of their own representations. CoHub is not responsible for any misrepresentation, omission, inaccuracy or failure by a Host, Poster or Worker to meet their obligations to another User.

Independent contractor status (CoHub Gigs). Workers engaged through CoHub Gigs are independent contractors, not employees, agents or representatives of CoHub. Workers are responsible for their own tax, superannuation and insurance obligations.

6B. Events, Hubs, Communities and Collaborations

Facilitated activities. CoHub may promote, introduce, list, recommend, facilitate, or help coordinate Events, Hubs, Communities and Collaborations through the Platform. Unless CoHub expressly states in writing that it is the organiser, co-host or provider of a specific activity, CoHub’s role is limited to facilitating access, communication, booking, payment or discovery. The Host, organiser or activity owner remains responsible for the activity itself, including planning, permits, venue suitability, capacity, supervision, safety controls, attendee communications, emergency procedures, accessibility, staff and contractor management, and compliance with applicable laws.

Host-led or third-party activities. For any Host-led or third-party Event, Hub, Community or Collaboration, the Host or organiser must hold and maintain all insurance reasonably required for the activity, including public liability insurance and, where relevant, event liability, products liability, workers compensation, volunteer cover, professional indemnity, cyber/privacy incident cover, equipment cover, venue damage cover, cancellation cover, and any cover required by the venue, council, landlord or law. CoHub may request evidence of insurance before listing, promoting or allowing an activity, but checking a certificate does not make CoHub the insurer, organiser or guarantor of cover.

CoHub-led or co-branded activities. If CoHub expressly organises, hosts, sponsors, curates, charges for, controls, staffs, or materially co-brands an Event, Hub, Community or Collaboration, CoHub must confirm its own risk assessment, event-specific terms, public liability and other relevant insurance, venue permissions, emergency contacts, incident-reporting process, privacy collection notice, photography/recording notice, accessibility arrangements, code of conduct, and allocation of responsibility with any venue owner, Host, supplier, speaker, facilitator, contractor or community partner before the activity is promoted or delivered.

Safe-space and conduct standards. Every Event, Hub, Community and Collaboration must comply with CoHub’s code of conduct and any event-specific rules. The responsible Host, organiser or CoHub representative must take reasonable steps to provide a safe, respectful, non-discriminatory and accessible environment, including appropriate moderation, harassment reporting, incident escalation, exclusion or removal of unsafe participants, protection of personal information, and clear boundaries around professional advice, mentoring, introductions and commercial opportunities. Members must follow all lawful directions, treat others respectfully, avoid harassment or discrimination, and immediately report safety, conduct or privacy concerns.

Liability and incident allocation. Responsibility for an incident will depend on who organised, controlled, caused or could reasonably have prevented the relevant risk. The Host or organiser is generally responsible for incidents arising from the venue, physical space, crowd control, capacity, access, equipment, food, alcohol, contractors, activity content, supervision or attendee management for Host-led activities. Members are responsible for their own conduct, property, guests, invitees and compliance with rules. For CoHub Gigs, the Poster is generally responsible for incidents arising from the premises where a Task is performed (where performed at the Poster’s premises) and for the lawfulness of the engagement; the Worker is responsible for their own conduct, equipment, and the standard and legality of the work they perform. CoHub is responsible for its own Platform operations, direct privacy handling, and any activity it expressly organises or controls. These allocations are reflected consistently in the Platform Terms, Host Licence Agreement, event terms, waivers where appropriate, insurance requirements, refund rules and dispute process.

Guests and non-registered attendees. Hosts, organisers and Members must not bring or invite guests, contractors, speakers, couriers, assistants or non-registered attendees unless the Listing or Event terms expressly allow it. The person who invites or admits a guest is responsible for that guest’s conduct, property damage, compliance with House Rules, privacy obligations and safety requirements. Where guests have not accepted CoHub’s Platform Terms, the Host or organiser should require a separate attendance waiver, code-of-conduct acknowledgement or sign-in record before access is granted.

Prohibited activities and spaces. CoHub expressly prohibits Listings, Bookings, Tasks, Events, Hubs, Communities and Collaborations that involve unlawful activity, unsafe premises, misleading claims, discrimination, harassment, adult or age-inappropriate services, high-risk physical activities, regulated health/financial/legal advice without proper qualifications, weapons, hazardous materials, unlawful alcohol or food service, gambling, illegal drugs, unauthorised childcare, disguised employment arrangements, or any activity requiring permits, licences or insurance that have not been obtained. CoHub may remove Listings or Tasks, cancel activities, suspend accounts or notify authorities where reasonably necessary.

User content, reviews and moderation. Users remain responsible for information, reviews, photos, messages, listings, task descriptions, event descriptions and community posts they provide. Content must be accurate, lawful, respectful, non-misleading, non-defamatory, non-infringing and not privacy-invasive. CoHub reserves the right to review, hide, remove, label, restrict, reduce visibility of, or preserve content where needed for safety, legal compliance, dispute handling, moderation, fraud prevention or platform integrity. CoHub provides a reporting pathway, escalation process and appeal or review mechanism where content or account action materially affects a User.

Fees, cancellations, refunds and chargebacks. The Platform Terms, Host Licence, CoHub Gigs terms and event terms state who sets fees, who receives payment, when CoHub’s commission is earned, when payouts are released or withheld, how GST/tax invoices are handled, and what happens if a Host cancels, a Member cancels, a Poster cancels a Task, a hired Worker cannot complete a Task, a venue becomes unavailable, a safety issue arises, minimum attendance is not met, a speaker or facilitator withdraws, or a payment is disputed or charged back. Unless a Listing, Task, or event-specific term states otherwise and subject to any non-excludable Australian Consumer Law rights: Members may cancel free of charge, with a full refund, if they give at least 48 hours’ notice before the scheduled Booking, Event, Hub, Community session or Collaboration; once less than 48 hours’ notice remains, the Booking, Event, Hub, Community session or Collaboration can no longer be cancelled and the full applicable fee is charged, including for no-shows. A Task works differently: because payment is only authorised, not captured, until the Poster confirms completion, a Poster may cancel a Task at any time before completion without being charged, and the Worker is not paid for a cancelled Task under the current policy — see the Platform Terms of Service Section 6A. CoHub may withhold, release or reverse payments as reasonably needed to apply these policies, manage disputes, prevent fraud, comply with law, or protect Hosts, Members, Posters, Workers and CoHub. Refund and cancellation wording preserves any non-excludable Australian Consumer Law rights and avoids unfair contract terms.

Verification, representations and reliance. CoHub may verify identity, payment status, insurance certificates, ABN/ACN details, Listing information or Task/Application information, but unless expressly stated, verification is a risk-control step only and is not an endorsement, accreditation, guarantee, licence check, professional reference, safety certification or insurance confirmation. Hosts, Posters and Workers must keep all representations accurate and current. Members and Posters must make their own assessment before relying on a Host, Member, Worker, speaker, facilitator, community, collaboration opportunity, professional profile, review or recommendation.

Intellectual property, brands and recordings. Users grant CoHub a limited licence to host, display, promote, moderate and archive content they submit for Platform purposes. Users must not use CoHub branding, Host branding, Member logos, speaker names, event photos, recordings, testimonials or community names in a way that suggests endorsement, partnership or sponsorship without written permission. Event photography, filming, recording, livestreaming and use of attendee likeness must be disclosed in advance and managed through signage, registration notices or opt-out arrangements where appropriate.

Operational escalation and legal privilege. CoHub keeps an internal incident register for safety issues, injuries, harassment, discrimination, property damage, privacy incidents, fraud, payment disputes and regulator or police contact. Serious incidents are escalated to management, insurers and legal advisers promptly. Internal risk assessments and legal advice are handled so that privilege and confidentiality are preserved where available.

7. Overseas Disclosure

Some of our service providers store or process personal information outside Australia. Based on our current providers, this includes:

• The Netherlands — the Platform itself runs on Railway’s Amsterdam (EU West) infrastructure.
• The United States — our payments provider (Stripe) and transactional email provider (Resend) both rely on US-based infrastructure and sub-processors (including AWS) for parts of their processing, as does our database backup storage (a Railway Bucket in the US).
• Ireland — Stripe’s data controller for processing outside the Americas is based in Ireland.

This reflects our providers’ publicly stated infrastructure as at September 2026; Stripe in particular maintains a broader, changing list of sub-processors across other countries as part of its global payments infrastructure, which CoHub reviews periodically to keep this section up to date.

Before disclosing personal information overseas, CoHub assesses every overseas service provider and sub-processor for privacy compliance before use — including reviewing contractual safeguards, technical controls and organisational measures — to confirm the recipient is subject to comparable privacy protections or that adequate safeguards are in place. CoHub keeps an internal register of overseas service providers, countries of storage or access, types of personal information disclosed, and the safeguards relied on.

Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, including through contractual protections.

8. Data Security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure — including restricting access on a need-to-know basis, and relying on our payments provider’s own security and compliance standards for payment data.

Encryption standards. CoHub uses industry-standard encryption to protect personal information both in transit and at rest, alongside access controls and monitoring designed to reduce the risk of unauthorised access.

No method of storage or transmission is completely secure. If we become aware of a data breach likely to result in serious harm to affected individuals, we will notify those individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.

9. How Long We Keep Your Information

We keep personal information for as long as needed for the purposes described in this Policy, including to maintain your account, meet our legal and accounting obligations (such as retaining Booking, Task and payment records for tax purposes), and resolve disputes.

Where we no longer need personal information for these purposes, we take reasonable steps to destroy or de-identify it.

Specific retention periods:

• Account profile information — kept while the account is active, and for 2 years after closure, in case of a dispute or a re-opened account.
• Booking, Task, payout, tax and dispute records — retained for 7 years from the date of the Booking or Task, covering the Australian Taxation Office’s 5-year record-keeping requirement plus a margin for contract-claim limitation periods.
• Application records (CoHub Gigs) — retained for as long as the related Task record is retained, under the same 7-year period, so there is a complete history if a hiring decision is later disputed.
• Identity-verification records — held by our payments provider under its own retention schedule; CoHub itself retains only limited verification results, kept for as long as needed for fraud prevention or a live dispute.
• Marketing preferences — retained for as long as your account exists, to honour opt-outs.
• Deleted or inactive data — securely destroyed or de-identified within 90 days of a deletion request or account closure, except where we are required by law (such as tax law) to keep it longer.

10. Direct Marketing

We may send you information about new features, Spaces, Tasks, or promotions, where permitted by law. You can opt out at any time using the unsubscribe link in any marketing message, or through your account settings. We will still send you essential service communications — such as Booking and Task confirmations — even if you opt out of marketing.

Direct marketing must also comply with applicable Australian spam and electronic-marketing rules, including clear sender identification and a functional unsubscribe facility. CoHub must not use another User’s contact details for unrelated marketing, cross-promotion or third-party offers unless it has a lawful basis and any required consent.

11. Cookies and Analytics

The Platform uses the strictly necessary cookie that keeps you signed in, plus Plausible Analytics to understand how the Platform is used. Plausible is a privacy-friendly analytics tool that does not use cookies and does not collect or store any personal data about individual visitors — it measures aggregate traffic (such as page views and referral sources) without tracking people across sites or building a profile of any individual. No advertising or cross-site tracking cookies are deployed. Most browsers let you control or disable cookies; doing so may affect how parts of the Platform work.

Because Plausible is cookieless and does not process personal data, CoHub has not deployed a cookie consent banner for it — only the strictly necessary sign-in cookie requires no consent under the Privacy Act in any event. CoHub does not deploy advertising pixels, session-recording tools or behavioural analytics.

Future advertising cookies. If CoHub introduces advertising, behavioural or cross-site tracking technologies in future, we will update this Policy and seek any consent required under the Privacy Act before deploying those tools.

12. Accessing and Correcting Your Information

You can access and update most of your Professional Profile and account information directly through the Platform at any time. To request a copy of other personal information we hold about you, or to ask us to correct it, contact us using the details in Section 16.

We will respond within a reasonable period and will not charge you for making a request, though we may charge reasonable costs for giving access. We may decline a request in limited circumstances permitted by the Privacy Act, and will explain why if we do.

Right to withdraw consent. You may withdraw consent for optional data collection or use — such as marketing preferences or the optional sensitive information described in Section 2 — at any time, by contacting us or updating your account settings.

Right to request deletion. You may request deletion of personal information that is not required for legal, accounting, fraud-prevention or dispute-handling purposes. CoHub will take reasonable steps to delete or de-identify such information within a reasonable period, consistent with the 90-day timeframe described in Section 9.

13. Making a Complaint

If you think we have mishandled your personal information, contact us first using the details in Section 16, and we will investigate and respond within a reasonable period.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

CoHub will aim to acknowledge privacy complaints within 5 business days and provide a substantive response within 30 calendar days, unless the matter is complex or urgent circumstances require a different timeframe. If more time is needed, CoHub will explain the reason and keep the complainant updated.

14. Children

The Platform is intended for Users aged 18 and over, consistent with our Platform Terms of Service, and is not directed at children. We do not knowingly collect personal information from anyone under 18.

Inadvertent collection. If CoHub becomes aware that personal information has been collected from a person under 18, we will take reasonable steps to delete that information promptly, unless required by law to retain it.

15. Changes to This Policy

We may update this Policy from time to time. We will post the updated Policy on the Platform with a new “last updated” date, and will notify you of material changes in the manner described in our Platform Terms of Service.

16. Contact Us

For any question about this Policy, or to make an access, correction, or complaint request, contact us at:

• CoHub Pty Ltd (ACN 701 652 557, ABN 88 701 652 557)
• Suite 9, 39 Stanley Street, Bankstown NSW 2200, Australia
• privacy@cohub.com.au