Privacy Policy

Contour handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect and how we use it. Questions, access requests and complaints go to support@contour-au.com.

• Account details — name, email address, role (client or designer), state or region, suburb, and a hashed password. If you sign in with Google we receive your name, email address and profile picture from Google.
• Profile content — bio, headline, specialities, portfolio images and your completed-job history and tier.
• Project content — briefs, quotes, cover letters, messages in project threads, delivery notes and change requests.
• Transaction records — project amounts, commission, escrow status, payment and transfer references. We never see or store your card number; card details are collected directly by Stripe.
• Technical data — IP address and basic request information, used for security, including counting failed sign-in attempts to block brute-force attacks.

To create and secure your account; to match projects with designers; to operate escrow payments and pay designers; to calculate tiers and commission; to run in-platform messaging; to prevent fraud and misuse; and to meet our legal and record-keeping obligations, including the registers required of private employment agents in Queensland.

Contour offers optional AI assistance that can draft a project brief, draft a designer's application, summarise a brief, and suggest replies in a thread. When you use one of these features, the relevant project text and (for an application draft) your public profile details are sent to our AI provider to generate that output. We do not send your password or payment details. AI output is always shown to you for review and editing before it is saved or sent. If you would rather not use it, simply don't press the AI buttons — every form can be completed manually.

• The other party to a project — a client sees an applicant's name, profile, tier and quote; a hired designer sees the client's name and brief. Email addresses and phone numbers are not exchanged.
• Stripe — to process payments and pay designers. Designers who onboard for payouts provide identity and bank details directly to Stripe.
• Service providers — hosting, database and AI providers who process data on our instructions.
• Authorities — where required or authorised by law.

We do not sell your personal information. Some providers may store or process data overseas; where that happens we take reasonable steps to ensure comparable protection.

We use a single essential cookie to keep you signed in — it is httpOnly, marked Secure, and cannot be read by scripts. We also store your cookie-banner choice locally in your browser so we don't ask again. We do not use advertising or cross-site tracking cookies. Blocking the essential cookie will prevent you from signing in.

Passwords are hashed with bcrypt. Sessions expire and can be ended by logging out. Transport is encrypted. We keep account, project and transaction records for as long as your account is open and afterwards where we need them for tax, dispute or regulatory record-keeping, then delete or de-identify them.

You can view and update much of your information in your dashboard. You may ask us for a copy of the personal information we hold, ask us to correct it, or ask us to delete your account, by emailing support@contour-au.com. We will respond within a reasonable period, normally 30 days. If you are unhappy with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.