Privacy Policy

1. Introduction

Suitorly Pty Ltd (ABN 80 670 579 334) ("Suitorly", "we", "us", "our") operates a career, coaching, training, and recruitment software-as-a-service platform that provides Career Tools, AI-assisted features, Programs, and consent-based connections between candidates and employers.

We respect your privacy and are committed to handling personal information in a transparent, responsible, and lawful manner.

This Privacy Policy explains how we collect, use, store, and disclose personal information in accordance with:

• the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs); and
• the New Zealand Privacy Act 2020, where applicable.

This Privacy Policy forms part of the agreement between you and Suitorly under the Suitorly Terms of Service (including the Employer Terms and Candidate Terms).

Capitalised terms used in this Privacy Policy (including AI Features, Career Tools, Programs, Candidate Content, and Employer Content) have the meanings given to them in the Suitorly Terms of Service, unless otherwise stated.

2. Our Role

Suitorly acts as a data controller in respect of personal information processed through the platform.

• Individuals create and manage their own profiles directly with Suitorly.
• Employers do not upload candidate data to the platform.
• Employers may access personal information only where a candidate has provided explicit, role-specific consent through platform functionality.

Suitorly does not act as a data processor on behalf of employers.

Employers who access personal information through the platform are contractually required under the Employer Terms of Service to handle such information confidentially, limit access to authorised personnel only, and use it solely for the relevant hiring process.

3. Personal Information We Collect

A. Information You Provide (Candidates)

This may include:

Identity and Contact Information

• Name
• Email address
• Phone number (optional)
• Location (city or region)
• Profile photo (optional)

Professional and Career Information

• CVs, résumés, and cover letters
• Employment history and experience
• Education, qualifications, and certifications
• Skills, competencies, preferences, and portfolio links
• LinkedIn profile data (if connected)

Candidate Content

As defined in the Terms of Service, including all information and materials you submit, upload, or input into Suitorly, including messages and inputs to AI Features, Career Tools, or Programs.

Sensitive Information

Suitorly does not require sensitive personal information (such as health data, race, religion, sexual orientation, or criminal history).

If you voluntarily include sensitive information (for example within a CV), you consent to its collection, storage, and disclosure in accordance with your discoverability, consent, and privacy settings.

B. Information We Collect from Employers

We may collect limited information from employers and employer representatives, including:

• Business and account details
• Names, work email addresses, and contact details of authorised users
• Job descriptions and role requirements
• Interview notes or evaluations created within the platform

This information is collected and processed solely for account management, platform operation, billing, security, compliance, and service delivery purposes.

C. Automatically Collected Information

When you access or use Suitorly, we may automatically collect:

• IP address
• Device and browser type
• Usage logs and interaction data
• Session duration, timestamps, and feature usage

We use cookies and similar technologies to enable authentication, security, analytics, and platform performance. Suitorly may use third-party analytics, monitoring, performance, and error-tracking tools to understand platform usage, diagnose issues, maintain security, and improve reliability. These providers may receive limited usage data and are contractually required to handle personal information securely and only for authorised purposes.

4. How We Use Personal Information

We use personal information for the following purposes:

Platform Operation

• Creating and managing user accounts
• Providing Career Tools, AI Features, and Programs
• Hosting and displaying profiles in accordance with user settings

Consent-Based Matching and Messaging

• Enabling opt-in discoverability
• Facilitating introductions and messaging with employers where explicit consent is provided
• Applying employer-blocking controls where enabled

AI Features, Career Tools, and Programs

• Generating AI Content for drafting, coaching, training, mock interviews, and preparation
• Producing Career Tool outputs to support reflection and learning only

Communication

• Platform notifications
• Messages, introductions, and invitations you choose to receive
• Service, security, and administrative communications

Platform Integrity and Improvement

• Analysing aggregated and de-identified usage data
• Improving platform functionality, performance, and reliability
• Detecting fraud, misuse, or policy breaches

Status Updates and Commercial Administration

Where you choose to provide status updates (such as interview progression, offer acceptance, or commencement), this information may be used to:

• operate and administer the platform;
• support interview coordination, onboarding access, and feature eligibility; and
• administer commercial arrangements with employers (including placement or success-based fees),

in each case on a need-to-know, aggregated, or de-identified basis and in accordance with the Terms of Service.

5. AI Training and Model Improvement

By default, identifiable personal data is not used to train AI models.

Suitorly may use aggregated and de-identified data to improve AI Features, Career Tools, and Programs. Where applicable, you may be offered a clear opt-out from the use of de-identified data.

To deliver AI Features, Suitorly may use third-party AI models, APIs, or infrastructure providers. These providers may process Candidate Content solely to generate AI outputs under contractual confidentiality, security, and data-use restrictions.

Suitorly does not permit third-party providers to use identifiable Candidate Content to train their general or base AI models unless they have a lawful basis to do so.

6. Discoverability, Consent, and Employer Access

Discoverability

• Profiles are hidden by default.
• Discoverability is opt-in and can be toggled on or off at any time.

Consent to Disclosure

If you opt in and apply, match, or accept an introduction, you authorise Suitorly to disclose your identified profile (including CV and contact details) only to that specific employer.

Employer Blocking

You may block specific employers, including your current employer.

Blocking relies on the accuracy of employer identifiers and may not be effective in all circumstances due to corporate structures, subsidiaries, domains, or naming conventions.

7. Disclosure of Personal Information

Suitorly does not sell personal information.

We may disclose personal information:

• to employers, strictly in accordance with your consent and platform settings;
• to service providers (such as hosting, analytics, email, payment, and infrastructure providers) under confidentiality and security obligations;
• where required by law, regulation, or legal process; or
• in connection with a business transfer, merger, acquisition, or sale of assets.

Employers may only use personal information accessed through Suitorly for the specific hiring process for which consent was provided, unless otherwise required by law or expressly authorised by the candidate.

This Privacy Policy does not grant any party rights to disclose, reproduce, or share Suitorly's proprietary platform features, workflows, AI outputs, or Programs, except as permitted under the Terms of Service.

8. International Data Storage and Transfers

Suitorly primarily operates in Australia and New Zealand.

Some service providers may store or process data in other jurisdictions.

Where personal information is transferred internationally, we take reasonable steps to ensure it is protected in accordance with applicable privacy laws.

9. Data Security

Suitorly uses reasonable technical and organisational measures to protect personal information, including:

• encryption in transit and at rest;
• access controls and authentication; and
• monitoring and security logging.

No system is completely secure, and we cannot guarantee absolute security.

10. Data Breaches

If a data breach is likely to result in serious harm, we will notify affected individuals and relevant regulators (including the Office of the Australian Information Commissioner and the New Zealand Privacy Commissioner) as required by law.

11. Data Retention

Personal information is retained while your account is active.

Accounts inactive for 24 months may be archived or deleted, subject to legal, regulatory, dispute-resolution, and enforcement requirements.

Before account deletion, you may request export of key profile information and documents within a reasonable timeframe, subject to technical and legal limitations.

12. Your Rights

You may have the right to:

• access personal information we hold about you;
• correct inaccurate or incomplete information;
• request deletion of your account;
• withdraw consent where processing is based on consent; and
• opt out of marketing communications.

Concerns relating to AI-assisted outputs, fairness, or data use may also be raised via the contact details below and will be reviewed in accordance with the Terms of Service.

Essential service communications relating to your account, security, or transactions cannot be opted out of.

13. Additional Rights in Other Jurisdictions

If you are located outside Australia or New Zealand, additional privacy rights may apply under local laws. Where required, Suitorly will comply with those laws in relation to personal information of individuals in those jurisdictions.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Material changes will be communicated through the platform or via email.