Privacy policy

1. Scope

This policy explains how GetSweaty Pty Ltd handles personal information. It covers this marketing website and, at a summary level, the GetSweaty platform. When you create an account, the in-product privacy notice presented at sign-up applies in addition to this policy.

GetSweaty operates worldwide. We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth), which apply to us as an Australian company, and with the data protection law that applies where you are — including the UK and EU GDPR, PIPEDA in Canada, the Privacy Act 2020 in New Zealand, and state privacy legislation in the United States.

2. This website

This site is a set of static pages. It sets no cookies, runs no analytics, embeds no social or advertising pixels, and loads no fonts, scripts or images from third-party domains. There is no login. The waitlist form described below is the only thing on this site that sends anything to us.

The only thing stored on your device is your light or dark mode choice, kept in your browser’s local storage. It never leaves your browser and cannot identify you. See the cookie policy for the detail.

There is no contact form. The contact page lists our email addresses and nothing more, so a message reaches us only when you send it yourself, from your own email account.

The waitlist form does. The product is not open in any market yet, so every join and sign-in link on this site opens a waitlist dialog instead. If you submit it we store the name, email address and role you gave us, the moment you submitted, which page you submitted from, and the country your request came from. We use it for one thing: to tell you when GetSweaty opens in your market. We do not sell it, share it with anyone outside our hosting provider, or add you to a newsletter. It is held in private storage operated by Vercel Inc., our hosting provider, readable only by us and not by anyone who happens to know its address, and deleted once you either create an account or ask us to remove you. Write to privacy@getsweaty.com.au and we will remove it.

Our hosting provider records standard server logs when a page is requested, which may include your IP address, the page requested, the time of the request and your browser user agent. These logs exist for security and reliability, are held for a short period, and are not used to build a profile of you.

3. The platform

If you create an account, we collect and hold information you choose to provide, which may include:

• identity and contact details: name, email address, mobile number and profile photograph;
• professional information: headline, biography, primary discipline, skills, industry expertise, career highlights, years of experience, location and links to your public profiles;
• preferences that drive matching: availability, weekly hours, preferred duration, work modes, disciplines, industries, company stages, geographies and any equity floor you set;
• for investors: investor type, thesis, preferred sectors, stages, geographies, cheque size range and lead preference;
• for companies: company details, incorporation and registration details, business metrics, proof points, updates and documents you upload to a data room;
• engagement information: opportunities, applications, cover notes, milestones, agreements and their status; and
• communications: messages sent through the platform and their attachments, and correspondence with us.

4. Why we handle it

We use personal information to:

• create and administer your account and verify your identity;
• operate the marketplace, including discovery, matching, applications and messaging;
• generate, record and administer equity agreements and milestone schedules, and meet the filing and record-keeping obligations attached to them;
• keep the platform safe, and detect and prevent misuse;
• improve the product and understand, in aggregate, how it is used; and
• comply with our legal obligations.

Where the UK or EU GDPR applies, our lawful bases are performance of a contract with you, our legitimate interests in operating and securing the platform, compliance with legal obligations, and your consent where we ask for it.

5. What other people can see

The platform is a marketplace, so parts of your profile are visible to other members by design. You control whether your profile is public, what you publish on it, and who you grant data-room access to. Documents shared through a data room are subject to folder-level access controls and an audit trail of who opened what and when.

6. Service providers

We use a small number of providers to run the service, each handling data only on our instructions and only for the purpose described:

• cloud hosting and content delivery for the website and product;
• a managed database, authentication and file storage provider for account and profile data;
• an email delivery provider for transactional email;
• a verification provider for mobile number verification;
• a video hosting provider for company videos; and
• a places provider used to standardise location entry, called from our servers rather than from your browser.

Some of these providers store or process data outside the country you are in, including in Australia, the United States and the European Union. Where we transfer personal information across borders, we take reasonable steps to ensure it is handled consistently with this policy and with the transfer requirements that apply.

7. Retention

We keep personal information for as long as your account is active and afterwards only for as long as we need it, including to meet legal, tax, accounting and record-keeping obligations attached to equity agreements. Records relating to a signed agreement are generally kept for at least seven years. Server logs are kept for a short period.

8. Security

We use access controls, encryption in transit, row-level authorisation rules and audit logging to protect personal information. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable steps to protect information from misuse, interference, loss and unauthorised access, modification or disclosure.

9. Your rights

You may ask us to:

• give you access to the personal information we hold about you;
• correct information that is inaccurate, out of date or incomplete;
• delete information we no longer need to keep;
• restrict or object to certain handling; and
• provide a copy of information you gave us in a portable format, where that right applies to you.

Write to privacy@getsweaty.com.au and we will respond within a reasonable period, usually within 30 days. We may need to verify your identity first. Some information cannot be deleted while we are required to keep it, for example records attached to a signed equity agreement.

10. Complaints

If you think we have mishandled your personal information, tell us at privacy@getsweaty.com.auand we will investigate. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner, or to the data protection authority where you are — for example the Information Commissioner’s Office in the United Kingdom, the Office of the Privacy Commissioner of Canada, or the Office of the Privacy Commissioner in New Zealand.

11. Children

GetSweaty is intended for people aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes

We may update this policy. The version published here is the current one, and the date at the top of this page shows when it last changed. Material changes affecting account holders will also be notified in the product.

13. Contact

Privacy enquiries: privacy@getsweaty.com.au. General enquiries: hello@getsweaty.com.au. See also our cookie policy.