Privacy Policy

In short

We use personal information to run SquadGoo accounts, matches, support, and payments where relevant. We do not sell your data. Read the PDF for the full picture under Australian privacy rules.

Identity verification and overseas disclosure

If your account needs identity verification, you may be asked to complete a check through Didit, an identity-verification provider we use. You provide your identity document and a live selfie directly to Didit through Didit’s own secure verification flow, and we send Didit only an internal account reference — never your name, contact details or other profile information. What Didit returns to us is more than a simple pass or fail. We receive and store Didit’s verification result in full, which includes the document type, the issuing state, the document’s expiry date and the outcome of each individual check (document, face match and liveness). We also store the links Didit gives us to the images it captured, and those images are shown to our compliance team as your verification documents. We do not keep our own copy of the image files — they remain with Didit — but we can display them by following those links.

Didit is a separate company with operations in the European Union and the United States, and by default processes verification sessions in the European Union. This means your identity document and selfie may be handled and stored outside Australia. Didit uses recognised safeguards for this, including Standard Contractual Clauses and other lawful transfer mechanisms, and holds SOC 2 and ISO 27001 security certifications.

Device permissions and what we use them for

The SquadGoo app asks for device permissions only for a specific feature, and only at the point you use that feature. You can decline any of them, or withdraw them later in your device settings; declining only disables the feature that needs it, not your account.

• Camera — to take a profile photo, to capture identity documents and a live selfie during verification, and to send video during an in-app call. Verification images go directly to our verification provider as described above.
• Microphone — for voice and video calls between people who are already connected through a job, offer or interview, and for speaking to the in-app AI assistant instead of typing.
• Location — to match work to the right area: to show how far a job or a jobseeker is, to set a workplace address, and to show anonymous area-level activity. We use it to calculate distance for matching, not to track your movements, and we do not build a location history of you.
• Photos and files — to let you attach documents, qualifications and images you choose to upload. We access only the items you pick.
• Phone number — to identify your account, verify it, and let a connected party contact you about agreed work.
• Notifications — to tell you about offers, messages, calls, shifts and account or money events.
• Biometric unlock (Face ID / fingerprint) — only to unlock the app on your own device. The biometric itself stays on your device and is never sent to us.

Calls that keep running in the background. While you are on an in-app call, the app runs a foreground service that keeps the microphone, and the camera on a video call, active so the call does not drop when you switch apps or lock the screen. Your device shows an ongoing notification for the whole time this is running. It starts only when a call starts and stops when the call ends — it does not record, and it never runs when you are not on a call.

Speech. If you dictate to the AI assistant, what you say is converted to text so the assistant can answer. We do not use your calls or your dictation to identify you by voice.

Age, blocking and AI in short

SquadGoo is only for people aged 18 or over. We ask for your date of birth at sign-up to check this, and we close accounts that belong to anyone under 18. When you block a member we store the block so we can hide each of you from the other; they are not told. AI assistants send what you type or say, and the account information they need, to our AI provider; they can propose actions but nothing moves money or changes your account until you confirm it. The full Privacy Policy PDF has the detail, including how we use automated matching and eligibility decisions.

Cookies and analytics on this website

Nothing is stored or sent until you choose. Before you make a cookie choice this website stores nothing on your device and sends no analytics. A temporary identifier is kept in memory for the page you are on, only so that a Support chat, Ask AI question or sign-up you start is linked together.

Essential only. We save your choice in a cookie (sg_cookie_consent, 12 months) and a random visitor identifier (sg_landing_sid, cookie and browser storage, 12 months) that keeps your Support conversation or sign-up linked to your browser. We do not record the pages you visit.

Optional analytics. Only if you choose “Allow optional analytics” we record the pages you visit and the campaign details of the link that brought you (such as source, medium, campaign and advertising click identifiers), linked to your visitor identifier, and we may load third-party analytics tools.

Changing your mind. Use Cookie preferences in the footer at any time. Changing it does not delete information already sent.

Connecting SquadGoo to AI apps (Claude, ChatGPT, Cursor)

Where SquadGoo makes it available to your account, AI connections let you link your own SquadGoo account to an AI app you already use: Claude (run by Anthropic), ChatGPT (run by OpenAI) or Cursor (run by Anysphere). This is separate from the in-app AI assistant.

• Off unless you connect it. Nothing is connected by default. A connection exists only after you set it up in the AI app, sign in on SquadGoo’s own sign-in screen and approve it there.
• Read-only by default. The AI app can ask SquadGoo for information about your own account in the role you are using, such as your profile, offers, jobs, notifications and SG Coin balance. The approval screen has an unticked box, “Let this assistant do things in my SquadGoo account”. Unless you tick it, the AI app cannot change anything. If you tick it, the AI app can make ordinary changes for you, such as marking notifications read. Whether it asks you before each change depends on your AI app’s own approval settings; SquadGoo cannot check whether you were asked.
• Handled by that provider. What SquadGoo returns to the AI app is processed by its provider (Anthropic, OpenAI or Anysphere) under that provider’s own terms and privacy policy, in the United States and other places it uses. That includes your conversation with the AI app.
• Money and contract steps finish in the app. Steps such as sending or accepting an offer, an interview request or a refund are never completed through an AI app, and an AI app cannot top up, withdraw or move your wallet money.
• Never available. Identity documents and identity-check images, passwords and other sign-in credentials, bank details, and Owner or staff functions.
• What we keep. SquadGoo does not receive your conversation with the AI app, only the specific requests it makes to SquadGoo for you. We keep a record of each connection and of each action it prepares or runs; our security log holds action names, identifiers and outcomes, not conversation text.
• Stop any time. Disconnect one or all connections in the SquadGoo app under Settings → AI connections. This stops access straight away but cannot erase what the AI app has already received.

This is a summary. The Privacy Policy PDF (section 11.1) is the binding version and contains everything on this page.

Who else handles your information

We use a small number of specialist providers to run the service. They may only use your information to provide their part of it, and we do not sell your information to anyone.

• Didit — identity verification, as described above.
• OpenAI — powers the in-app AI assistant. What you type to the assistant, and the account information it needs to answer you, are sent to OpenAI. Your phone number is never sent, and your account is identified to OpenAI only by an irreversible one-way code, not by your name or email.
• Anthropic and Anysphere — run Claude and Cursor, only if you choose to connect them to SquadGoo. They receive the SquadGoo information you allow the AI app to read, as described in the AI connections section above.
• Agora — carries in-app voice and video calls between connected parties.
• Mobile Message — an Australian SMS provider, sends the verification codes and security messages we text to your mobile number.
• Amazon Web Services — hosts the service, stores the documents and images you upload, and sends our emails.
• Google (Firebase, Maps and Places, Sign-In) — delivers push notifications, shows maps, turns an address you type into suggestions and a location for matching, and handles Google sign-in.
• OpenStreetMap (Nominatim) — suggests addresses from the text you type when Google address search is not available.
• Apple — delivers push notifications to iPhones and handles Sign in with Apple where you use it.
• Stripe — processes payments. Card details are handled by Stripe and are not stored by SquadGoo.
• CARTO — provides map tiles; receives the map area viewed and your device’s IP address.
• YouTube (Google) — plays embedded videos; receives the video requested and your device’s IP address.
• Sentry — receives crash and error reports so we can fix faults.

Some of these providers operate outside Australia, which means your information may be handled overseas. Where that happens we rely on recognised safeguards such as Standard Contractual Clauses.