Privacy policy

1. Who we are

CoHire is our business name. The platform is provided by TWELVE PIXEL PTY LTD (ABN 14 670 579 432) (“we”, “us”). We run a peer-to-peer service for renting tools and equipment. For the purposes of the Privacy Act 1988 (Cth), we are an APP entity and handle personal information in line with the Australian Privacy Principles (APPs).

This policy explains what data we collect, how we use it, and your rights. The Platform is our website (including when you use it on mobile or desktop) and related services.

2. Data we collect

We collect information you provide and information we obtain from your use of the Platform.

• Account and profile: When you register (e.g. via email or social login), we store your email, display name, and optionally phone number and profile photo. We link your account to an internal user ID and, where used, a third-party auth provider ID.
• Listings (Lenders): If you list items, we store the listing details (title, description, category, pricing, location such as suburb and postcode, images). We do not expose your full street address to other users until a booking is confirmed, as per our product design.
• Bookings and messages: We store booking requests, confirmed bookings, dates, pricing, status and related messages. Messaging may be handled in partnership with a third-party service (e.g. real-time chat).
• Payment-related data: We do not store your full card number. We use Stripe as our payment provider to process payments. Stripe collects and stores card details in line with Stripe’s privacy policy. We store a reference to your Stripe customer ID and payment method so we can charge you for bookings and, where you have consented, for damage, loss or deposits.
• Identity verification and compliance: We may collect additional personal information where needed for identity verification, fraud prevention, or to meet legal or regulatory requirements.
• Technical and usage data: We may collect IP address, device and browser type, and general usage information to operate and improve the Platform and for security.

3. How we use your data

We use your data to: provide and operate the Platform; create and manage your account; process booking requests and payments; communicate with you about bookings, account and support; send service-related messages (and, where you have opted in, marketing-you can opt out of marketing at any time, for example using unsubscribe links in emails or your account settings); detect and prevent fraud or abuse; comply with legal obligations; and improve our services. We use payment data through Stripe to charge you for rentals and, with your consent, for off-session charges such as damage, loss or deposit deductions.

We may use data to operate, secure, and improve the Platform and to provide user support. If you choose to use optional tools that generate or refine listing text (for example description suggestions), we send the content you provide for that request-such as listing title, category, existing or draft description, and any optional notes you type for that tool-to an AI provider so it can return a suggestion. You choose whether to save or use the result. Because that content is under your control, do not include sensitive personal information in listing fields or notes if you do not want it processed by that AI provider.

We do not take your account display name or your stored profile or listing address fields from our systems and send them to an AI provider for those features unless you have typed that information into the listing or notes yourself as part of the request. We do not use personal data to train public or general-purpose AI models run by those providers.

4. Payment data and saving cards

Payment processing is handled by Stripe. When you pay or save a card, Stripe collects and stores your payment details in line with Stripe’s privacy policy and applicable card scheme rules. We store only non-sensitive references (e.g. Stripe customer ID) so we can charge you for future bookings and, where you have agreed, for charges related to damage, loss or deposits when you are not actively on the Platform. Before initiating such off-session charges, we aim to give reasonable notice and typically around 48 hours to respond before a charge attempt, as outlined in Section 3 and subject to exceptions where delaying a charge would be impracticable or inconsistent with applicable law or card rules. Nothing in this section limits statutory rights including under the Australian Consumer Law. You can add, update or remove saved payment methods in your account profile.

5. Sharing and disclosure

We may share your data with: (a) other users where necessary for the service (e.g. owner and renter see each other’s profile and booking details); (b) service providers who help us run the Platform-for example hosting, Stripe (payments), messaging, analytics, and AI providers for optional listing tools you choose to use-under strict confidentiality; (c) authorities when required by law or to protect rights and safety. We do not sell your personal data to third parties.

Personal information is primarily stored on servers located in Australia and the United States (including for payment processing and hosting services). Where personal information is processed outside Australia, we take reasonable steps to ensure overseas providers handle personal information in accordance with applicable privacy laws.

6. Retention

We keep your data for as long as your account is active and as needed to provide the service, resolve disputes, enforce our terms and comply with law. After account closure, non-essential account data is deleted or anonymised within 24 months. Financial and transaction records are retained for 7 years to meet Australian Taxation Office (ATO) and related legal requirements.

7. Sensitive information

We do not intentionally collect sensitive information (for example health information or criminal history information). Please avoid sharing sensitive information in open text fields, listing descriptions, support requests, or user messages.

8. Security

We use appropriate technical and organisational measures to protect your data (e.g. encryption, access controls, secure payment processing). No system is completely secure; we will notify you and regulators where we are required to do so in the event of a data breach affecting your personal data.

9. Your rights

Under the APPs you may request access to or correction of personal information we hold about you. You can update much of your profile and account information in the Platform. For other requests (including complaints about how we handle personal information) or to delete your account, see Data deletion below or contact us using the details in Section 13. We aim to respond to privacy requests within a reasonable time.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. Users in other regions may have additional rights under local law.

10. Data deletion

You can request deletion of personal information we hold about you, including data obtained when you sign in with Facebook, Google, or email. To request deletion of your account and associated personal data:

1. Email support@cohire.com.au from the email address linked to your CoHire account.
2. Use the subject line "Account deletion request" and include the email you used to register. If you signed in with Facebook or Google, say which provider you used.
3. We will confirm your request and delete or anonymise your account data within 30 days, unless we need to keep certain information for legal, tax, fraud prevention, or dispute resolution reasons (see Section 6).

Before deletion, cancel or complete any active bookings where possible. You can update your profile, remove saved payment methods, and delete listings from your account settings. Removing the CoHire app from your Facebook account stops future access via Facebook but does not by itself delete data we already hold; use the steps above to request deletion.

Financial and transaction records may be retained for up to 7 years as described in Section 6. We aim to respond to deletion requests within a reasonable time.

11. Cookies and similar technologies

We use cookies and similar technologies to run the Platform, keep you logged in, remember preferences and understand how the Platform is used. You can adjust your browser settings to refuse or limit cookies; some features may not work fully if you do.

12. Changes to this policy

We may update this privacy policy from time to time. We will post the updated version on the Platform and update the "Last updated" date. We encourage you to review it periodically. Where the law allows, continued use of the Platform after we post reasonable notice of changes may be treated as accepting the revised policy except that your statutory rights (including non-excludable protections under Australian law) remain unaffected by this sentence.

13. Contact

For questions about this privacy policy or your personal information:

• Email: support@cohire.com.au
• Business name: CoHire

You may also contact us through features available on the Platform. We aim to respond to privacy-related enquiries within a reasonable time.