Privacy Policy

This Privacy Policy explains how VenuRep Pty Ltd (ABN 20 697 889 900), a company incorporated in Victoria, Australia ("VenuRep", "we", "us", or "our") collects, uses, stores, and discloses personal information in connection with the VenuRep platform at venurep.com and any associated applications (the "Platform").

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy forms part of our Terms of Service. By using the Platform, you consent to the collection and use of your information as described here.

If you do not agree with this policy, you must not use the Platform.

This policy applies to: (a) sales representatives and their employers who create a Rep account ("Reps"); (b) venue owners, managers, and other authorised contacts who create or are listed on a Venue account ("Venues"); (c) people who visit venurep.com, contact us, or otherwise deal with us; and (d) staff or nominated persons whose details a Venue account holder adds to a venue profile.

VenuRep is a business-to-business marketplace. Accounts are intended for use in a business or professional capacity, not as a consumer for personal, domestic, or household use.

The information we collect depends on how you use the Platform. It may include:

Google user data. If you connect Google Calendar, VenuRep requests only the Google Calendar scope needed to create, update, and delete events on the calendar you choose (https://www.googleapis.com/auth/calendar.events). We use that access only to add, change, or remove events for bookings you make or manage in VenuRep. We do not use Google user data for advertising, we do not sell it, and we do not use it to train generalised artificial-intelligence models. VenuRep's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy.

We may also collect personal information from the person who invites you, from publicly available sources, or from service providers who help us verify identity if you provide identity documents.

We collect personal information: (a) directly from you when you create an account, complete a profile, book or manage a meeting, connect a calendar, subscribe, or contact us; (b) automatically when you use the Platform, including through cookies that are necessary for sign-in, security, and core features; and (c) from the other party to a booking (for example a Venue providing manager contacts, or a Rep providing company details).

If you do not provide information we reasonably need, we may not be able to create your account, complete a booking, or provide parts of the Platform.

We collect and use personal information to: (a) create and administer accounts and authenticate users; (b) operate the marketplace, including venue discovery, availability, bookings, confirmations, reminders, and reviews; (c) keep venue manager contact details restricted as described in section 3.3; (d) process subscriptions and send billing-related notices; (e) send service emails and in-product notices that are reasonably necessary to provide the Platform; (f) sync authorised calendar events; (g) detect, prevent, and investigate security incidents, fraud, and misuse; (h) improve, develop, and market the Platform, including using aggregated or de-identified analytics; (i) comply with law, a court order, or a regulator; and (j) otherwise with your consent, or as permitted by the Privacy Act.

We will not use personal information for a purpose that is unrelated to these functions unless we have a lawful basis to do so, including your consent where required.

We disclose personal information only as needed to provide the Platform or as required by law. Recipients may include: (a) the other party to a confirmed booking, limited to what is needed to hold that meeting; (b) service providers who process information on our instructions, including hosting and database providers (Vercel and Supabase), authentication and two-step login, including text-message codes (Clerk), payments (Stripe), email delivery (Resend), maps and address search (Google), and calendar platforms you choose to connect (Google or Microsoft); (c) professional advisers, insurers, or purchasers in a genuine corporate transaction, on confidential terms; (d) a court, regulator, or law enforcement body if we are required or authorised to disclose; and (e) anyone else you ask us to share information with.

Our main database is hosted in Sydney, Australia. Some of our other providers store or process information outside Australia, including in the United States. Where we disclose personal information overseas, we take reasonable steps so that the recipient handles it in a way that is consistent with the APPs.

We do not sell personal information.

We use cookies and similar technologies that are necessary to keep you signed in, protect accounts, and run the Platform. We may also use analytics to understand how the Platform is used so we can improve it. You can control cookies through your browser. If you block necessary cookies, parts of the Platform (including sign-in) may not work.

We store personal information on systems operated by us and our service providers, with access limited to people who need it to perform their role.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These include encrypting data in transit, restricting access to our databases and administrative tools to authorised staff, and requiring two-step login for administrator accounts. No method of transmission or storage is completely secure.

If we experience a data breach that is likely to result in serious harm, we will notify the people affected and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

Retention: (a) we keep personal information only as long as we need it for the purposes above, or as required by law; (b) if you close your account or ask us to delete your personal information, we aim to delete or de-identify it within 30 days of verifying your request, except where we are required or permitted to keep it (for example billing and tax records); (c) after termination we retain data for 30 days so you can request export of your user content, then we delete it from our systems unless retention is required by law; (d) backups and logs may persist for a limited additional period, and deleted content may remain visible to others for a short time.

You may request access to the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading. You can update much of your profile information yourself in account settings.

You may request export of your user content, in a commonly used machine-readable format, within 30 days of termination or expiry of your agreement, as set out in our Terms of Service.

You may close your account by submitting a request using our request form or by writing to us. Closing your account is subject to the Terms of Service, including any outstanding fees.

To make an access, correction, export, or deletion request, use our request form at venurep.com/data-request or email info@venurep.com. We will confirm that we have received your request, may need to verify your identity before we act on it, and will respond within 30 days. There is no charge for making a request.

We may send you information about the Platform, new features, or related services where we have a lawful basis to do so. You can opt out of marketing emails using the unsubscribe link or by emailing us. We will still send transactional messages that are reasonably necessary to provide the service (for example booking confirmations and security notices).

The Platform is not directed at people under 18. You must be at least 18 to register. If we become aware that we have collected personal information from a person under 18, we will take reasonable steps to delete it.

If you have a privacy complaint, please contact us first at info@venurep.com so we can try to resolve it. We will respond to your complaint within 30 days. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this Privacy Policy from time to time. The current version will be published at venurep.com/privacy. For material changes we will notify you by email or in-Platform notice where it is reasonable to do so. The effective date at the top of this page shows when the policy was last updated.

Questions about this Privacy Policy or how we handle personal information:

VenuRep Pty Ltd ABN 20 697 889 900 Email: info@venurep.com Privacy requests: venurep.com/data-request Website: venurep.com

© 2026 VenuRep Pty Ltd. All rights reserved.