Privacy Policy
How we collect, hold, use and disclose personal information in connection with the JobPick platform and related services.
Effective
Infinity Technology Australia Pty Ltd (ABN 37 662 524 058; ACN 662 524 058) trading as JobPick
1.About this Policy
JobPick is an Australian online employment marketplace operated by Infinity Technology Australia Pty Ltd (ABN 37 662 524 058) trading as JobPick (we, us, our).
This Privacy Policy explains how we collect, hold, use and disclose personal information in connection with the JobPick platform and related services. It applies to all users of JobPick, including candidates, job seekers, employers, recruiters, recruitment agencies, labour-hire businesses, universities, educational institutions, career services, applicant tracking system (ATS) providers, HR and recruitment software providers, job-distribution providers, integration partners, authorised organisation users and visitors.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We handle personal information in accordance with those obligations.
We may update this Policy from time to time. The current version is always available at jobpick.com.au/privacy. Material changes will be notified to registered users by email or platform notification before they take effect.
2.What personal information we collect
2.1Candidates and job seekers
We may collect:
- (a)Account and contact information: name, email address, mobile number, password (stored in hashed form), account creation date and verification status.
- (b)Candidate profile: work history, education, qualifications, licences and certifications, skills, availability, location, career preferences and any other information you include in your profile or CV.
- (c)CV and uploaded documents: the content of any CV, resume or supporting document you upload, including information extracted from those documents by our systems.
- (d)Work-right information: self-reported information about Australian citizenship, permanent residency, visa status, working-hour restrictions and other work restrictions. We do not currently collect passport scans, visa documents or conduct VEVO checks as part of this feature. This information is self-reported and is not independently verified by JobPick unless a separate verification feature is introduced and disclosed.
- (e)Applications and screening: job applications, cover letters, screening question responses, availability and other information you provide when applying for a role.
- (f)Communications: messages sent through the platform between you and employers, recruiters or JobPick.
- (g)AI-generated information: scores, rankings, match assessments, parsed CV fields and other outputs generated by our AI systems using your information (see section 7).
- (h)Technical and usage information: device type, browser, IP address, operating system, pages visited, session duration, access times and other usage data collected automatically when you use the platform.
- (i)Security and access records: login history, authentication events and fraud-prevention information.
2.2Employers, recruiters and organisation users
We may collect:
- (a)Organisation information: company name, ABN, industry, address and contact details.
- (b)User account information: name, work email address, role and account credentials.
- (c)Job advertisements: job titles, descriptions, requirements, location, salary and other content you post.
- (d)Recruitment activity: candidate searches, shortlists, notes, ratings, messages and hiring decisions recorded on the platform.
- (e)Billing and payment information: where applicable, payment details processed through our payment provider.
- (f)Technical and usage information: as described above.
2.3Sensitive information
CVs, uploaded documents and free-text responses may incidentally reveal sensitive information, including health or disability information, racial or ethnic origin, religious beliefs, criminal history, union membership or other protected attributes. We do not ask you to provide sensitive information for its own sake.
Where sensitive information is incidentally included in material you choose to provide (such as a CV or free-text response), we treat that information as unsolicited personal information for the purposes of APP 4. We will assess, within a reasonable period of receiving it, whether we could have collected that information under APP 3 if we had solicited it. You are not required to include sensitive information in your profile or CV, and simply uploading a document or completing a free-text field does not automatically constitute valid consent to the collection of sensitive information in every circumstance. Consent must be adequately informed, voluntary, current and specific.
- (a)Where we determine that we could have collected the sensitive information under APP 3 (for example, because you have given valid consent and the collection is reasonably necessary for our functions or activities), we will retain and handle it in accordance with the applicable APPs.
- (b)Where we determine that we could not have collected the sensitive information under APP 3, we will destroy or de-identify it as soon as practicable, where it is lawful and reasonable to do so. We will not rely on merely limiting use or disclosure as a substitute for that obligation.
Where JobPick specifically asks you to provide sensitive information through a structured field, screening question or feature, we will seek your express consent at the point of collection, explain why that information is needed and confirm that the collection is reasonably necessary for our functions or activities. You may decline to provide sensitive information in response to a structured request without affecting your ability to use the platform generally, unless the information is essential to a specific feature you have chosen to use.
If you are using AI-assisted screening features, please be aware that AI systems may process free-text responses that contain sensitive information. See section 7.
2.4Work-right information
We collect work-right information (citizenship status, residency, visa status and work restrictions) because it is directly relevant to whether a candidate is eligible for particular roles in Australia. This information is disclosed to employers and recruiters as part of a candidate's profile or application, to the extent you have made it visible. We do not use this information to discriminate unlawfully. Employers and recruiters are responsible for their own compliance with anti-discrimination laws when using this information.
3.How we collect personal information
We collect personal information:
- (a)directly from you when you register, create or update a profile, upload a CV, apply for a role, send a message or contact us;
- (b)automatically through your use of the platform (technical and usage information);
- (c)from employers or recruiters where they provide information about candidates in connection with a role;
- (d)from third-party integrations you authorise, such as ATS providers or job-distribution platforms; and
- (e)from publicly available sources, where relevant and permitted by law.
We collect personal information only by lawful and fair means.
4.Why we collect and use personal information
We collect and use personal information for the following purposes:
- (a)Providing the platform: creating and managing accounts, matching candidates to roles, displaying profiles and job advertisements, processing applications and facilitating communications between candidates and employers.
- (b)AI-assisted features: job matching, CV parsing, scoring, ranking, screening assistance and related recruitment tools (see section 7).
- (c)Work-right information: displaying self-reported work-right information to employers and recruiters as part of candidate profiles and applications.
- (d)Communications: sending service messages, security alerts, application updates and, where you have opted in, job alerts and recommendations.
- (e)Platform improvement: analysing usage patterns, improving features and developing new services, using de-identified or aggregated information where possible.
- (f)Safety and security: detecting and preventing fraud, abuse and unauthorised access.
- (g)Legal compliance: meeting our obligations under applicable laws, including responding to lawful requests from regulators and law enforcement.
- (h)Resolving disputes and enforcing our terms.
We do not use personal information for a purpose that is unrelated to the above without your consent or unless otherwise permitted by law.
5.Disclosure of personal information
5.1To employers and recruiters
When you apply for a role or make your profile visible to employers or recruiters, we disclose your profile information, CV, work-right information and application materials to the relevant employer or recruiter. Once an employer or recruiter has received or downloaded your information, their handling of it is subject to their own privacy obligations. We are not responsible for how employers or recruiters handle your information after it has been disclosed to them.
5.2To ATS and integration partners
Where an employer uses an ATS or other recruitment software integrated with JobPick, your application information may be transmitted to that system. We will disclose this only where the employer has authorised the integration and you have submitted an application to that employer.
5.3To service providers
We disclose personal information to third-party service providers who assist us in operating the platform, including:
- (a)Cloud infrastructure: our primary production database is intended to be hosted on Amazon Web Services (AWS) infrastructure in Australia. Other systems, including object storage, backups, logs, content delivery, authentication, email delivery, AI processing and support systems, may involve AWS infrastructure or other providers that process data in locations outside Australia. We take reasonable steps to ensure overseas recipients handle personal information in accordance with the APPs.
- (b)AI services: we use Google Cloud services to power AI features, including Gemini models accessed through Google Cloud. The exact configuration, data-residency settings and applicable Google Cloud Data Processing Addendum terms are being confirmed. Until confirmed, we cannot represent that all AI processing occurs in Australia. We have contractual arrangements with Google that are intended to restrict the use of customer data for Google's general model training purposes. We do not authorise Google to use candidate CVs, applications or personal information to train general-purpose AI models. The precise scope of those contractual protections depends on the specific Google Cloud product and configuration in use, which is being confirmed.
- (c)Email and communications providers: for sending verification codes, notifications and alerts.
- (d)Analytics and monitoring providers: for platform performance and security monitoring.
- (e)Payment processors: where applicable.
- (f)Support systems: our customer support tools may process personal information in connection with support requests.
We require service providers to handle personal information only for the purposes we specify and in accordance with applicable privacy laws.
5.4Overseas disclosure
Our platform is developed and maintained by a team that includes developers located outside Australia. We maintain access controls to limit developer access to live personal information. Where overseas developers require access to production systems for troubleshooting or maintenance, we treat that access as a disclosure to an overseas recipient and apply appropriate contractual safeguards.
Some of our service providers operate infrastructure or process data outside Australia. The specific countries in which our service providers are located are being confirmed as part of our production configuration review. Where practicable, we will identify recipient countries in this Policy once confirmed. Before disclosing personal information to overseas recipients, we take reasonable steps to ensure they do not breach the APPs in relation to that information, including through contractual arrangements. We remain accountable for the handling of personal information by overseas recipients to the extent required by the Privacy Act.
5.5Other disclosures
We may also disclose personal information:
- (a)where required or authorised by Australian law or a court or tribunal order;
- (b)to protect the rights, property or safety of JobPick, our users or the public;
- (c)in connection with a business sale, merger or restructure, subject to confidentiality obligations; or
- (d)with your consent.
We do not sell personal information.
6.Data hosting and storage
Our primary production database is intended to be hosted on AWS infrastructure in Australia (ap-southeast-2 region), once that configuration is confirmed. Other systems, including CV and object storage, backups, disaster recovery, logs, content delivery networks, authentication services, email delivery, AI processing and third-party integrations, may involve infrastructure or processing outside Australia.
We do not represent that all JobPick data is stored or processed in Australia.
7.Artificial intelligence and automated features
7.1How we use AI
JobPick uses AI to assist with:
- (a)matching candidates to relevant job opportunities;
- (b)parsing CVs and extracting structured information;
- (c)generating or assisting with job descriptions;
- (d)scoring and ranking candidates based on role requirements;
- (e)generating screening questions and assisting with screening; and
- (f)providing recommendations to employers and candidates.
These features use personal information, including CV content, profile information, work-right information, application responses and usage data.
7.2Human decision-making
Employers make the final hiring decision. JobPick's AI features are assistive tools. They may influence which candidates are surfaced, ranked or recommended to an employer, but they do not make the final employment decision on behalf of an employer.
AI systems may affect which candidates are visible to employers through ranking, ordering and recommendation features. If you believe an AI feature has affected your opportunity to be considered for a role, you may contact us at support@jobpick.com.au.
7.3Automated decision-making transparency (from 10 December 2026)
From 10 December 2026, the Privacy and Other Legislation Amendment Act 2024 (Cth) requires APP entities to disclose in their privacy policy certain information about computer programs that perform functions substantially and directly related to decisions that could reasonably be expected to significantly affect the rights or interests of individuals (the statutory threshold).
JobPick uses computer programs that score, rank and match candidates using personal information. Whether any specific JobPick AI function meets the statutory threshold depends on the actual workflow, including whether any program automatically excludes, suppresses or prevents a candidate from being considered without human review, or effectively determines a shortlist. We are confirming the details of our AI workflow against this threshold before 10 December 2026.
On the basis of our current understanding, the following preliminary disclosure is provided:
- (a)Kinds of personal information used by automated programs: CV content, work history, qualifications, skills, location, availability, work-right information, application responses, AI-extracted fields and usage data.
- (b)Kinds of decisions to which automated programs may be substantially and directly related: candidate ranking and ordering in employer search results; candidate matching scores; screening question generation; shortlisting assistance; and recommendations to employers about candidate suitability.
- (c)Automated outputs: certain ranking, scoring and matching outputs are generated by automated programs before any human review. These outputs may influence which candidates an employer sees and in what order.
We will update this section before 10 December 2026 once we have confirmed which specific AI functions meet the statutory threshold and can provide the full APP 1.8 disclosures required by law. Employers retain responsibility for final hiring decisions. JobPick does not represent that AI outputs are free from error or bias. We take reasonable steps to monitor AI performance and address identified issues.
7.4AI and third-party model training
We do not authorise third-party AI providers to use candidate CVs, applications, profiles, screening responses or other personal information to train their general-purpose AI models. Our contractual arrangements with AI service providers are intended to reflect this position. We use personal information in AI systems only for the purposes described in this Policy.
We may use de-identified or aggregated data to improve our own platform features and matching quality.
7.5Google Cloud Generative AI and under-18 users
Google Cloud's Service Specific Terms impose a contractual restriction on the use of Google Cloud Generative AI Services as part of online services directed towards or likely to be accessed by individuals under 18. JobPick is a general employment platform that may be accessed by younger workers. Before making any Google Cloud Generative AI feature available to users, JobPick will confirm that its use of those features is compatible with this contractual requirement. Until that confirmation is in place, we will not make Google Cloud Generative AI features available to users in a manner that would breach this restriction. This is an operational matter that does not affect the general operation of the platform.
8.Direct marketing and communications
8.1Service messages
We send service messages that are necessary for the operation of your account, including email verification, security alerts, application status updates and platform notifications. These are not marketing messages and do not require separate consent.
8.2Job alerts and recommendations
If you opt in to job alerts or recommendations, we will send you notifications about roles that match your preferences. You may opt out at any time through your account settings or by following the unsubscribe link in any alert.
Where job alerts contain promotional content from employers (such as featured roles or sponsored listings), we treat those messages as commercial electronic messages under the Spam Act 2003 (Cth) and will only send them with your express or inferred consent.
8.3Promotional communications
We may send promotional emails or SMS messages about JobPick features, employer products or other services only with your separate opt-in consent. Accepting our Terms of Use does not constitute consent to promotional communications.
You may withdraw consent to promotional communications at any time by contacting us at support@jobpick.com.au.
8.4Employer marketing
Where employers opt in to receive information about JobPick products, features or employer services, we may send them relevant communications. Employers may opt out at any time.
9.Cookies and technical storage
We use cookies and similar technologies to operate the platform, maintain your session, remember your preferences and monitor platform performance and security.
At the date of this Policy, we have not connected advertising pixels, behavioural tracking analytics or third-party marketing cookies to the platform. If we do so in the future, we will update this Policy and, where required, seek your consent.
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.
10.Candidate profile visibility
Candidate profiles are not publicly indexed by search engines.
Within the JobPick platform, your profile and CV are visible to employers and recruiters to the extent you make them visible. The specific visibility controls available to candidates, including whether employers can search for candidates who have not applied to their roles and whether CVs can be downloaded, are being confirmed as part of our platform configuration. We will update this section once those details are confirmed.
We will update this Policy if material changes are made to how candidate information is made visible on the platform.
11.Account deletion and data retention
11.1Account deletion
You may delete your JobPick account through your account settings. Deleting your account will remove your profile and prevent further access.
Account deletion does not:
- (a)recall applications you have already submitted to employers;
- (b)delete copies of your information that employers or recruiters have already downloaded or stored in their own systems;
- (c)immediately remove your information from backups or disaster-recovery systems (which are purged on a scheduled cycle); or
- (d)delete records we are required to retain for legal, security or compliance purposes.
11.2Retention
We retain personal information for as long as it is reasonably necessary for the purpose for which it was collected, or as required by law. When personal information is no longer needed, we take reasonable steps to destroy it or de-identify it.
Factors we consider in determining retention periods include the nature of the information, the purpose for which it was collected, applicable legal obligations and the risk of harm from retaining it.
We are in the process of adopting a formal internal data-retention schedule that will set out retention periods for different categories of information. Until that schedule is adopted, we apply the principles in this section on a case-by-case basis.
12.Security
We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, in accordance with our obligations under APP 11.
No security system is impenetrable. We cannot guarantee that personal information will never be accessed, disclosed, altered or destroyed by a breach of our security measures.
13.Data breaches
We are subject to the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).
An eligible data breach occurs when there is unauthorised access to, or unauthorised disclosure of, personal information held by us (or information is lost in circumstances where unauthorised access or disclosure is likely), and a reasonable person would conclude that the access or disclosure would be likely to result in serious harm to one or more of the individuals to whom the information relates, and we have not been able to prevent the likely risk of serious harm through remedial action.
Where we suspect but are not certain that an eligible data breach has occurred, we will conduct a reasonable and expeditious assessment. We will take all reasonable steps to complete that assessment within 30 calendar days of becoming aware of the grounds for suspicion.
Where we have reasonable grounds to believe that an eligible data breach has occurred, we will:
- (a)notify the Office of the Australian Information Commissioner (OAIC) as soon as practicable; and
- (b)notify individuals at risk of serious harm as soon as practicable.
We maintain an internal Data Breach Response Plan.
14.Accessing and correcting your information
14.1Access
You have the right to request access to the personal information we hold about you. To make an access request, contact us at support@jobpick.com.au. We will respond within a reasonable period after receiving your request. In most cases, we aim to respond within 30 days, though the time required may vary depending on the scope and complexity of the request. We may ask you to verify your identity before providing access.
We may decline to provide access in limited circumstances permitted by the APPs, including where providing access would unreasonably affect the privacy of another individual, or where access is restricted by law. If we decline, we will tell you why and how you may complain.
14.2Correction
If you believe personal information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, you may request correction by contacting us at support@jobpick.com.au. We will respond within a reasonable period and take reasonable steps to correct the information or, if we disagree, to note your request alongside the information.
15.Privacy complaints
If you have a concern about how we have handled your personal information, please contact us first:
- Post
- Privacy, JobPick, G.02D, 46–50 Kent Road, Mascot NSW 2020, Australia
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If we cannot resolve it within that time, we will let you know.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website
- oaic.gov.au
- Phone
- 1300 363 992
- Post
- GPO Box 5218, Sydney NSW 2001
16.De-identified and aggregated information
We may use de-identified or aggregated information (information that cannot reasonably identify any individual) for analytics, platform improvement, research and reporting. We do not treat information as de-identified merely because a name has been removed. We apply appropriate technical and organisational measures to reduce re-identification risk before using information in this way.
17.Children and younger users
JobPick is an employment platform. There is no Australian law that prohibits persons under 18 from using an employment platform or seeking work. Young people may legitimately use JobPick to find employment.
The Privacy Act 1988 (Cth) does not prescribe a fixed age at which a person can make their own privacy decisions. Whether a person under 18 has capacity to consent to the collection of their personal information is assessed by reference to whether they have sufficient maturity and understanding to comprehend what is being proposed. Where it is not practicable to assess capacity individually, OAIC guidance indicates that an organisation may generally assume a person aged 15 or over has capacity to consent, unless there is reason to doubt it. A person under 15 is presumed not to have capacity in that situation, and it may be appropriate for a parent or guardian to consent on their behalf. These are practical guidelines, not fixed statutory thresholds.
JobPick is not a social media platform and is not subject to the under-16 account restrictions that apply to age-restricted social media platforms under the Online Safety Act 2021 (Cth).
Note for AI features: Google Cloud's Service Specific Terms impose a contractual restriction on the use of Google Cloud Generative AI Services as part of online services directed towards or likely to be accessed by individuals under 18. Before making any Google Cloud Generative AI feature available to users, JobPick will confirm that its use of those features is compatible with this requirement. See section 7.5.
18.Contact us
For privacy enquiries, access or correction requests, or complaints:
- Post
- Privacy, JobPick, G.02D, 46–50 Kent Road, Mascot NSW 2020, Australia
This Policy was last updated on 1 October 2026.
Still have a question?
Tell us which part is unclear and we will explain it.