Privacy Policy
Last updated: 24 May 2026
This policy explains how 1Apprentice ("we", "us") collects, uses, stores, and discloses personal information. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. What we collect
When you create an account and use the Service, we collect:
- Identity: email, name, phone (apprentices), ABN + company details (employers).
- Profile: bio, location, state, industries, roles, experience, availability, certifications/licences, resume PDF, portfolio photos.
- Identity verification documents (apprentices only, optional): government ID and work-rights documents you upload when applying for the Verified badge. Held only while under admin review, then deleted as soon as the review is complete.
- Activity: applications, messages, saved jobs, saved searches, reviews you write or receive, blocks you set, reports you file.
- Technical: IP address (transient, not stored), browser type via Sentry error reports, basic engagement events.
2. How we use it
- To match apprentices with relevant job listings.
- To let employers review applicants and contact them on-platform.
- If you're an apprentice and you've explicitly opted in via your profile, to let approved employers find your profile while searching for candidates for a specific job they've posted (matched on your state and industry interests) and contact you about that job on-platform. You can turn this off any time. Employer discovery is also gated on your having completed identity verification.
- If you opt in to identity verification, your uploaded ID and work-rights documents are reviewed by 1Apprentice admins to confirm you're a real person with the right to work in Australia. Employers never see these documents. On a successful review, your profile gets a Verified badge. We use Twilio Verify to send an SMS one-time code to confirm your AU mobile; Twilio receives only the phone number and the OTP — not your name or other profile data.
- To send transactional emails (new applications, status updates, message digests, job alerts you opt into, direct messages from employers if you've opted in to discovery).
- To moderate the platform (admin review of reports + audit log of admin actions).
- To diagnose technical errors via Sentry.
3. Third parties we share with
| Provider | Purpose | Data shared |
|---|---|---|
| Auth0 (Okta) | Authentication | Email + login metadata |
| Convex | Database + backend hosting | All account + activity data |
| Resend | Transactional email delivery | Recipient email + email content |
| Sentry | Frontend error monitoring | Browser type + error stack traces (no PII) |
| Netlify | Static site hosting | None (frontend only) |
| Australian Business Register | ABN verification (employers) | ABN only |
| Twilio Verify | SMS one-time codes for apprentice phone verification | AU mobile number only (no name or other profile data) |
We do not sell your personal information.
4. How long we keep it
For as long as your account is active. When you delete your account, we permanently remove your profile, applications, threads, messages, saved jobs, saved searches, portfolio photos, resume, blocks you authored, reports you filed, and reviews you wrote or received. Admin audit log entries that reference your account are retained for moderation history.
Identity verification documents are held only for the duration of admin review and then permanently deleted (within minutes of the admin recording an approve/reject decision). The verification outcome and date are retained on your profile so we can keep showing your Verified badge — but the source documents themselves are gone. If you delete your account while a submission is still in review, the documents are deleted as part of that cascade.
5. Your rights
Under Australia's Privacy Act 1988, you have rights under Australian Privacy Principle 11 — Security of personal information and Australian Privacy Principle 12 — Access to personal information. In practice that means:
- Access: Download the file (JSON) from your profile page → "Download my data". It contains everything we hold on you.
- Correction: Edit any profile field directly in your profile.
- Deletion: Delete your account from your profile page → "Delete my account". This cascades through every table we hold.
- Email opt-out: Toggle off "Email me about activity" in your profile, or click the unsubscribe link in any email footer.
- Complaint: If you believe we've mishandled your information, contact us; if unresolved you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).
6. Security
Authentication is handled by Auth0 (SOC 2 Type II). All data in Convex is encrypted in transit and at rest. Resume + portfolio uploads are content-type validated and size-capped (5 MB / 2 MB respectively). We don't store passwords ourselves.
7. Cookies and storage
We use first-party browser storage for your active Auth0 session. No tracking cookies, no analytics cookies, no advertising cookies.
8. Children
The Service is not directed at children under 15. We do not knowingly collect personal information from anyone under 15.
9. International transfers
Convex and Sentry host data in the United States. By using the Service you consent to your information being processed in jurisdictions outside Australia.
10. Changes
Material changes to this policy will be notified via email and an in-app notice. Continued use after the effective date constitutes acceptance.
11. Contact
Privacy questions: team@1apprentice.com.au or use the contact form.