Privacy Policy

1. Who we are

MysteryShopper.com.au Pty Limited (we, us) operates the MysteryShopper platform. This policy explains what personal information we collect from shoppers, business users and visitors to this site, why we collect it, and who we share it with. It applies alongside the Shopper Terms and the Business Terms.

2. What we collect

From shoppers: your name, email address and telephone number; the account you sign in with (Google, Microsoft, Apple, Facebook or your email address); the locations you save, your last known position while the app is open, and your location when you check in to and submit a job; the answers and photographs you submit for jobs and the conversation you have with our assistant while completing a job; the result of your identity verification, and a one-way fingerprint of the document used so that the same document cannot verify two accounts (the document itself is held by our verification provider, not by us); and, for payouts, the bank name, the last four digits and the currency of the account you gave Stripe. We never hold your account number.

From business users: your name and email address, your business's name, locations and members, the questionnaires you build, the jobs you post and the reports you receive.

From everyone: technical records such as your IP address, the requests you make and errors that occur, kept to run and secure the service. We use a cookie to keep you signed in. Site analytics are collected without cookies and without identifying you.

3. Why we collect it

To operate the platform: to match jobs to shoppers near them, to verify shoppers' identity, to pay shoppers, to deliver reports to the business that posted a job, to answer support requests, to detect fraud and misuse, to keep the service secure, and to meet our legal obligations, including tax and record-keeping. With your consent we may also send you marketing messages, and you may withdraw that consent at any time.

4. Who we share it with

With the business that posted a job: the report of that job, drawn from the answers and photographs submitted for it. A business never receives a shopper's name, contact details or location.

With providers who process information for us: Stripe for shopper payouts; our identity verification provider for shopper identity checks; hosting, storage and email delivery providers; a maps provider that turns addresses and coordinates into places; an AI provider that runs the assistant conversation and checks and scores what shoppers submit, including photographs; an error monitoring provider; and a site analytics provider. Some of these providers hold information outside Australia, including in the United States. We require them to protect it.

We do not sell personal information. We disclose it otherwise only where the law requires or permits, for example in response to a lawful request.

5. Storage and security

Information is encrypted in transit and stored with access limited to the people and systems that need it. We keep it while your account is active and afterwards for as long as the law or a genuine business need requires, then delete or de-identify it.

6. Access and correction

You may ask for a copy of the personal information we hold about you, or ask us to correct it, by writing to support@mysteryshopper.com.au. We respond within a reasonable time and may need to confirm your identity first.

7. Complaints

If you believe we have mishandled your information, write to us at the address above and we will investigate and reply. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner.

8. Changes

When this policy changes we publish a new version with a new date on this page.

9. Contact

MysteryShopper.com.au Pty Limited, support@mysteryshopper.com.au.