Privacy Policy - NexAutoHub

1Introduction

NexAutoHub is operated by NexDesign Agency Pty Ltd (ACN 643 850 159), an Australian company based in Melbourne, Victoria. In this policy, "we", "us", and "our" refer to NexDesign Agency Pty Ltd.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the NexAutoHub platform, including our website, mobile applications, and related services (collectively, the "Platform").

We comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) and any applicable state or territory privacy legislation.

2Information We Collect

2.1 Information You Provide

Account details: Name, email address, phone number, password (hashed)
Profile information: Address, suburb, state, postcode, profile photo
Vehicle information: Make, model, year, registration, VIN, odometer readings
Booking details: Service requests, preferred dates/times, special instructions
Payment information: Processed securely by Stripe; we do not store card numbers
Communications: Support tickets, messages, reviews, and feedback
Provider information: Business name, ABN, qualifications, insurance documents, workshop photos

2.2 Information Collected Automatically

Device data: Browser type, operating system, screen resolution, device identifiers
Usage data: Pages visited, features used, time spent, click patterns
Location data: Approximate location (IP-based) and precise location (with your consent) for finding nearby providers
Log data: IP address, access times, referring URLs, error logs

2.3 Voice Agent Data

If you use our AI Voice Agent feature, we may process voice inputs to provide responses. Voice interactions are processed in real-time and may be temporarily stored to improve service quality. Transcripts may be retained for up to 30 days for quality assurance purposes.

3How We Use Your Information

We use your personal information to:

Provide, maintain, and improve the Platform
Process bookings, payments, and refunds
Connect you with suitable service providers based on location, vehicle, and service needs
Send booking confirmations, reminders, and status updates
Provide AI-powered recommendations and search results
Verify provider identity, qualifications, and insurance
Respond to support requests and resolve disputes
Prevent fraud, abuse, and security threats
Generate analytics to improve our services (aggregated, de-identified)
Comply with legal obligations

4How We Share Your Information

We do not sell your personal information. We may share information with:

Service Providers on the Platform

When you make a booking, relevant details (name, vehicle info, service requested) are shared with the provider to fulfil your service.

Third-Party Service Partners

Stripe — Payment processing and provider payouts
Google — Calendar sync, maps, and geocoding services
OpenAI — AI-powered search, recommendations, and chat features
Resend — Transactional email delivery
Vercel — Application hosting and analytics
Neon — Database hosting (encrypted at rest)

Legal Requirements

We may disclose information where required by law, regulation, legal process, or enforceable government request, or to protect the rights, safety, and property of NexAutoHub, our users, or the public.

5Data Security

We take data security seriously and implement appropriate technical and organisational measures, including:

TLS/SSL encryption for all data in transit
Encryption at rest for database storage
Passwords stored using bcrypt hashing (never in plain text)
Password reset tokens stored as SHA-256 hashes with automatic expiry
Role-based access controls and audit logging
Regular security reviews and dependency updates
PCI-DSS compliant payment processing via Stripe

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you of any breach as required by the Notifiable Data Breaches (NDB) scheme.

6Data Retention

We retain your personal information for as long as:

Your account is active
Needed to provide you services
Required by law (e.g., financial records retained for 7 years per ATO requirements)
Necessary to resolve disputes or enforce agreements

When you delete your account, we will remove or de-identify your personal information within 30 days, except where retention is required by law.

7Cookies & Tracking Technologies

We use cookies and similar technologies to:

Essential cookies: Maintain your session, authentication state, and security preferences
Functional cookies: Remember your preferences (location, search history, promo codes)
Analytics cookies: Understand how the Platform is used to improve our services

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent some Platform features from functioning correctly.

8Your Rights Under Australian Privacy Law

Under the Privacy Act 1988, you have the right to:

Access: Request a copy of the personal information we hold about you
Correction: Ask us to correct any inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal obligations)
Complaint: Lodge a complaint with us or the Office of the Australian Information Commissioner (OAIC)
Opt-out: Unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at the details below. We will respond to your request within 30 days.

9Children's Privacy

NexAutoHub is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete it promptly.

10International Data Transfers

Some of our third-party service partners operate outside Australia. When your data is transferred overseas, we ensure the recipient is bound by comparable privacy obligations or contractual arrangements that provide equivalent protection as required under APP 8.

Data may be processed in:

United States (Stripe, OpenAI, Vercel, Resend)
Australia (Neon database — Sydney region)

11Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a prominent notice on the Platform. Your continued use of NexAutoHub after changes are posted constitutes acceptance of the updated policy.

12Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

NexDesign Agency Pty Ltd

ACN 643 850 159

hello@nexdesign.agency

Melbourne, VIC, Australia

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).