Privacy Policy
Last updated: 28 April 2026
SummitSwap AU Pty Ltd (“SummitSwap”, “we”, “us”, or “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and store your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. What Information We Collect
We collect the following types of personal information:
Account information
- Name and display name
- Email address
- Username and profile photo
- Location (city/region, as provided by you)
- Bio text
Listing and transaction data
- Photos you upload with listings
- Item descriptions, prices, and categories
- Purchase and sale history
- Shipping addresses associated with transactions
Communications
- Messages sent between buyers and sellers through the platform
- Support requests and correspondence with our team
Usage data
- Device type, browser, and operating system
- Pages visited and actions taken within the app
- IP address and approximate location derived from it
2. How We Collect Information
We collect information in the following ways:
- Directly from you — when you register, create a listing, make a purchase, or contact us.
- Automatically — through our platform infrastructure as you use the app (see Section 3 on Firebase).
- From third parties — if you sign in via a third-party provider (e.g. Google), we receive basic profile information from that provider in accordance with their terms.
3. Infrastructure: Firebase
SummitSwap uses Google Firebasefor authentication, database storage, and file storage. This means your account credentials, profile data, listings, messages, and uploaded photos are stored on Google's Firebase infrastructure.
Firebase services are operated by Google LLC and are subject to Google's data processing terms. Firebase servers used for our platform are located in the United States and may also utilise Google's global infrastructure. By using SummitSwap, you consent to your data being processed in this manner.
4. How We Use Your Information
We use your personal information to:
- Create and manage your account.
- Facilitate transactions between buyers and sellers.
- Display your public profile (name, username, listings) to other users.
- Send you transactional emails (purchase confirmations, dispute updates, account notifications).
- Respond to support requests and resolve disputes.
- Improve the platform through anonymised usage analytics.
- Comply with legal obligations, including fraud prevention.
We will not use your personal information for purposes beyond those described here without your consent.
5. We Do Not Sell Your Data
SummitSwap does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. Full stop.
6. When We May Disclose Your Information
We may share your information in the following limited circumstances:
- Other users — your public profile (display name, username, listings, rating, and location if set) is visible to other users. Your email address is never shared with other users.
- Service providers — we use third-party services including Resend (transactional email) to operate the platform. These providers process data only on our behalf and are bound by confidentiality obligations.
- Legal requirements — we may disclose information if required by law, court order, or to protect the rights and safety of SummitSwap and its users.
- Business transfers — if SummitSwap is acquired or merged, your data may be transferred as part of that transaction, with notice to you.
7. Your Privacy Rights
Under the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or out-of-date personal information.
- Request deletion of your account and associated personal data.
- Complain to us if you believe we have breached the Australian Privacy Principles.
To exercise any of these rights, contact us at support@summitswap.com.au. We will respond to requests within 30 days. Some data may be retained for legal or fraud-prevention purposes even after deletion.
8. Account and Data Deletion
You may request deletion of your account and personal data at any time by emailing support@summitswap.com.au with the subject line “Delete My Account”. Upon verified request, we will:
- Delete your account and profile data from our systems.
- Remove your active listings.
- Anonymise or delete transaction records associated with your account, subject to legal retention requirements.
Note that messages sent to other users may remain visible to those users even after your account is deleted, as they form part of the other user's transaction record.
9. Data Security
We take reasonable technical and organisational steps to protect your personal information from misuse, loss, and unauthorised access. These include encrypted data transmission (HTTPS), Firebase security rules, and access controls on our internal systems.
No method of internet transmission or electronic storage is 100% secure. If you become aware of a security issue affecting your account, contact us immediately at support@summitswap.com.au.
10. Children's Privacy
SummitSwap is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13 without parental consent, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email at least 14 days before the changes take effect. The latest version will always be available at summitswap.com.au/privacy.
12. Complaints
If you believe we have breached the Australian Privacy Principles, please contact us first at support@summitswap.com.au. We will investigate and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
13. Contact Us
Privacy Officer, SummitSwap AU Pty Ltd
support@summitswap.com.au