HaulMatch

Privacy Policy

Last updated: 26 July 2026

HAULMATCH PTY LTD (ABN 63 700 281 045, ACN 700 281 045), trading as HAULMATCH ("we", "us"), is committed to handling personal information in accordance with applicable Australian privacy law. This policy explains what we collect, why, how it is disclosed and the choices available to you.

1. What we collect

Depending on how you use HaulMatch, we may collect:

  • Account details: name, email address, password (hashed), and role.
  • Contact and tax details: phone number, legal or business name, date of birth where required for individual seller reporting, ABN, GST status and tax-reporting address.
  • Verification documents: driver licence number and expiry, vehicle registration, insurance certificate, proof of address, and identity documents.
  • Job and bid data: pickup and drop-off locations, load details, prices, and messages.
  • Location, delivery photographs, profile images and facial verification images.
  • Payment, wallet, payout and payment-provider identifiers, but not full card details.
  • Support tickets, complaint evidence, ratings and notification preferences.
  • Push-notification tokens and organisation or team membership information.
  • Business consultation details, including your company, contact details, operating regions, approximate freight volume or fleet size, and the requirements you choose to provide.
  • Android beta access requests, including email address and the campaign or page that referred you.
  • Technical data: IP address, browser type, device information, and access logs, collected automatically when you use the Platform.

If you request a business or fleet consultation, we use those details to assess and respond to your enquiry. A consultation request does not subscribe you to marketing. Consultation records are removed after 12 months without activity unless we need to retain them for an active relationship or a legal obligation.

If you request Android beta access, we use your email only to add you to the closed test, send installation instructions and provide beta support. Beta request records are removed after 12 months without activity.

2. Why we collect it

We use your personal information to:

  • Provide and operate the Platform, including matching shippers with drivers.
  • Verify the identity, eligibility, and credentials of drivers.
  • Process payments and handle disputes.
  • Send transactional messages and, with consent or where otherwise permitted, load alerts.
  • Detect and prevent fraud, abuse, or security incidents.
  • Comply with our legal obligations.

3. How we store and protect it

Personally identifiable information on user accounts is encrypted at rest using AES-256-GCM. Passwords are hashed using a modern key-derivation function and never stored in plain text. Access to production systems is restricted to authorised personnel and audited.

4. Who we share it with

We share the minimum information necessary with:

  • Other users — only the information needed to complete a job, such as a driver's public profile, ratings, and contact details once a bid is accepted.
  • Service providers used for hosting, databases, email and SMS (including Resend and Twilio), payments and payouts (including Stripe where enabled), push notifications (Firebase), maps and geocoding (Google, Geoapify, OpenStreetMap and OSRM services), analytics (Google Analytics) and advertising measurement (Meta Pixel). The enabled providers depend on Platform configuration.
  • Law enforcement or regulators where we are required by law, or where we reasonably believe disclosure is necessary to prevent harm or fraud.
  • The Australian Taxation Office where HaulMatch is required to report seller identity, payout-account identifiers and transaction totals under the Sharing Economy Reporting Regime.

We do not sell personal information. Where advertising measurement is enabled, Meta and similar providers may receive device, browser and interaction information under their own privacy terms. We do not provide identity documents to advertising providers.

5. Overseas disclosures

Some providers process or store information outside Australia, including in the United States and other locations described in their service terms. Provider locations can change, so contact us for the current list. We take reasonable steps required by applicable law when engaging overseas service providers.

6. Cookies and analytics

We use necessary cookies for authentication, security and organisation selection. Where configured, Google Analytics measures Platform use and Meta Pixel measures page visits and conversion events. These tools may use cookies or similar identifiers. You can use available cookie controls or browser controls; disabling necessary cookies may prevent login. We will obtain consent before non-essential tracking where required.

7. Your rights

Under the APPs, you have the right to:

  • Request access to the personal information we hold about you.
  • Request correction of information that is inaccurate, out of date, or incomplete.
  • Request deletion of your account and associated personal information, subject to legal record-keeping requirements.
  • Make a complaint about how we have handled your personal information.

To exercise any of these rights, email [email protected]. We will respond within a reasonable period, generally within 30 days.

8. Retention

We keep personal information only as long as needed to provide the Platform, meet our legal obligations (including taxation and dispute records), and protect against fraud. Security request logs are generally retained for 14 days and access-audit logs for up to 365 days, subject to configuration and incident holds. Deactivated accounts may be retained before de-identification. Completed job, tax, ledger and dispute and SERR reporting records may be retained for the applicable legal period, generally at least five years where tax law requires it. An account-erasure request removes or de-identifies account contact and verification data while retaining records that must lawfully be kept.

9. Automated decisions

The Platform uses rules to match loads, deliver notifications, detect risk and apply verification or payment safeguards. We will update this policy before 10 December 2026 if a computer program is arranged to make decisions that significantly affect an individual's rights or interests and additional disclosure is required.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify users of material changes by email or via the Platform. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact and complaints

Privacy questions, requests, and complaints can be sent to [email protected] or by calling +61 472 768 404. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.