Privacy Policy

1. Introduction

Migrant Hub ("we", "us", "our") is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use the Migrant Hub platform.

2. What Personal Information We Collect

2.1 Account Information

• Full name
• Email address
• Password (stored in hashed form; never stored in plain text)
• Account type (individual applicant or MARA agent)
• Date of account creation

2.2 Visa and Immigration Profile Data

Where you choose to input or save this information:

• Nominated occupation(s) and ANZSCO codes
• Claimed points breakdown (age, English proficiency, qualifications, work experience)
• State/territory nomination preferences
• Visa subclass(es) of interest (e.g. 189, 190, 491)
• Country of citizenship or birth (used for eligibility filtering only)

This information is provided voluntarily to personalise your experience and is not shared with the Department of Home Affairs or any government body.

2.3 Usage Data

• Pages visited and features used
• Session duration and frequency
• Browser type, device type, and operating system
• IP address (anonymised after 30 days)

2.4 Communications

• Support request content and correspondence
• Feedback submitted through the Platform

3. How We Collect Personal Information

We collect personal information:

• Directly from you when you register, update your profile, or use Platform features
• Automatically through cookies and analytics tools as you interact with the Platform
• From third-party authentication providers if you use social sign-in (e.g. Google OAuth)

4. How We Use Your Personal Information

We use your personal information to:

• Create and manage your account
• Personalise visa analytics, points calculations, and dashboard views
• Send transactional emails (account verification, password reset, subscription receipts)
• Send product update communications (you may opt out at any time)
• Improve Platform features and fix technical issues
• Comply with legal obligations
• Detect and prevent fraud or misuse

We do not use your personal information for automated decision-making that produces legal or similarly significant effects without your knowledge.

5. Disclosure of Personal Information

We do not sell your personal information.

We may share it with:

5.1 Service Providers

Trusted third-party vendors who assist in operating the Platform, including:

• Cloud hosting (AWS — servers located in Australia/ap-southeast-2 where possible)
• Email delivery (Resend or equivalent transactional email provider)
• Authentication services
• Product analytics — PostHog (United States). Loaded only after you accept analytics on our consent banner.
• Error monitoring — Sentry (United States). Used to detect and diagnose technical errors; configured not to collect your IP address.

All service providers are bound by data processing agreements and are required to handle your data in accordance with Australian privacy standards.

5.2 De-identified and Aggregated Data

We may share non-personal, de-identified, or aggregated data with third parties for research, analytics, product development, or promotional purposes. This data cannot be used to identify you individually.

5.3 Legal Requirements

We may disclose personal information if required by law, court order, or a lawful request from a government authority.

5.4 Business Transfers

If Migrant Hub is acquired or merges with another entity, your personal information may be transferred. We will notify you via email before such a transfer takes effect.

We will never disclose your personal immigration profile data to the Department of Home Affairs, MARA, or any immigration authority.

6. Overseas Disclosure

Some of our service providers process data outside Australia. In particular, our product analytics provider (PostHog) and error-monitoring provider (Sentry) process data in the United States, and CDN edge nodes may be located in other countries. We take reasonable steps to ensure these providers comply with standards substantially similar to the APPs, consistent with APP 8.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption in transit (TLS 1.2+)
• Encryption at rest for stored personal data
• Role-based access controls for internal staff
• Regular security reviews and dependency auditing

Despite these measures, no internet transmission is completely secure. You use the Platform at your own risk and should use a strong, unique password for your account.

8. Data Retention

You may request deletion of your account and associated personal data at any time (see Section 10).

9. Cookies & Similar Technologies

We use cookies and similar browser local-storage technologies for:

• Session authentication — keeps you signed in (essential, always on)
• Your preferences, such as sidebar and filter settings (functional, always on)
• Product analytics via PostHog — pageviews and feature usage to help us improve the dashboard, stored in your browser's local storage (optional, loaded only with your consent)

When you first visit, a consent banner lets you accept or reject analytics. Essential and functional storage is always on because the Platform cannot work without it. You can change your choice at any time using the "Cookie preferences" link in the site footer, or through your browser settings.

We also use Sentry for error monitoring to detect and fix technical problems. It runs for all visitors as a legitimate interest and is configured not to collect your IP address, so it is not part of the analytics consent above.

Disabling essential cookies may affect Platform functionality.

10. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or outdated personal information
• Delete your account and personal data (subject to legal retention obligations)
• Opt out of marketing communications at any time
• Withdraw consent to analytics at any time via the "Cookie preferences" link in the site footer

To exercise any of these rights, contact us at support@migranthub.com.au . We will respond within 30 days.

11. Data Deletion Requests

If you wish to have your personal information erased and your account closed, you may submit a deletion request to support@migranthub.com.au . We will take reasonable steps to delete your personal information upon verifying your identity. Note that certain data may be retained where required by law (e.g. billing records under Australian tax law — see Section 8) or where legitimate business interests apply. We will inform you of any data we are unable to delete and the reason.

12. Complaints

If you believe we have mishandled your personal information, please contact us first at support@migranthub.com.au . If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes via email. The updated policy will be effective from the date posted.