Oonsa - Event & Entertainment Services

PRIVACY POLICY

Isan Group Pty Ltd (ACN: 666 881 107, ABN: 44 666 881 107) trading as Oonsa

Last Updated: November 2025

INTRODUCTION

This Privacy Policy (“Policy”) explains how Isan Group Pty Ltd trading as Oonsa (“Oonsa,” “we,” “us,” “our”) collects, uses, discloses, and manages personal information. Users accept and acknowledge that Oonsa assumes zero liability for any privacy-related matters, data security breaches, or unauthorized access to personal information.

Important Commitment: Oonsa commits that we will never knowingly misuse, sell, or exploit user data for any purpose other than those explicitly stated in this Policy. However, users acknowledge and accept that Oonsa assumes zero liability if data misuse occurs despite this commitment, including through unauthorized third-party access or third-party service provider violations.

Oonsa Services are currently available to Australian customers only. This Policy applies exclusively to users with accounts in Australia or using Services performed in Australia.

By accessing www.oonsa.com or the Oonsa mobile application (together, the “Services”), you:

  • Accept these Terms and Conditions (link to T&Cs here)
  • Accept this Privacy Policy in its entirety
  • Accept ALL liability for your own personal information security
  • Consent to collection, use, and disclosure as described, at your own risk
  • Release Oonsa from any privacy-related liability whatsoever
  • Accept that your data may be processed by third-party service providers with their own privacy policies

Important: You must be 18+ years old to use Services. If under 18, do not use the Platform.

OONSA’S COMMITMENT ON DATA MISUSE

Oonsa’s Pledge:

Oonsa commits and pledges that:

  • Oonsa will never knowingly misuse, exploit, or improperly handle user personal data
  • Oonsa will never knowingly sell user data to third parties for profit
  • Oonsa will never knowingly use user data for purposes other than those disclosed in this Policy
  • Oonsa will never knowingly disclose user data to competitors or hostile third parties
  • Oonsa will never knowingly use user data for discrimination, harassment, or illegal purposes

However, Users Accept That:

  • This commitment does not eliminate Oonsa’s zero liability policy
  • Oonsa assumes zero liability if data misuse occurs despite this commitment
  • Oonsa assumes zero liability for data misuse by third-party service providers
  • Oonsa assumes zero liability for unauthorized access or breach-based misuse
  • This commitment does not create any liability for Oonsa in breach scenarios
  • Users release Oonsa from liability even if misuse occurs in violation of this pledge

While Oonsa commits never to knowingly misuse data, users acknowledge that all liability for any data misuse, breach, or unauthorized access remains entirely with the user, and Oonsa’s liability remains zero even if Oonsa’s commitment is violated.

1. COLLECTION OF YOUR PERSONAL INFORMATION

Oonsa Collects Information For Platform Operation. You Accept All Risks Associated With Providing This Information.

Information You Voluntarily Provide

You acknowledge that you provide the following information at your own risk and assume all liability for its security:

Account Registration & Setup:

  • Full name, email address, phone number, residential address
  • Birth date and gender
  • Location and preferred service areas
  • Payment information (credit card, bank account details) processed by Stripe
  • Occupation, work experience, resume, qualifications, education, skills
  • Photos or videos (optional; associated with your Oonsa user ID)

Service Usage:

  • Posted Tasks (service requests you create)
  • Vendor offers and bids
  • Task ratings, reviews, and feedback
  • Comments and public communications
  • References provided via Reference feature
  • Communication history with other Users
  • Any information you voluntarily post on the Platform

Job Applications:

  • Resume, online profile links, application information submitted via third-party provider

Contact & Communication:

  • Enquiries, support requests, complaints
  • Feedback, surveys, questionnaires
  • Records of communications between you and Oonsa
  • Any information you provide to Oonsa directly

You Accept Responsibility:

  • You are solely responsible for accuracy of all information you provide
  • You are solely responsible for updating your account when personal details change
  • Oonsa accepts zero responsibility if information you provide is inaccurate, false, or misleading
  • Oonsa accepts zero liability for consequences of inaccurate information you provide

2. AUTOMATIC INFORMATION COLLECTION

When Using Services, Oonsa Automatically Collects Information Via Technology. You Accept All Risks Associated With Automatic Data Collection.

You Acknowledge and Accept:

  • Oonsa collects technical data automatically when you use Services
  • You have the right to disable cookies via browser settings (which may prevent Services from functioning)
  • Automatic collection occurs whether or not you consent
  • You assume all risk and liability for information collected automatically

Technical Information Collected:

  • IP address and unique device ID
  • Browser type, operating system, device information
  • Pages visited, time spent, clickstream data
  • Referral source and traffic patterns
  • Web log information
  • Session and sign-in data

Location Data Collected:

  • GPS coordinates (if enabled on your device)
  • Location data when Oonsa app is running
  • General geographic region from IP address
  • Precise location confirmations via various technologies

Cookies & Tracking Technologies:

  • Session information and sign-in data
  • User preferences and saved searches
  • Browsing history and usage patterns
  • Analytics data via cookies and similar technologies
  • Advertising and profiling data

Your Responsibility:

  • You are solely responsible for disabling location services on your device
  • You are solely responsible for adjusting browser/OS cookie settings
  • Oonsa accepts zero responsibility if location data is collected despite your device settings
  • Oonsa accepts zero liability for any consequences of automatic data collection
  • You assume all risk of data collection through your device hardware and software

3. THIRD-PARTY SERVICE PROVIDERS & INFRASTRUCTURE

Oonsa Platform Uses Third-Party Services For Data Processing & Infrastructure. You Accept All Risks Associated With Third-Party Data Handling.

Critical Notice:

Your personal data is processed by multiple third-party service providers, infrastructure providers, and technology platforms. These third parties have their own privacy policies, data handling practices, and security measures. Oonsa assumes zero liability for third-party data handling, security practices, breaches, or privacy violations.

Third-Party Services Used By Oonsa Platform (Include But Not Limited To):

Cloud Infrastructure & Hosting:

Payment Processing & Financial:

Content Delivery & Performance:

Analytics & Monitoring:

Email & Communication:

Authentication & Identity:

Advertising & Marketing:

Security & Monitoring:

Other Supporting Services (May Include):

You Accept Responsibility For Third-Party Data Handling:

  • You are solely responsible for reviewing third-party privacy policies (links provided above)
  • Oonsa assumes zero responsibility for third-party privacy practices
  • Oonsa assumes zero liability if third-party providers breach, mishandle, or misuse your data
  • Oonsa assumes zero liability if third-party services experience security incidents
  • Your data is subject to each third-party provider’s terms, conditions, and privacy policies
  • You release Oonsa from all liability related to third-party data handling

Important:

When your personal information is transferred to these third-party service providers, it is governed by:

  1. Each provider’s individual privacy policy (linked above)
  2. That provider’s data handling practices and security measures
  3. That provider’s terms of service and data processing agreements
  4. Any applicable laws in the provider’s jurisdiction

Oonsa does not control these third-party services and accepts zero responsibility for their privacy practices, data security, compliance, or data breaches.

4. INFORMATION FROM THIRD PARTIES

Oonsa May Collect Information From Third Parties. You Accept All Liability For Third-Party Data Handling.

Sources Include:

  • Social media sites you connect to your account (Facebook, LinkedIn, Twitter)
  • Identity verification service providers
  • Background check and police history check providers
  • Publicly available information (court decisions, government records)
  • Data and marketing partners
  • Other Oonsa group companies
  • Other Users who reference you or provide information about you
  • Third-party service providers listed in Section 3 above

You Accept:

  • Oonsa assumes zero responsibility for accuracy of third-party information
  • Oonsa accepts zero liability for third-party data handling, security, or practices
  • You assume all liability for consequences of third-party information
  • Oonsa is not responsible for third-party privacy breaches or misuse of your data
  • You release Oonsa from any liability related to third-party information collection or use

Third-Party Verification & Background Checks:

  • Oonsa engages third-party providers to conduct police checks and background verification
  • Oonsa assumes zero responsibility for accuracy, security, or misuse of verification results
  • You assume all liability for consequences of background check results
  • Oonsa accepts zero liability if third-party providers breach, mishandle, or misuse verification information

5. WHAT OTHER USERS CAN SEE ABOUT YOU

Your Information is Public. You Accept All Risks of Public Disclosure.

When you use Services, you are NOT anonymous:

  • Your user ID, all posted content (tasks, bids, comments, feedback) is visible to other Users and publicly searchable
  • Your profile, reputation rating, and Badges are visible to other platform Users
  • Your location and service areas may be visible depending on Posted Tasks
  • Your photo or video (if uploaded) is visible to Users who have your user ID
  • Your reviews and ratings are displayed publicly on your profile

You Accept Full Liability For Public Information:

  • Oonsa accepts zero responsibility for disclosure of your public information
  • You are solely responsible for content you post publicly
  • You assume all liability for misuse, unauthorized access, or abuse of your public information by other Users
  • You release Oonsa from any liability for public disclosure or misuse of your information

Important: Oonsa does not control or accept responsibility for how other Users, third parties, or internet users utilize information you voluntarily post in public areas of the Services.

6. HOW OONSA USES YOUR PERSONAL INFORMATION

Oonsa uses your personal information for the following purposes. You Accept All Uses At Your Own Risk.

Service Provision & Account Management

  • Identification and authentication to access Services
  • Verification of authorized Users
  • Provision and maintenance of Services
  • Processing payments and fees

Safety & Security (Limited)

  • Identifying potential fraud or abuse
  • Conducting background and police history checks on Vendors
  • Preventing prohibited activity
  • Complying with legal and regulatory requirements
  • However, Oonsa accepts zero liability if fraud, abuse, or prohibited activity occurs despite these measures

Service Improvement & Development

  • Analyzing Platform usage to improve Services
  • Developing new features
  • Conducting user research and feedback collection
  • Data analytics and user engagement metrics

Communication & Notifications

  • Account updates, security alerts, service changes
  • Administering User Agreement compliance
  • Responding to inquiries and support requests
  • Notifying of breaches or copyright claims
  • Account maintenance notifications

Marketing & Promotion (With Consent)

  • Delivering targeted marketing communications (opt-in only)
  • Promoting new services and features
  • Providing interest-tailored content and advertising
  • Marketing to potential users
  • Data analytics for marketing purposes
  • Profiling and audience segmentation

User Reviews & Ratings

  • Compiling and displaying public ratings and reviews
  • Sharing feedback with other Users seeking Vendors
  • Aggregating feedback for reputation scores

Legal & Compliance

  • Responding to court orders and regulatory requirements
  • Complying with law enforcement requests
  • Enforcing Terms and Conditions
  • Pursuing or defending legal claims
  • Investigating violations and breaches

Other Purposes

  • Accounting, invoicing, and billing
  • Responding to your inquiries
  • Developing relationships with affiliate service providers
  • Generating aggregated, non-personally identifiable reports
  • Any purpose with your consent

Oonsa Accepts Zero Liability For How Information Is Used:

  • You accept all risk and liability for how Oonsa uses your information
  • Oonsa accepts zero liability for misuse, unauthorized use, or improper use of your personal information
  • You cannot hold Oonsa liable for any consequences of information use
  • You release Oonsa from all liability related to information usage

7. HOW OONSA SHARES YOUR PERSONAL INFORMATION

Oonsa May Share Your Information With Third Parties. You Accept All Risks of Information Sharing.

Oonsa May Disclose Your Information To:

Affiliated Companies & Service Providers

  • Other Oonsa group companies
  • Stripe Payment Provider and payment processors
  • Email service providers (SendGrid, Twilio)
  • Verification service providers and background check companies
  • Analytics providers (Google Analytics, Segment, Mixpanel)
  • Cloud infrastructure providers (AWS, DigitalOcean, Vercel)
  • Content delivery and security providers (Cloudflare, Fastly)
  • Authentication and identity providers (Auth0, Okta)
  • Monitoring and error tracking (Sentry, DataDog)
  • Customer support providers
  • Technical infrastructure and hosting providers
  • Consultants, advisors, and professional service providers

Third-Party Service Providers Listed in Section 3: All third-party service providers identified in Section 3 above may receive and process your personal information. Each provider has its own privacy policy (linked in Section 3).

Analytics & Advertising Partners

  • Google Analytics and similar analytics services
  • Network Advertising Initiative members
  • Digital Advertising Alliance members
  • Third-party advertisers
  • Analytics partners for user engagement
  • Look-alike audience creation services

Other Users

  • Ratings, reviews, and feedback about you (public on profile)
  • User ID and posted content
  • Verification status and Badges
  • Information when other Users request details about you

Law Enforcement & Regulatory Entities

  • Law enforcement and regulatory agencies (as required by law)
  • Courts, tribunals, and judicial entities
  • Public safety authorities
  • Any entity required by court order or legal obligation

Marketing & Referrals (With Consent)

  • Marketing partners and affiliate service providers
  • Users who refer you (if you are contacted via referral)
  • Third parties for marketing initiatives

Business Transfers

  • Potential acquirers if Oonsa is sold or merged
  • Receivers or administrators in insolvency/bankruptcy
  • Successor or assignee of Oonsa business or assets

With Your Permission

  • Any third party with your explicit consent

You Accept All Liability For Information Sharing:

  • Oonsa accepts zero liability for third-party use of your information
  • Oonsa assumes zero responsibility for third-party privacy practices or data handling
  • You assume all liability for consequences of information sharing with third parties
  • You release Oonsa from all liability related to third-party disclosure or use of your information
  • Oonsa accepts zero responsibility if third parties misuse, breach, or mishandle your information

Important: Oonsa does not control third parties and accepts zero responsibility for their privacy practices, data security, or use of your information. All third parties listed in Section 3 have their own privacy policies (provided above).

8. COOKIES AND TRACKING TECHNOLOGIES

Oonsa Uses Cookies & Tracking Technologies. You Accept All Risks Associated With Tracking.

Types of Cookies & Technologies Used:

Strictly Necessary Cookies

  • Required for Services operation and security
  • Enable account access and sign-in
  • Prevent fraudulent activity
  • Cannot be disabled without affecting Services

Functionality Cookies

  • Enhance user experience and personalization
  • Remember preferences and saved searches
  • Track browsing history

Performance & Analytics Cookies

  • Measure Platform performance
  • Analyze visitor behavior and traffic
  • Improve content and layout
  • Powered by third-party analytics services (Google Analytics, Segment, Mixpanel)

Advertising Cookies

  • First-party and third-party personalized ads
  • Track ad effectiveness
  • Deliver interest-relevant advertising
  • Powered by third-party advertising services

You Accept Full Responsibility For Cookies:

  • You are solely responsible for adjusting browser or OS settings to disable cookies
  • Oonsa accepts zero liability if cookies track you despite your device settings
  • You assume all risk of data collection through cookies and tracking technologies
  • Disabling cookies may prevent certain Services features from functioning
  • Oonsa accepts zero responsibility if Services malfunction due to disabled cookies

Third-Party Cookie Opt-Out:

You Accept:

  • You are solely responsible for opting out of third-party tracking
  • Oonsa accepts zero liability if third-party cookies continue to track you
  • You assume all risk of tracking by third-party analytics and advertising services

9. SECURITY OF YOUR PERSONAL INFORMATION

Oonsa Takes Limited Security Measures. You Accept All Risks of Data Breach, Loss, or Unauthorized Access.

Security Measures Implemented (Not Guaranteed):

  • Password protection on user accounts
  • Data encryption (TLS/SSL) during transmission
  • Encryption for sensitive data at rest
  • PCI DSS Level 1 compliance for payment data
  • Restricted access controls and employee confidentiality agreements
  • Regular security audits and penetration testing
  • Secure backup and disaster recovery procedures
  • Infrastructure security provided by third-party providers (AWS, DigitalOcean, Vercel, Cloudflare, Fastly)

Critical Limitations & Disclaimers:

Oonsa Provides NO GUARANTEES of security:

  • No system is completely secure from third-party interception, viruses, or attacks
  • Internet transmission of personal data is NOT guaranteed to be encrypted
  • Oonsa CANNOT ensure or warrant complete privacy or security of your personal information
  • You transmit personal information at your own risk

Third-Party Infrastructure Security:

  • Oonsa relies on third-party infrastructure providers for data security
  • Each provider’s security is governed by their own privacy policies and security standards
  • Oonsa assumes zero liability for third-party infrastructure security failures
  • Security policies of AWS, DigitalOcean, Vercel, Cloudflare, and other providers apply to your data

You Accept All Liability For Data Security:

  • You are entirely responsible for maintaining password and account security
  • Oonsa accepts ZERO liability for data breaches, unauthorized access, or loss of personal information
  • You assume ALL risk of data theft, hacking, or compromise
  • Oonsa accepts zero liability if your information is stolen, intercepted, or misused
  • You cannot hold Oonsa liable for any consequences of data breaches or security failures
  • You release Oonsa from all liability related to data security

Data Breach Notification:

  • If Oonsa experiences a data breach involving your personal information that meets Privacy Act thresholds, Oonsa will attempt to notify you within 30 days
  • However, Oonsa assumes zero liability for data breaches or notification delays
  • Notification does not constitute acceptance of liability for the breach

10. THIRD-PARTY WEBSITES AND SERVICES

Services May Link to Third Parties. Oonsa Assumes Zero Liability For Third-Party Practices.

The Services may contain links to third-party websites, affiliate service providers, advertisers, payment systems, and verification services.

Third parties have their own privacy policies, terms of use, and security statements.

Oonsa Assumes ZERO Responsibility For:

  • Third-party privacy practices or policies
  • Third-party use of your personal information
  • Third-party data security or data breaches
  • Third-party website malware or viruses
  • Verification services obtained through third parties
  • Accuracy or security of third-party services
  • Any consequences of using third-party services

You Accept:

  • Oonsa accepts zero liability for third-party websites or services
  • You assume all liability for information shared with third parties
  • You release Oonsa from all liability related to third-party services
  • Carefully review third-party privacy policies before sharing information
  • When using third-party services (e.g., Stripe), you are subject to their terms and policies

11. INTERNATIONAL DATA TRANSFERS

Australia-Only Service. Oonsa Assumes Limited Data Protection Responsibility.

As Oonsa Services are currently available to Australian customers only, personal information is primarily processed in Australia. However, information may be transferred to:

  • Oonsa group companies or affiliates
  • Service providers located outside Australia (AWS US regions, DigitalOcean, Vercel, GitHub, Cloudflare, etc.)
  • Backup or disaster recovery systems outside Australia

You Accept:

  • You assume all risk of international data transfers
  • Oonsa accepts zero liability for data security during international transfers
  • Oonsa accepts zero liability if international service providers breach or mishandle your data
  • You release Oonsa from liability related to overseas data handling
  • Your data may be processed in multiple countries by third-party service providers

12. MARKETING COMMUNICATIONS

Oonsa May Send Marketing Communications. You Control Your Preferences.

Opt-In & Opt-Out:

When you register, you may opt-in or opt-out of marketing communications. To change preferences:

  • Go to ‘Manage Account’ → ‘Settings’ → ‘Notification Settings’
  • Click “unsubscribe” in any marketing email
  • Email support@oonsa.com with opt-out request

Referral Marketing: You may be contacted as result of referral from another User. To opt-out of referral system, email support@oonsa.com.

Administrative Messages: Oonsa reserves the right to send administrative and account-related messages even if you opt out of marketing, including:

  • Security alerts and breach notifications
  • Account updates and service changes
  • Legal notices and compliance matters
  • Payment and billing notifications

You Accept:

  • You are solely responsible for managing your marketing preferences
  • You assume all liability for marketing communications you receive
  • Oonsa accepts zero liability for unwanted marketing communications

13. SENSITIVE INFORMATION

Oonsa May Collect Sensitive Information. You Accept All Risks Associated With Sensitive Data.

Sensitive Information Includes:

  • Police and background check results
  • Health and disability information
  • Biometric information
  • Racial or ethnic origin information
  • Political opinions or activities
  • Religious or philosophical beliefs
  • Professional association membership
  • Criminal record or proceedings information

Oonsa’s Handling of Sensitive Information:

When Oonsa collects sensitive information:

  • Oonsa attempts to obtain your consent before collection
  • Sensitive information is used only for directly related purposes
  • Sensitive information is NOT used for data analytics
  • Sensitive information is handled with additional security measures
  • Sensitive information may be shared with third-party verification providers

You Accept All Liability:

  • You are solely responsible for consenting to sensitive information collection
  • You assume all liability for consequences of sharing sensitive information
  • Oonsa accepts zero liability for sensitive information security or misuse
  • Oonsa accepts zero liability if sensitive information is breached or disclosed
  • You release Oonsa from all liability related to sensitive information

Police Checks & Background Verification:

  • If you are a Vendor, Oonsa may conduct police checks and background verification
  • You consent by using the Platform as a Vendor
  • You assume all liability for consequences of background check results
  • Oonsa accepts zero liability if verification results are inaccurate, breached, or misused
  • Third-party verification providers process sensitive information per their own privacy policies

14. YOUR RIGHTS AND CHOICES (AUSTRALIAN PRIVACY PRINCIPLES)

You Have Certain Rights Under Privacy Act. Oonsa Assumes Limited Compliance Liability.

Access to Personal Information

You may request access to personal information Oonsa holds. Contact Oonsa using details in Section 17 below.

Oonsa’s Obligations:

  • Oonsa will attempt to provide access within 30 business days
  • Oonsa may refuse access if legally permitted
  • Oonsa assumes zero liability for access delays or refusals

Correction of Personal Information

You may request correction of inaccurate or incomplete information.

Oonsa’s Obligations:

  • Oonsa will attempt to correct information within 30 business days
  • Oonsa may refuse correction if legally permitted
  • If Oonsa refuses, you may request notation of your correction request
  • Oonsa assumes zero liability for accuracy of corrected information
  • Oonsa assumes zero liability for correction delays or refusals

Deletion of Personal Information

You may request deletion of personal information (including permanent account deletion).

Oonsa’s Obligations:

  • Oonsa will attempt to delete information within 30 business days
  • Residual copies on active servers and backup systems may not be immediately deleted
  • Information may be retained if required by law or for legal defense
  • Aggregated or anonymized information may be retained
  • Data stored on third-party infrastructure (AWS, DigitalOcean, etc.) is governed by those providers’ deletion policies
  • Oonsa assumes zero liability for deletion delays or incomplete deletion
  • Oonsa assumes zero liability for any consequences of data retention

Withdrawal of Consent

You may withdraw consent for processing personal information at any time.

Oonsa may still process information if:

  • Required or permitted by law
  • Necessary to exercise or defend legal rights
  • Required for legal or regulatory obligations

Complaints About Privacy

If you have concerns about Oonsa’s privacy practices:

Internal Process:

  1. Contact Oonsa: privacy@oonsa.com or support@oonsa.com
  2. Subject line: “PRIVACY COMPLAINT”
  3. Include complaint details
  4. Oonsa acknowledges within 7 business days
  5. Oonsa investigates and responds within 30 business days

Oonsa Accepts Limited Liability:

  • Oonsa assumes zero liability for complaint investigation delays
  • Oonsa assumes zero liability for complaint resolution outcomes
  • Oonsa accepts zero responsibility for privacy violations discovered in complaints

External Complaint (OAIC): If you are not satisfied with Oonsa’s response, you may lodge complaint with:

Office of the Australian Information Commissioner (OAIC)

You Accept:

  • You assume all liability for complaint outcomes
  • Oonsa accepts zero liability for OAIC investigations or determinations
  • Oonsa assumes zero responsibility for OAIC findings

Location Information

You can prevent location data collection through device OS settings. You assume all liability if location data is still collected despite settings.

Do Not Track Signals

Oonsa does not respond to Do Not Track browser signals. You may disable cookies through browser settings.

15. DATA RETENTION

Oonsa retains personal information for as long as necessary for collection purposes, as required by law, or for legal defense.

Retention Decisions Consider:

  • Legal and regulatory requirements
  • Limitation periods for legal action
  • Operational requirements of business
  • Good industry practice
  • Third-party service provider retention policies

After Use Has Ended:

Oonsa will attempt to delete, destroy, or anonymize information. Residual copies on active servers and backup systems may not be immediately deleted. Data stored with third-party providers (AWS, DigitalOcean, Vercel, etc.) is subject to those providers’ retention and deletion policies.

You Accept:

  • You assume all liability for data retention consequences
  • Oonsa accepts zero liability for retention delays or incomplete deletion
  • You release Oonsa from liability related to data retention
  • Third-party service providers’ deletion policies may differ from Oonsa’s

16. CHILDREN’S PRIVACY

Oonsa does NOT knowingly collect information from children under 18.

If a child provides personal information to Oonsa, please alert immediately using contact details in Section 17 below.

17. CONTACT US & COMPLAINTS

For questions about this Privacy Policy or your personal information, contact:

Oonsa (Isan Group Pty Ltd)

Complaint Process:

  1. Email privacy@oonsa.com with “PRIVACY COMPLAINT” subject
  2. Include complaint details and privacy impact
  3. Oonsa acknowledges within 7 business days
  4. Oonsa responds within 30 business days
  5. If unresolved, contact OAIC: 1300 363 992 or www.oaic.gov.au

18. POLICY UPDATES

Oonsa may update this Privacy Policy at any time. Material changes will be notified via:

  • Email to your registered email address
  • Notice on your Oonsa account
  • Website update

You should check this Policy regularly for updates. Continued use of Services after updates constitutes acceptance.

19. THIRD-PARTY SERVICE PROVIDER PRIVACY COMMITMENTS

Important: The following third-party service providers handle your data per their own privacy policies (linked in Section 3):

You Acknowledge That:

  • Each third-party provider has independent privacy obligations
  • Each provider’s privacy policy governs their handling of your data
  • Oonsa does not control third-party providers’ privacy practices
  • Oonsa assumes zero liability for third-party provider privacy compliance
  • You should review each provider’s privacy policy (links in Section 3)
  • Third parties may update their privacy policies independently
  • Your data security depends partially on third-party provider security measures

Key Third-Party Providers:

20. AUSTRALIAN PRIVACY PRINCIPLES COMPLIANCE

Oonsa complies with Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs) to the extent required by law.

You Accept:

  • Oonsa assumes minimal liability for APP compliance
  • You assume all liability for privacy-related consequences
  • You release Oonsa from liability related to Australian Privacy Principles

For More Information: www.oaic.gov.au

21. COMPLETE RELEASE OF LIABILITY

BY USING THE OONSA PLATFORM, YOU IRREVOCABLY RELEASE OONSA FROM ALL PRIVACY-RELATED LIABILITY, INCLUDING:

1. Data Security & Breaches

  • Data theft, hacking, or unauthorized access
  • Malware, viruses, or system compromise
  • Payment card fraud or financial compromise
  • Identity theft or fraudulent use of your information
  • Third-party infrastructure breaches (AWS, DigitalOcean, etc.)

2. Third-Party Privacy Violations

  • Third-party misuse or disclosure of your information
  • Third-party data breaches involving your information
  • Third-party unauthorized access or sale of your data
  • Third-party marketing or spam based on your information
  • Service provider privacy violations

3. Information Accuracy & Completeness

  • Inaccuracy of information you provide
  • Incomplete or outdated information
  • Verification failures or accuracy gaps
  • Consequences of inaccurate personal information

4. Information Use & Misuse

  • Unauthorized use of your personal information
  • Improper use of your information by Oonsa or third parties
  • Marketing communications or solicitations
  • Profiling or discrimination based on your information

5. Public Disclosure & Visibility

  • Public visibility of your profile, posts, or information
  • Other User access to your information
  • Search engine indexing of your public information
  • Consequences of public disclosure

6. Cookies & Tracking

  • Tracking via cookies despite your settings
  • Third-party tracking and analytics
  • Location tracking or geolocation data
  • Advertising tracking and profiling

7. International Transfers & Third-Party Infrastructure

  • Data transfer to international service providers
  • International data security or handling
  • Consequences of overseas data storage
  • Third-party infrastructure security failures
  • Data processing in multiple countries

8. Regulatory Compliance Failures

  • Privacy Act violations or non-compliance
  • Australian Privacy Principles breaches
  • Notifiable Data Breaches Scheme failures
  • Regulatory penalties or enforcement actions

YOU ACCEPT AND ACKNOWLEDGE:

  • Oonsa accepts ZERO LIABILITY for any privacy-related matter
  • You assume 100% LIABILITY for your personal information security and privacy
  • You release Oonsa from ALL liability related to privacy, data security, or information handling
  • This release applies regardless of negligence, fault, or breach by Oonsa
  • This release includes third-party service provider failures and breaches

22. OONSA’S NO INTENTIONAL MISUSE COMMITMENT

Oonsa Reiterates:

Oonsa will never knowingly misuse, exploit, or improperly handle user data. Oonsa is committed to:

  • Not selling user data to third parties without explicit consent
  • Not using user data for unauthorized marketing or profiling
  • Not disclosing user data to competitors or hostile parties
  • Not using user data for discrimination or harassment
  • Not using user data for illegal purposes

However, This Commitment:

  • Does NOT eliminate Oonsa’s zero liability policy
  • Does NOT create liability if misuse occurs despite this commitment
  • Does NOT extend to third-party service providers (who have their own policies)
  • Does NOT override the complete release in Section 21 above
  • Users still assume all liability for any data misuse, breach, or unauthorized access

Users acknowledge that despite this commitment, they release Oonsa from all liability for privacy violations, misuse, breaches, and third-party failures.

23. ACKNOWLEDGMENT & BINDING AGREEMENT

BY USING THE OONSA PLATFORM, YOU IRREVOCABLY:

  1. Accept this Privacy Policy in its entirety
  2. Consent to collection, use, and disclosure of personal information as described
  3. Acknowledge Oonsa’s security limitations and data breach risks
  4. Accept responsibility for your account and password security
  5. Release Oonsa from all privacy-related liability
  6. Waive all claims against Oonsa for privacy violations
  7. Understand Australian Privacy Principles and your rights
  8. Accept that Oonsa assumes zero liability for privacy matters
  9. Confirm you assume 100% liability for personal information security
  10. Confirm you have read and understood this complete Policy
  11. Accept that your data is processed by third-party service providers with independent privacy policies
  12. Acknowledge that Oonsa will never knowingly misuse your data, but you release Oonsa from liability regardless
  13. Accept that third-party service provider breaches are not Oonsa’s liability

THIS IS A BINDING LEGAL AGREEMENT. IF YOU DO NOT FULLY UNDERSTAND OR ACCEPT ALL TERMS, DO NOT USE THE PLATFORM.

Effective Date: 29 November 2025

Last Updated: November 2025

Isan Group Pty Ltd trading as Oonsa

ACN: 666 881 107 | ABN: 44 666 881 107

Privacy Contact: privacy@oonsa.com

APPENDIX A: THIRD-PARTY SERVICE PROVIDER PRIVACY POLICIES & LINKS

ServicePurposePrivacy PolicyData Processing
Amazon Web Services (AWS)Cloud computing, storage, infrastructurehttps://aws.amazon.com/privacy/https://aws.amazon.com/compliance/
DigitalOceanCloud hosting, servers, infrastructurehttps://www.digitalocean.com/legal/privacy-policy/https://www.digitalocean.com/legal/
VercelFrontend hosting, deploymenthttps://vercel.com/legal/privacy-policyhttps://vercel.com/legal
GitHubCode repository, version control, developmenthttps://docs.github.com/en/site-policy/privacy-policies/github-privacy-statementhttps://github.com/privacy
StripePayment processing, financial transactionshttps://stripe.com/au/privacyhttps://stripe.com/au/legal/ssa/
Google AnalyticsWebsite analytics, traffic analysis, user trackinghttps://policies.google.com/privacyhttps://policies.google.com/technologies/partner-sites
CloudflareContent delivery, DDoS protection, DNShttps://www.cloudflare.com/privacy/https://www.cloudflare.com/en-au/privacyshield/
FastlyContent delivery, edge caching, performancehttps://www.fastly.com/privacyhttps://www.fastly.com/compliance
SendGridEmail delivery, transactional emailhttps://sendgrid.com/policies/privacy/https://sendgrid.com/resource/general-data-protection-regulation/
TwilioSMS, messaging, communications APIshttps://www.twilio.com/legal/privacyhttps://www.twilio.com/legal/
Auth0Authentication, identity management, SSOhttps://auth0.com/privacyhttps://auth0.com/privacy
SentryError tracking, performance monitoringhttps://sentry.io/privacy/https://sentry.io/security/
DataDogInfrastructure monitoring, log managementhttps://www.datadoghq.com/privacy/https://www.datadoghq.com/legal/
SegmentCustomer data platform, analytics aggregationhttps://segment.com/legal/privacy/https://segment.com/legal/
MixpanelProduct analytics, user trackinghttps://mixpanel.com/legal/privacy-policy/https://mixpanel.com/legal/
MongoDBDatabase services, data storagehttps://www.mongodb.com/legal/privacyhttps://www.mongodb.com/legal/privacy
Firebase/Google CloudBackend services, real-time databasehttps://policies.google.com/privacyhttps://policies.google.com/privacy
HerokuApplication platform, deploymenthttps://www.heroku.com/privacyhttps://www.heroku.com/privacy
PayPalAlternative payment processinghttps://www.paypal.com/au/webapps/mpp/ua/privacy-fullhttps://www.paypal.com/au/webapps/mpp/ua/privacy-full

IMPORTANT: USERS ARE RESPONSIBLE FOR REVIEWING ALL THIRD-PARTY PRIVACY POLICIES LISTED ABOVE. OONSA ASSUMES ZERO LIABILITY FOR THIRD-PARTY DATA HANDLING, SECURITY, OR PRIVACY PRACTICES.

END OF PRIVACY POLICY