Privacy Policy

Exectables Pty Ltd (ACN [TO BE CONFIRMED]) operates the Exectables platform at exectables.com. In this policy "we", "us", and "our" refer to Exectables Pty Ltd.

Contact: privacy@exectables.com. [TO BE CONFIRMED — postal address pending legal sign-off]

We collect the following categories of personal information:

• Account data — email address, full name, and password (stored as a bcrypt hash).
• Profile data — career history, professional bio, LinkedIn URL, industry focus, and availability window, submitted during onboarding.
• CV / résumé data — extracted fields from uploaded documents, processed by the Anthropic Claude API (see Section 4).
• Usage data — page visits, feature interactions, and error logs collected for platform reliability.
• Communications data — messages sent through the platform between executives and firms.

[LEGAL: confirm whether cookie / analytics data collection is in scope for v1.0 and add appropriate disclosure here.]

• To create and manage your account on the Exectables platform.
• To match executives with firms seeking retained advisory talent.
• To extract structured data from CVs to populate exec profiles (Anthropic Claude API — see Section 4).
• To communicate with you about your account, engagements, and platform updates.
• To comply with our legal obligations under Australian law.

[LEGAL: confirm lawful basis under Privacy Act 1988 / APP 3.]

We share personal information with the following third-party service providers, solely for the purposes described:

• Supabase — database and authentication infrastructure. Data is stored in the Sydney, Australia (ap-southeast-2) region. Supabase Inc. processes data under their Data Processing Agreement.
• Vercel Inc. — hosting and edge delivery. [LEGAL: confirm DPA reference and data region for Vercel.]
• Anthropic PBC (Claude API) — CV text extraction. Uploaded CV content is transmitted to Anthropic for processing. Anthropic's data handling is governed by their API data usage policy. [LEGAL: confirm current Anthropic API retention policy and add reference link.]
• Resend — transactional email delivery. [Status: not yet wired at v1.0 — section to be confirmed when Resend is enabled.]

[LEGAL: confirm whether cross-border disclosure obligations under APP 8 are met for each provider above.]

Your account and profile data is stored in Supabase's Sydney, Australia (ap-southeast-2) region. We do not transfer personal data outside Australia except as disclosed in Section 4.

[LEGAL: retention schedule to be defined. Placeholder: we retain your data for as long as your account is active, or as required by law. Upon account deletion, personal data is removed within [X] days except where retention is required by law.]

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or out-of-date information.
• Request deletion of your personal information (subject to legal retention requirements).
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

To exercise your rights, contact us at privacy@exectables.com.

We implement technical and organisational measures to protect your personal information, including encryption in transit (TLS), hashed passwords, and row-level security on our database. [LEGAL: confirm whether additional security certifications or disclosures are required.]

We will notify registered users by email of material changes to this policy. Continued use of the platform after notification constitutes acceptance of the updated policy.

Questions or complaints about our privacy practices should be directed to: privacy@exectables.com

[LEGAL: add postal address, ABN, and ACN once confirmed.]