Privacy & Discretion

Effective 13 September 2026. This notice explains what LuXeel Discovery collects, why, and what you can do about it. It is written to align with the Australian Privacy Principles under the Privacy Act 1988 (Cth). LuXeel Discovery is operated by [OPERATOR LEGAL ENTITY NAME], ABN [ABN NUMBER].

1. Information we collect. Account data: email address, a one-way password hash (we never store your actual password), account role and status, and timestamps. Provider data: display name, age, city, biography, languages, categories, rates, availability, photos and any external profile links you choose to add. Activity data: reviews you submit, contact-form and safety-report messages, moderation history for your own profile, and search phrases entered into smart search. Payment-adjacent data: if you tip a provider or top up your Deeper Community wallet, that flow is handled by Sngine and its payment processor — LuXeel itself never receives or stores your card number.

2. How we collect it. Directly from you, when you register, complete your profile, submit a review, contact us, or report a concern. Automatically, in a limited way: your session cookie (keeps you logged in), a local-storage flag recording that you confirmed the age gate, and a local-storage flag remembering your light/dark theme choice. We do not run third-party advertising trackers.

3. Why we use it. To create and secure your account; to publish and display provider-controlled listings; to operate search, browse and location pages; to moderate submissions before and after publication; to investigate reports and enforce our policies; to reply to messages sent through Contact or Report a Concern; to prevent abuse (rate-limiting, fraud checks); and to keep an internal audit trail of who changed what, which protects everyone if a decision is later disputed.

4. What becomes public. Once a profile is approved, its published fields and approved photos are visible to anyone browsing the directory, including search engines. Reviews are shown against the profile once verified and approved. Your account email is never shown publicly.

5. The Deeper Community (Sngine) integration, specifically. When a provider's profile is approved, or when a member first uses a Deeper Community feature, we automatically create a linked account on Sngine, our separately operated community and payments platform. The only information sent to create that account is your email address and a short internal reference (for example, "provider-482") used purely to pre-fill a username — Sngine generates its own random password for this account, which LuXeel never sees or stores. If you are a provider, your published tagline, biography and primary photo are also sent to Sngine so your linked account has content on it. When you use the "Go to Deeper Community" button, a single-use, time-limited sign-in link authenticates you into that Sngine account; LuXeel does not read your Sngine posts, private messages, or anything else you do once there. Separately and optionally, a provider may still link a pre-existing personal Sngine account for cross-posting — that is a distinct, opt-in feature described in Provider Studio and is never enabled without your action.

6. Who can see your data internally. Administrators can see account and profile data needed to moderate the platform and respond to reports. Access is role-restricted in the application; we do not sell personal information to third parties.

7. Storage and security. Passwords are one-way hashed, never stored in plain text. Forms are protected against cross-site request forgery, database queries use parameterised statements, uploaded files are checked by content rather than trusted by file extension, and public submission endpoints are rate-limited. No system is completely immune to risk, and we cannot guarantee absolute security.

8. Overseas disclosure. LuXeel is hosted on infrastructure located in Australia. Where a feature (such as the Deeper Community) involves a separately operated platform, that platform may process data under its own privacy terms in addition to this notice.

9. Retention. We keep account and moderation data for as long as your account is active and for a reasonable period afterward to meet legal, audit and dispute-resolution needs. Safety reports and moderation logs are retained longer, since they may be relevant to a later report about the same profile.

10. Your rights. Under Australian Privacy Principles 12 and 13 you can ask to access the personal information we hold about you and ask us to correct it if it is wrong. To do either, or to raise a privacy question or complaint, use the Contact page and choose "Privacy request." If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).

11. Children. LuXeel is an adults-only platform and is not directed at anyone under 18. We do not knowingly collect information from a person under 18; an account found to belong to a minor will be closed.

12. Changes to this notice. We may update this notice as the platform changes. Material changes will update the effective date above.

13. Contact. For any privacy question, correction request or complaint, use the Contact page and select the Privacy topic.