Privacy Policy

KUNN Group operates the KUNN B2B Opportunity Exchange, a platform where Australian businesses refer business opportunities they cannot service and verified businesses discover opportunities relevant to their expertise.

We respect the privacy of our members, the businesses that use the platform, clients whose information is provided in connection with an opportunity, and visitors to our website.

This Policy describes what personal information we collect, why we collect it, how we hold and use it, and when it may be shared with others. KUNN operates in Australia, and this Policy is intended to explain our privacy practices in the context of applicable Australian privacy requirements.

If you have any questions about this Policy, you can contact us at info@kunngroup.com.

Account information

When you create and use a KUNN account, we may collect:

• full name
• email address
• phone number
• account and authentication information
• profile photograph or avatar, where you provide one

Passwords are handled by the authentication service that supports the platform. KUNN staff do not have access to your password.

Business information

Members can provide business details for their profile and listing, including:

• business name
• ABN, where provided for verification
• business website
• business contact details
• business description
• industries and categories
• locations served
• languages
• services offered
• logos and cover images
• LinkedIn or other professional profile information, where provided

Verification information

Verification on KUNN may involve some or all of the following:

• email verification
• phone verification
• business information
• ABN and registered business details
• identity documents
• business supporting documents
• website verification
• LinkedIn information
• address information

Government-issued identity documents and supporting business documents are held in private storage and are only accessible through authorised KUNN administrative processes.

Opportunity and client information

Members submit individual business opportunities. An opportunity may include information such as:

• client name
• client location
• client email address
• client phone number
• opportunity description
• industry or category
• estimated opportunity value
• referral fee
• other information reasonably required to manage the opportunity

KUNN does not currently provide bulk CRM, database or CSV importing of client opportunities. Opportunities are submitted individually by members.

Applications and platform activity

We collect information generated as you use the platform, including:

• opportunity applications
• application messages
• application status
• referral lifecycle information
• consent and authority records
• notifications
• communications with the KUNN team
• settlement and transaction activity

Payment information

Payment-card information is processed by Stripe. KUNN does not directly receive or store full payment-card numbers or CVV codes.

We may retain payment-related records and identifiers needed to operate the platform, including:

• Stripe customer and subscription identifiers
• payment and checkout identifiers
• subscription status
• referral fees
• KUNN platform and administration fees
• settlement amounts
• payment status
• refunds and disputes, where applicable
• invoice and receipt information

Technical information

We may collect technical information such as:

• IP address
• browser and user-agent information
• timestamps
• authentication and session information
• security and audit activity
• server and request logs
• platform error information

This information is used to operate the platform and to support security, fraud prevention, troubleshooting, auditing and dispute handling.

A central part of KUNN is that a member may provide personal information about a client or another individual when submitting an opportunity.

Members must have appropriate authority to provide that information to KUNN for the purpose of managing the referral and facilitating an introduction to another business.

Before submitting client information, the Post Opportunity process requires the member to confirm:

"I confirm that I am authorised to provide this client's information to KUNN for the purpose of referring this opportunity and facilitating an introduction to another business."

KUNN records this declaration against the specific opportunity, including the wording shown to the member and when it was confirmed, so that there is an auditable record of the authority relied on.

Members must not submit:

• scraped contact information
• purchased contact lists
• personal information they are not authorised to disclose
• entire CRM databases
• unrelated or unnecessary personal information

The member's authority declaration and KUNN's later consent and contact-release process are separate stages. The declaration records the member's confirmation of their own authority. It does not mean that KUNN has independently contacted the client.

Opportunity information is shared in stages rather than all at once.

Before matching

Eligible verified and subscribed members may see opportunity information such as:

• title
• category or industry
• state or location
• opportunity type
• summary and details
• estimated value
• referral fee
• expiry information

Client email addresses and phone numbers are not shown through marketplace browsing, and applicants do not receive client contact information simply because they have applied.

After assignment

When a business is assigned an opportunity, client contact details remain restricted until the required consent or authorisation stage has been confirmed through the KUNN process. Once that stage is confirmed, the assigned business may receive the client contact information required to pursue the opportunity.

The member who posted the opportunity, and authorised KUNN administrators, may access the client information for the purpose of managing the opportunity, verification, dispute handling and platform operations.

We use personal information to:

• create and manage accounts
• verify members and businesses
• operate the Opportunity Exchange
• post and manage opportunities
• match opportunities with businesses
• manage applications
• manage client authority and consent processes
• facilitate introductions
• process subscriptions and payments
• manage referral fees and settlements
• issue transaction records, invoices and receipts
• provide support to members
• send authentication and service communications
• provide in-app notifications
• prevent misuse, fraud and unauthorised access
• maintain security and audit records
• investigate disputes
• comply with applicable legal obligations
• improve and administer the platform

KUNN does not use personal information for targeted advertising.

Identity and business verification may require supporting documentation, such as government-issued identity documents or business registration documents.

These documents are held in access-controlled private storage, and access is restricted to authorised KUNN administrative processes.

KUNN intends to retain verification information only for as long as reasonably required for verification, platform integrity, dispute management and applicable legal or operational requirements. There is no automated deletion schedule for verification documents at this time.

KUNN uses a small number of technology providers to operate the platform. The current providers are:

Service providers receive only the information reasonably required for the services they provide, subject to their own processing arrangements and the agreements that apply to their services.

KUNN's current backend database and file-storage infrastructure is hosted in the AWS and Supabase ap-northeast-1 region in Tokyo, Japan. Personal information held in the platform database and in document storage is therefore stored outside Australia.

Some of the technology providers we use operate globally, and personal information may be stored, processed or accessed outside Australia. This may include infrastructure operated by Supabase, Lovable, Stripe, Twilio and, where Google sign-in is used, Google. Where the countries involved can reasonably be identified, we disclose them in this Policy.

We take reasonable steps in relation to the overseas handling of personal information, consistent with applicable Australian privacy requirements, including selecting established providers and limiting the information they receive to what is reasonably required.

KUNN currently sends:

• authentication emails, such as account confirmation and password reset
• SMS messages for phone verification
• SMS approval requests sent to a client, where KUNN asks the client to approve an introduction before their contact details are released
• in-app transactional notifications about opportunities, applications and settlements

KUNN does not currently send marketing emails or marketing SMS. If we introduce marketing communications in future, we will provide appropriate consent and unsubscribe or opt-out mechanisms where required.

KUNN uses browser storage that is necessary for the platform to work, including:

• authentication and session storage
• interface preferences
• currency preference

Stripe's embedded payment functionality may use cookies or browser storage for payment security, fraud prevention and session management.

Based on the current platform configuration, KUNN does not use advertising pixels or marketing-tracking cookies.

We use technical and organisational measures intended to protect personal information. These include account authentication, role-based access controls, restricted database permissions, private document storage, controlled disclosure of client contact information, audit logging, server-side permission checks, and payment processing through Stripe.

No online system can guarantee absolute security. We work to reduce risk and to respond appropriately if an issue arises, but we cannot promise that information will never be accessed or disclosed in a way that is not permitted by this Policy.

We retain personal information for as long as reasonably necessary for:

• providing the platform
• maintaining transaction and referral records
• verification
• security and fraud prevention
• dispute handling
• legal and accounting requirements
• other legitimate operational requirements

There is no automated deletion schedule at this time. Cancelling a subscription does not automatically delete your account or the transaction and referral records associated with it.

Information may be deleted or de-identified when it is no longer reasonably required, subject to legitimate legal, security, accounting, dispute and record-keeping requirements.

You can contact us about the personal information we hold about you. We can help with requests for access, correction and deletion, and with general privacy questions.

Send your request to info@kunngroup.com.

Deletion requests are currently handled manually by the KUNN team. There is no self-service account deletion feature at this stage.

We may need to retain certain information where it is reasonably required for legal obligations, transaction records, fraud prevention, security, dispute handling or other legitimate purposes.

If you believe your information has been submitted to KUNN by a member as part of an opportunity, you can contact us to ask what information we hold, request a correction, raise a concern, or request deletion where appropriate.

Email info@kunngroup.com and let us know as much detail as you can about the business that referred you and the nature of the enquiry.

We may need to verify your identity before we act on a request.

Please do not send identity documents by ordinary email unless KUNN specifically asks you to provide them through an appropriate process.

We assess suspected privacy or security incidents and take action that is appropriate to the circumstances, consistent with applicable Australian requirements.

Where the Notifiable Data Breaches scheme applies and notification is required, we will take the notification steps required of us. Not every security incident will require notification, and each incident is assessed on its facts.

If you have a privacy concern or complaint, email info@kunngroup.com. We will review the matter and respond within a reasonable period.

Where applicable, you may also have the right to contact the Office of the Australian Information Commissioner.

We may update this Privacy Policy from time to time, for example when:

• the platform changes
• our service providers change
• processing locations change
• legal requirements change
• new functionality is introduced

The current version always shows its effective and last updated date at the top of the page.

Privacy enquiries

KUNN Group
Australia
Email: info@kunngroup.com