Privacy policy

MarketsGuide is operated by Jeerish Naradoo, a sole trader registered in New South Wales, ABN 82 513 864 085. Contact: hello@marketsguide.com.au.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

We intend to move the business into an Australian company. When that happens, this page will name the company instead of the sole trader, and personal information will move with the business under the same commitments. See changes and business transfer below.

This matters, because it changes what we hold about you.

• The public directory and market-goer accounts are live.
• Organiser and stallholder tools are in development. They are not generally available, and nobody is paying for them.
• We are not processing payments.

Sections further down describe applications, uploaded documents, invoices and payments. That is how those features are built to work, and this policy will apply to them when they open up. Until then, we do not hold that information about you, because there is nowhere to put it.

When you browse the directory

You can use the directory without telling us who you are. There is no wall and no sign-up prompt standing in front of the listings.

When you browse we receive the usual technical and usage information: IP address, browser and device details, which pages you looked at, what you searched and filtered for, and approximate location if you use the map or a near-me feature.

When you create a market-goer account

An account is for saving things, not for gating things. If you create one we hold your name, email address and login credentials, along with your favourites, followed markets, notification preferences and any push notification token if you turn notifications on. If you report a problem with a listing or send feedback, we hold that too.

When you enter a market-day draw

Some markets run a prize draw at the front desk. You enter by scanning the QR there. We do not use your location. If you enter, we hold your email (and name if you give one) for that market date so winners can be drawn at random. Entering does not create an account. If you choose to create a free account, we follow that market for you so you can hear when it is confirmed, moved, or cancelled. We use the same email for both.

The information inside market listings

Most listings on MarketsGuide were compiled by us. We built them from public sources before the market's organiser had any relationship with the platform: market websites, council pages, Facebook and Instagram pages, tourism sites and public event listings.

A listing generally holds the market name, where and when it runs, a description, a photo, and whatever contact details the market publishes about itself.

Sometimes the contact details a market publishes are personal rather than business ones, such as an organiser's mobile number or a personal email address. If that is your information and you would rather it was not on the site, email us and we will remove or replace it, normally within five business days. You do not need an account, and you do not need to explain why.

If you own the copyright in a photo that appears on a listing, email us and we will remove it. We may ask you to confirm you hold the rights, but we are not going to make it difficult.

When you use the Chrome autofill extension

If you install MarketsGuide Autofill, the extension keeps a connection token and the vendor profile you choose to sync in your browser, so you can fill applications without reconnecting each time. That local copy can include your trading name, contact details, ABN, suburb and other profile fields, plus the names of documents and product photos you sync. See the Chrome autofill extension below for what leaves your browser.

When you use the stallholder portal (once it is available)

Your trading name, contact details, category, description, photos and social links. Your application answers, requested dates, stall preferences and messages with organisers. Any documents an organiser asks you to upload, which will often include insurance certificates and food or other permits. Business details such as an ABN where you or an organiser record one.

When you use the organiser workspace (once it is available)

Your account and organisation details, the people you invite onto your team, and the listing content you publish. On the private side: the applications you receive, your reviews and notes, invoices, stall maps, communications, and ticket or session records.

What we do not collect

We do not go looking for sensitive information as the Privacy Act defines it. Anything a stallholder uploads should be limited to what an organiser has actually asked for.

Where an identity document contains a government identifier, we do not adopt that identifier as our own way of identifying you.

Payments

We are not taking payments yet. When we do, they will be processed by Stripe. We will receive payment status, identifiers and billing metadata. We will never hold full card numbers, because Stripe holds them and we never see them.

To publish and maintain the directory. To run market-goer accounts and, when they open, the organiser and stallholder tools. To send the emails that make the service work, such as sign-in links, application updates and invoices. To keep the service secure, find faults and stop abuse. To meet legal obligations and respond to lawful requests.

Where we are allowed to, we may also send product or promotional email. You can opt out of that at any time and it will not affect the messages you need to receive to actually use your account.

Anyone who registers, applies, accepts an invitation or otherwise gets access becomes a MarketsGuide user for that access, and this policy covers them, even where an organiser started the invitation rather than us.

Public listings are meant to be public. Market names, locations, schedules, photos, descriptions and whether applications are open are all directory content, and search engines can index them.

Private records are a separate thing. Applications, uploaded files, internal notes, invoices, reviews and payment records sit behind account access and are not part of the directory. A market being visible on the site has never meant that anybody can reach the private work behind it.

Organisers decide what goes on their own listing, including line-ups and public stall maps. That means organisers are responsible for not publishing someone's personal information on a page that is open to the world.

We do not sell or rent personal information. There is no version of this business where that changes.

We share information in four situations.

The first is with the other person in a workflow you have chosen to be part of. A stall application goes to the relevant organiser. An organiser's reply goes back to the stallholder.

The second is with the providers who run parts of the service for us:

• Vercel, for hosting and delivery
• Supabase, for authentication, database and file storage
• Postmark, for transactional email
• Cloudflare, for Turnstile bot protection on sign-in
• Mapbox, for maps and geocoding
• Google, for analytics, sign-in and Maps or Places lookups where those are switched on
• Stripe, for payments and subscription billing, once those features are live
• Vercel AI Gateway, to suggest answers in the Chrome autofill extension when you have AI assist on. The model is provided through that gateway.

The third is where the law requires it, or where we need to protect people or the service itself.

The fourth is if the business is sold or transferred, in which case information moves with the service under equivalent protections.

We operate from Australia. Some of the providers above store or access information outside Australia, including hosting with Vercel, database and file storage with Supabase, email with Postmark, maps with Mapbox, analytics or sign-in with Google, and, if you use AI assist in the Chrome extension, suggested answers through Vercel AI Gateway.

If you are outside Australia, your information may be processed here and in the countries where those providers operate. We take reasonable steps to make sure they handle it with the care we would.

MarketsGuide Autofill is a Chrome extension that fills stallholder application forms on other websites from the vendor profile you choose to sync. You open a form, select Fill this page, review the answers, and submit the application yourself. The extension does not submit the form for you.

In your browser it stores the connection token, the synced profile, whether AI assist is on, the list of documents and product photos you sync, and references to files you download through the extension. That stays on your device so you do not have to reconnect every time you fill a form.

When you sync, the extension sends the connection token to MarketsGuide and we return the profile and file links already on your stallholder account. We do not receive the address of the page you are filling, answers you had already typed into that form, or a list of sites you visit.

If AI assist is on, we send your vendor profile and the labels, names and placeholders of the fields on that form to Vercel AI Gateway, only to suggest answers. We do not send the page address or answers already in the form. You still review everything before you submit.

If a form asks for a file, you can download a document or product photo from your MarketsGuide profile, or ask the extension to attach one you selected. Those files are fetched from our storage. We do not sell this information, and we do not use it to decide creditworthiness or for lending.

We use cookies for sign-in, security and remembering your preferences, and analytics to understand how the public site is being used. Analytics on the public site currently include Vercel Analytics, Ahrefs Analytics and Google Analytics where configured.

You can control cookies in your browser. Blocking some of them will break parts of the site, including staying signed in.

Where a market or another site embeds a MarketsGuide widget on their own page, we receive standard request information when that widget loads, including IP address, browser details and the page it was embedded on. We use that to serve the widget and to prevent abuse. The widget does not set advertising cookies and does not follow anyone around the internet.

We keep personal information for as long as we need it to run the service, keep financial and security records, and meet legal obligations.

Each signed-in app has Download my data and Delete account in account or security settings.

On the public site, deleting an account that is only a market-goer removes the login and the directory profile. If that same login is also an organiser or a stallholder, the public site only clears directory activity and keeps the login. Close the organiser or stallholder account from that app.

Deleting a stallholder account removes the login and contact details. Invoices, applications, and the trading name stay so markets you traded with still have their records. An active public listing has to be cancelled first.

Deleting an organiser account is available when no markets are linked to it. If markets are still linked, download the export and email us so we can close the account without stranding those listings or the invoices that have to be kept.

To request a copy of your information, a correction, or a deletion the in-app flow does not cover, email hello@marketsguide.com.au. We may need to confirm the request is actually coming from you.

If we become aware of a data breach affecting personal information, we will assess it, contain what can be contained, and notify the people affected and the Office of the Australian Information Commissioner where the Notifiable Data Breaches scheme requires it.

If you think an account has been accessed without permission, email hello@marketsguide.com.au with "Security" in the subject line.

To provide support, fix a fault or investigate a security problem, authorised personnel may need to look at an account or a record. Today that means one person, the operator.

That access is limited to what the situation actually requires, and it is not routine monitoring of your content. Nobody here is reading your applications for fun.

Under the Australian Privacy Principles you can ask to see the personal information we hold about you, ask us to correct it if it is wrong, and make a complaint if you are unhappy with how we have handled it.

Email hello@marketsguide.com.au. We will respond within 30 days. If you are not satisfied with the answer, you can take the complaint to the Office of the Australian Information Commissioner.

If you are in the EU, UK or California, you may have additional rights under your own law. We are a small Australian operation building a local product, but contact us and we will work through a reasonable request. We do not sell personal information.

The service is not directed at children under 13. If you believe we have collected information from a child under 13, email us and we will delete it.

We will update this policy as the product changes. The version on this page is the current one. If a change is significant we will try to flag it in the product, or by email where we have an address for you.

We plan to transfer MarketsGuide from a sole trader to an Australian company. When that happens, the operator details on this page will change to the company, and personal information will transfer with the business under the same commitments described here. You will not need to do anything.

Privacy questions go to hello@marketsguide.com.au.

Related: security and trust and terms of service.