Unibuz

Attachments to the Terms

Jump to a Part

Part B: Privacy Policy

Last updated: 12 October 2026

1. Introduction and Scope

This Privacy Policy explains how Unibuz Pty Ltd (ACN 605 773 555, ABN 57 605 773 555) ("Unibuz", "we", "us", "our") collects, holds, uses and discloses personal information in connection with the Platform. It is intended to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Who We Are

Unibuz Pty Ltd, trading as Unibuz, is an Australian proprietary limited company. Registered office: PO BOX 822, South Yarra VIC 3141, Australia. Contact for privacy matters: privacy@unibuz.com.au.

3. Personal Information We Collect

CategoryWhat it includes
Identity & profileEmail, given/preferred name, surname, profile picture, degree, campus, faculty, gender, pronouns, country/state, university start year, account type, preferred language, interests, favourite song, date of birth
AAF SSO attributesUniversity entity ID, email, given name, family name, preferred username, picture - received via SAML/OIDC callback from your university's identity provider
Authentication dataAuth provider used, hashed password (Supabase-managed), OTP codes (transient), WebAuthn/passkey credentials (staff only)
User contentPosts, comments, direct messages, media, marketplace listings, event listings, reactions, mentions, saved items
Social graphFriends, friend requests (incl. optional message text), blocked users, community ("Tribe") membership and roles
Device & push notificationsPush tokens, device ID and name, platform, app/OS version, notification preferences
PaymentsEvent price/line items, buyer/seller/event identifiers, Stripe Connect account status, transaction status/amounts/fees, refund details. We never see or store card numbers, CVVs, or full card numbers.
Security & login signalsIP address, approximate location (city/country) via Supabase's built-in GeoIP, user agent, login history, risk indicators, anomaly flags
Content moderation signalsModeration status/reason/score and sentiment/language detection for public content
Support & contactInformation provided when contacting support, reporting content, or submitting a copyright/privacy/safety request

We do not collect: raw card numbers, CVVs or full card numbers; your real-time device location; your contacts or address book; or microphone or camera streams.

4. How We Collect Your Information

  • Directly from you (account creation, profile, posts, messages, listings, events, payments, support contact)
  • From your university, via AAF SSO
  • Automatically (IP, approximate location, device/app info, push tokens) as part of operating and securing the Platform
  • Age verification, via a third party verification provider

5. Why We Collect, Use and Disclose Your Information

  • Create and administer your Account, verify eligibility/student status
  • Provide Platform features (messaging, communities, marketplace, events, ticketing)
  • Process payments and payouts
  • Detect, investigate and prevent fraud, abuse, security incidents, breaches of these Terms
  • Moderate public content for safety and Community Guidelines compliance
  • Send service communications, security alerts and (opt-out) other notifications
  • Respond to support requests, reports and complaints
  • Comply with legal obligations

6. Content Moderation and Automated Processing

Public content (posts, comments, listings, events, profile text/images) is reviewed by Google Gemini, which assigns moderation status/reason/score and sentiment/language. This informs approval, flagging, or removal. We also generate profile-similarity embeddings via OpenAI from your profile text. User content submitted to these third-party AI providers is not used to train their general or external AI models.

Before submission, we make a good-faith, pattern-based effort to screen content for common personal information and prompt removal - not a guarantee, and it does not extract/screen text embedded in images.

6A. Automated Decision-Making - Advance Disclosure

We use a computer program (Google Gemini) to help make, or substantially assist in making, decisions about your Content and Account - including whether a post, comment, listing or event is approved, flagged for human review, or removed, and whether your Account is warned, restricted, suspended or banned. These decisions use the content you submit, your account and moderation history, and automatically generated moderation/sentiment scores.

These decisions can significantly affect your ability to use the Platform. Human review remains part of our process, particularly for safety-critical matters, and you may request a review of a moderation or enforcement decision - see Part H (AI and Moderation Notice).

7. Third Parties We Share Your Information With

ServicePurpose / data sharedLocation
Supabase (hosted on AWS)Database, auth, storage, GeoIP for login signalsSydney, Australia
Australian Access Federation (AAF)University SSO - we receive attributes, send nothing backAustralia
StripePayment processing, seller (Connect) onboarding/KYCGlobal
Google GeminiContent moderation + sentiment/language detection (public content only)Google Cloud infrastructure
OpenAIProfile-similarity embeddings from profile textUnited States
Google Translate (consumer endpoint)On-demand translation of other users' text - see Section 8United States
SentryError tracking incl. session replayUnited States
Expo / APNs / FCMPush notification deliveryGlobal
AWS SESTransactional emailSydney, Australia
ConnectIDAge verificationAustralia
Google CloudEncrypted database backups, deleted after no more than 35 daysGoogle Cloud infrastructure

We do not sell personal information, and do not share it with third parties for their own marketing.

8. Overseas Disclosure

Several third parties above are overseas (principally US-based: OpenAI, Sentry, Google Gemini/Translate). We take reasonable steps to ensure APP-consistent handling, including relying on each provider's contractual commitments where applicable.

9. Direct Marketing

Service-related communications are not optional. Other communications will have a clear opt-out, and sensitive information will never be used for direct marketing.

10. Cookies and Similar Technology

Unibuz uses cookies and similar technologies to: maintain sessions and authentication; enhance security and prevent fraud; analyse engagement and performance; and support marketing cookies if enabled. By using Unibuz, you consent to the use of cookies. You may disable cookies via browser settings, but some functionality may be impaired. Unibuz’s up to date Cookie Policy can be found here: Cookie Policy · Unibuz

11. Data Quality, Security and Retention

Reasonable steps are taken to keep personal information accurate and secure. Database/auth/storage hosted in Sydney, Australia. Significant account and security events are logged in a form that cannot be altered, and the log is kept after content or profile deletion, for security and accountability. Server, security and access logs are deleted 12 months after they are recorded.

Data typeRetention
Profile and user contentSoft-deleted immediately on request; permanently deleted via our deletion process
Push notification tokensRemoved after repeated delivery failures
OTP codesExpire shortly after issue
Payment recordsRetained for the period required by our tax, financial and corporations law recordkeeping obligations
Sentry dataPer Sentry's own retention settings
Server, security and access logs (login history, IP address, device and security signals)Deleted 12 months after they are recorded
Encrypted backupsDeleted on a rolling cycle, so personal information deleted from our live systems is removed from all backups within 35 days

12. Access, Correction and Deletion

You can access and correct most profile information in-app. You may request access, correction, deletion, or Account closure via in-app settings, Part J (Data Deletion and Account Closure Policy), Part K (Account Deletion Request), or privacy@unibuz.com.au.

13. Sensitive Information

We do not currently collect health information or other sensitive information. If this changes - including if the wellbeing feature described in Part I is activated - we will update this Policy and seek consent first, per APP 3.

14. Wellbeing Feature

No wellbeing data is currently generated or shared with any institution. We will obtain your consent before before any sharing with a university counselling service.

15. Children and Age Eligibility

Eligibility, including the minimum age, is set out in Part A, clause 3. Where you sign in through AAF, that process is also a signal of verified university enrolment.

16. Data Breach Notification

If we become aware of a data breach likely to result in serious harm, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme.

17. Complaints

Contact privacy@unibuz.com.au first. If unsatisfied, you may complain to the OAIC at oaic.gov.au.

18. International Users

The Platform is designed for students enrolled at Australian Approved Institutions and is designed to be used and accessed in Australia. Information is primarily handled in Australia even if accessed from overseas.

19. Changes to This Policy

We may update this Policy from time to time; material changes will be notified via the Platform, website or email where practicable.

20. Contact Us

Unibuz Pty Ltd (ACN 605 773 555, ABN 57 605 773 555) - PO BOX 822, South Yarra VIC 3141, Australia

Privacy requests: privacy@unibuz.com.au

21. Your Legal Rights

Nothing in this Policy limits any right you may have under Australian privacy laws, or any other right you may have that cannot lawfully be excluded or limited.

Part C: Community Guidelines

Last updated: 1 October 2026

Publication URL: https://www.unibuz.com.au/legal/community-guidelines

Unibuz exists to help students connect, share, and get involved with campus life. These Community Guidelines explain, in plain language, what we expect from everyone on Unibuz. They work alongside Part A (Terms and Conditions) and Part D (Responsible Use Policy) - if there's ever a conflict, the Terms and Conditions prevail.

Be Respectful

  • Treat other students the way you'd want to be treated - on Unibuz and in person.
  • No bullying, harassment, pile-ons, or targeted abuse.
  • No hate speech or discrimination based on race, religion, gender, sexuality, disability, or any other protected characteristic.

Be Safe

  • Never share sexual content, in any form – where we become aware of a breach of law, we will report this to the relevant authorities.
  • No grooming, sexual coercion, or sharing intimate images.
  • If you're meeting someone from Unibuz in person for the first time, meet in a public place, tell a friend where you're going, and trust your instincts.
  • If something feels wrong, report it - you don't need to be certain it's against the rules to flag it.

Be Honest

  • Use your real identity - don't impersonate another student, a staff member, a club, or Unibuz itself.
  • Don't run fake accounts, fake events, or fake listings.
  • Academic integrity matters: don't buy, sell, or share assignments, exam answers, or cheating services through Unibuz.

Be Legal

  • Don't use Unibuz to sell anything illegal, unsafe, or age-restricted where you're not permitted to sell it.
  • Don't use Unibuz for scams, fraud, or financial exploitation of other students.

What Happens If You Break These Guidelines

Depending on what happened, we may remove content, restrict features, warn you, suspend your Account, or close it permanently - see Part A, clause 21. Where practicable we'll tell you why and give you a chance to respond, and you can request a review of most decisions (see Part H).

Reporting

Every post, comment, message, listing, and event has a report option. When you report something, tell us what happened and why. We prioritise anything involving safety, child protection, or credible threats.

Part D: Responsible Use Policy

Last updated: 1 October 2026

Publication URL: https://www.unibuz.com.au/legal/responsible-use-policy

This Responsible Use Policy sets out detailed standards of conduct for using Unibuz, expanding on Part A, clause 7. It is the more detailed, formal companion to Part C (Community Guidelines).

1. Your Conduct Online and Offline

You are responsible for your conduct on Unibuz and in any interactions - online or in person - that arise from your use of the Platform.

2. Prohibited Conduct

In addition to the conduct prohibited under Part A, clause 7, you must not:

  • use Unibuz to arrange, promote or participate in hazing, coercive initiation rituals, or unsafe alcohol/drug-related activity;
  • use another student's identity, login credentials, or verification method to gain access to the Platform;
  • engage in stalking behaviour, including tracking another user's location, schedule or movements;
  • misuse the reporting or blocking tools - for example, by submitting false reports to harass another user.

3. Safety When Meeting Other Users

  • Meet in a well-lit, public location, ideally on or near campus;
  • Tell a friend or housemate where you're going and when you expect to be back;
  • Don't share your home address, financial details, or other sensitive information;
  • Trust your instincts - you're never obligated to go through with a meeting.

4. Blocking and Reporting

You can block another user at any time; blocked users will not see your profile in recommendations, and you will not see theirs. You can report a user, post, comment, message, listing, or event directly within the app. Reports are reviewed by our moderation team, who may warn, suspend, or ban the reported user, or dismiss the report.

5. Cooperation with Institutions and Authorities

Where we reasonably believe conduct on Unibuz may involve a serious safety risk, unlawful activity, or a breach of a university's own conduct rules, we may share relevant information with the affected user's institution, law enforcement, or another appropriate authority.

6. Academic Integrity

Unibuz must not be used to buy, sell, request, or distribute assignments, essays, exam answers, or other academic cheating services. We may report credible, serious instances to the relevant institution.

Part E: Fair Use Policy

Last updated: 1 October 2026

Publication URL: https://www.unibuz.com.au/legal/fair-use-policy

This Fair Use Policy explains the technical and platform-integrity controls referred to in Part A, clause 6.

1. Automated Access

You must not use bots, scripts, scrapers, or other automated tools to access Unibuz, extract data from it, or interact with other users, without our prior written consent.

2. Rate Limits

We apply limits to certain high-volume actions, including sending direct messages, creating posts, sending friend requests, and creating marketplace listings or events.

3. Account Integrity

You must not create multiple accounts to evade a suspension or ban, or operate fake or duplicate accounts. Misuse of invite codes, Student Verification, one-time passcodes, or demo credentials is treated as a serious breach.

4. Reasonable Use of Features

We may apply listing limits, event limits, or temporary restrictions where we reasonably believe a feature is being used excessively, abusively, or for a purpose inconsistent with a trusted student community.

5. Enforcement

Breach of this Fair Use Policy may result in limiting your access to the Platform, temporary restriction of a feature, content removal, or Account suspension or termination under Part A, clause 21.

Part F: Marketplace Rules

Last updated: 1 October 2026

Publication URL: https://www.unibuz.com.au/legal/marketplace-rules

These Marketplace Rules expand on Part A, clause 9 and apply whenever you list, browse, buy, or sell through the Marketplace feature.

1. Our Role

Unless we expressly say otherwise, we are not the seller, buyer, auctioneer, escrow agent, or insurer for any Marketplace transaction, and we do not guarantee the accuracy of any listing or the conduct of any user.

2. Listing Rules

  • Listings must be accurate - describe the item's true condition, price, and any defects.
  • You may only list items you have the right to sell.
  • Photos must be of the actual item where practicable, or a genuinely representative example if not.

3. Prohibited Listings

You must not list, offer, request, buy, sell, or facilitate the sale of weapons, illegal drugs, prescription medicines, counterfeit or stolen goods, exam papers or cheating services, fake tickets, alcohol, tobacco or vaping/e-cigarette products, animals or any other item or category we prohibit, as notified by us from time to time. Unibuz reserves the right to remove any marketplace listing in its sole discretion.

The Australian Consumer Law consumer guarantees generally apply to goods and services supplied in trade or commerce. A casual, one-off sale between students is not usually “in trade or commerce”, so those guarantees may not apply as between the buyer and seller – though they may apply directly to a seller who is repeatedly or systematically selling through the Marketplace as a business. This does not affect any guarantee, right or remedy you have against Unibuz itself, or any right you may have under other consumer protection law.

4. Payments

Where a Marketplace transaction is paid for through Unibuz, payment is processed by our Payment Processor as described in Part A, clause 8. Where the buyer and seller arrange payment directly (e.g. cash on pickup), Unibuz has no visibility or responsibility for that payment.

5. Meeting to Complete a Sale

We strongly recommend meeting in a safe, public location - ideally on campus - following the safety guidance in Part D (Responsible Use Policy).

6. Disputes

Contact the other party first. Unibuz may provide reporting tools to help, but is not required to adjudicate buyer/seller disputes unless required by law.

Part G: Event Organiser Terms

Last updated: 1 October 2026

Publication URL: https://www.unibuz.com.au/legal/event-organiser-terms

These Event Organiser Terms apply to any user, club, society, or organisation that creates or promotes an event on Unibuz (an "Organiser"), and expand on Part A, clause 10.

1. Our Role

Unless expressly stated, Unibuz is not the organiser, host, venue operator, promoter, sponsor, insurer, or safety manager for any event created by an Organiser.

2. Organiser Responsibilities

  • Comply with all applicable laws, venue rules, permits, licences, and capacity limits.
  • Clearly disclose event details: location, date/time, price, age restrictions, accessibility, refund/cancellation terms, and the Organiser's contact details.
  • Hold any insurance required by the venue, your institution, or applicable law.
  • Not misrepresent the event's affiliation with Unibuz, a university, a student union, a club, society, sponsor, or venue.

3. Ticketing and Refunds

Where an event is ticketed through Unibuz, payments are processed by our Payment Processor as described in Part A, clause 8. Refund terms are set by the Organiser and must be disclosed before purchase. Unibuz will request our Payment Processor to issue a refund on the Organiser's instructions or where required by the Australian Consumer Law.

If Unibuz enables ticket transfer or resale between students, you must not resell a ticket for more than its original price, or use the Platform to run a commercial ticket resale or scalping operation. Some Australian States and Territories separately restrict or prohibit reselling tickets above face value for certain declared events – you are responsible for complying with any such law that applies to a specific event.

In some cases, fees payable to Unibuz are not refundable. These will be disclosed to you.

4. Prohibited Events

You must not create, promote, or run an event involving hazing or coercive initiation, unsafe alcohol or drug use, violence, discrimination, harassment, sexual exploitation, illegal activity, activism or unauthorised use of university facilities. Unibuz reserves the right to cancel or prohibit any event at its sole discretion.

5. Cancellations

Notify attendees as far in advance as possible, and handle refunds in line with your disclosed refund policy and applicable law.

6. Enforcement

We may remove an event listing, suspend an Organiser's ticketing privileges, or take other enforcement action under Part A, clause 21.

Part H: AI and Moderation Notice

Last updated: 1 October 2026

Publication URL: https://www.unibuz.com.au/legal/ai-and-moderation-notice

This notice explains how Unibuz uses automated tools and artificial intelligence to help keep the Platform safe, expanding on Part A, clause 12 and Part B, Sections 6/6A.

1. What We Use AI For

  • Content moderation - public posts, comments, marketplace listings, event listings, and profile text/images are reviewed by Google Gemini, which flags content for approval, human review, or removal, and detects sentiment and language.
  • Profile recommendations - we generate a numerical embedding of your profile text (via OpenAI) to suggest similar profiles or content.
  • Translation - tapping "translate" sends the relevant text to a translation service.

2. Automated Decision-Making Disclosure

Our automated moderation tool can make, or substantially assist in making, decisions that significantly affect your Account - including content approval/removal and Account warnings, restrictions, suspension or bans. These decisions draw on the content you submit, your account and moderation history, and automatically generated moderation/sentiment scores.

3. Accuracy and Limitations

Automated tools are not perfect and can produce false positives and false negatives. We combine automated signals with human review, especially for anything safety-critical.

4. Consequences of Automated Moderation

Moderation decisions are recorded and reviewed by our moderation team through an internal queue.

5. Requesting a Review

If you believe a moderation decision was wrong, you can request a review through the in-app reporting/appeals tool or by contacting safety@unibuz.com.au.

6. Not Professional Advice

Any AI-assisted feature is provided for convenience only and is not legal, medical, financial, academic, safety, or other professional advice.

7. Protecting Your Personal Information

Before you post, we try to detect and prompt you to remove common personal information from your text - a best-effort filter, not a guarantee, and it does not apply to text inside images.

Part I: Online Safety Policy

Last updated: 1 October 2026

Publication URL: https://www.unibuz.com.au/legal/online-safety

This Online Safety Policy explains the safety features available on Unibuz and where to go for help, expanding on Part A, clause 17.

1. Emergency Situations

Unibuz is not an emergency, counselling, medical, or crisis support service. If you or someone else is in immediate danger, call 000.

2. In-App Safety Tools

  • Report - flag a post, comment, message, listing, event, or user for review.
  • Block - stop a specific user from contacting you or appearing in your recommendations.
  • Content moderation - see Part H.

3. Child Safety

Unibuz has zero tolerance for content or conduct that sexualises, exploits, or endangers a minor. We report credible instances of child sexual exploitation material or grooming to the eSafety Commissioner and, where appropriate, to police.

4. Image-Based Abuse and Cyberbullying

If someone has shared an intimate image of you without your consent, or you are experiencing cyberbullying, you can report it to us, and you may also make a complaint to the eSafety Commissioner at esafety.gov.au, which operates dedicated complaints schemes for both issues.

5. Wellbeing Support

Unibuz does not currently offer an active in-app wellbeing alert feature. If you're struggling, we encourage you to reach out to your institution's student wellbeing or counselling service, a trusted person, or a crisis support service (for example, Lifeline on 13 11 14).

6. Reporting to Us

You can reach our safety team at safety@unibuz.com.au. We prioritise reports involving child safety, threats of harm, and image-based abuse.

Part J: Data Deletion and Account Closure Policy

Last updated: 1 October 2026

Publication URL: https://www.unibuz.com.au/legal/data-deletion

This policy explains what happens when you close your Unibuz Account or ask us to delete your personal information, expanding on Part A, clause 21 and Part B, Section 12.

1. How to Close Your Account

You can close your Account at any time through the app's account settings, or by submitting a request at Part K (Account Deletion Request) - https://www.unibuz.com.au/delete-account. You can also email privacy@unibuz.com.au.

2. What Happens When You Close Your Account

  • Your profile and Account become inaccessible to other users immediately.
  • Your content (posts, comments, listings, events) is removed from view.
  • Underlying data is scheduled for permanent deletion from our systems.

3. What We Keep, and Why

We retain a limited, unchangeable record of significant account and security events for security, fraud-prevention, and accountability purposes, and records required for legal, financial, tax, or regulatory purposes.

4. Data Held by Third Parties

Some information may continue to be held by third-party service providers after you close your Account, in accordance with their own retention practices - see Part B, Section 7.

5. Reactivating an Account

Once permanent deletion has occurred, your Account and content cannot be restored. If you closed your Account but permanent deletion has not yet occurred, contact support@unibuz.com.au as soon as possible.

Part K: Account Deletion Request

Last updated: 1 October 2026

Delete Your Unibuz Account

We're sorry to see you go. Before you request deletion, here's what to expect:

  • Your profile, posts, comments, listings, events, and messages will be removed from view immediately.
  • Your underlying data will be permanently deleted from our systems (see Part J for what's retained and why).
  • This action cannot be undone once permanent deletion has occurred.

To proceed, confirm your email address below and select "Delete My Account". We may ask you to verify your identity before completing the request.

If you have an unresolved payment, marketplace, or event dispute, we recommend resolving it first - closing your Account does not cancel any outstanding obligations.

Need help instead of deleting your Account? Contact support@unibuz.com.au - we're happy to help with privacy settings, blocking a specific user, or taking a break instead.

Request account deletion