Privacy Policy
Last updated 27 October 2026
Your privacy, plainly explained. BigMoves Pty Ltd (“BigMoves AI”, “we”, “us”, “our”) runs bigmoves.ai. This policy says what personal information the hub collects, why, who handles it and what you can ask us to do with it. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth), and for members in the European Union and the United Kingdom, the GDPR.
Who we are
BigMoves Pty Ltd, Queensland, Australia. We decide how your information is used (in GDPR terms, we are the controller). Contact us about privacy at hello@bigmoves.ai.
What we collect
- Your account: name, email, photo if you add one, and how you sign in.
- Your answers: who you build for, your business type, your AI level and whether you want help, from the questions after sign-up.
- What you do in the hub: what you open, download, copy, tick off, build, search for, vote on and post. This drives your Activity timeline, Continue where you left off and the “members past this step” counts.
- What you post: forum posts, comments, replies, reactions, requests and build reviews.
- Support requests: what you send through the help bubble, including any screenshot.
- Payments: for a Deals pass, the amount, date and Stripe’s reference. Stripe holds your card details; we never see them.
- Deal codes: which deals you claimed and the code, so you can see it again.
- Technical information: your IP address, browser and the pages you request, kept in our providers’ logs for security and to fix faults.
We do not use third-party analytics tools, advertising pixels or tracking across other sites, and we do not buy information about you.
Why we use it
- To run the account and the hub you asked for: sign-in, resources, trackers, the forum, support and the Deals pass (performing our contract with you).
- To show you the right resources, keep the hub safe, stop abuse and see what members use, so we make more of it (our legitimate interests).
- To send the weekly email, which you can switch off at any time (your consent, or for Australian members inferred consent from your membership).
- To keep payment records that tax law requires (a legal obligation).
We do not sell or rent your personal information, and we do not use it to train AI.
Who handles it for us
These providers handle personal information on our behalf, only to provide their service to us. Other members see what you post and your name beside it; question titles in the forum are public. AI OS, our own internal system, sends our emails, keeps support requests, and receives your activity in the hub to count what members use and to write the weekly email.
| Provider | What for | Where |
|---|---|---|
| Clerk | Sign-in: your name, email, photo and sign-in sessions | United States |
| Supabase | Our database and files: your account, answers, activity, posts and support requests | Sydney, Australia |
| Vercel | Hosting: every page request, including your IP address | Sydney, Australia, with a global network |
| Stripe | Deals pass payments. We never see or store your card number | United States and worldwide |
| Resend | Sends our emails (sign-in links, receipts, alerts) from hello@bigmoves.ai | United States |
| HighLevel | Sends the weekly email: your name and email | United States |
| Cloudflare | Bot protection on sign-up | Worldwide |
| Google (YouTube) | Plays a video after you press Watch, and serves video thumbnails | United States and worldwide |
| Secret | Supplies the deals. Told that a code was claimed; not given your name or email | France |
Information sent overseas
Our database and hosting are in Sydney. Some providers above handle information in the United States and elsewhere. Where information about members in the European Union or the United Kingdom leaves those regions, it is protected by the providers’ standard contractual clauses or an equivalent safeguard.
Cookies and browser storage
The hub only stores what it needs to work and the settings you choose. There is no analytics cookie, no advertising pixel and no tracking, so there is nothing to accept or reject. YouTube loads only after you press Watch on a video, using its privacy-enhanced player (youtube-nocookie.com); from then on YouTube’s own policy applies to that video. Thumbnails come from YouTube’s image servers, which set no cookies but do see your IP address. Stripe sets its own cookies on its checkout page.
| Name | Set by | What for | How long |
|---|---|---|---|
| __session, __client_uat, __clerk_* and similar | Clerk (cookies) | Keeps you signed in | The session token renews every minute; the others last up to a year |
| Bot checks | Clerk and Cloudflare | Stops bots creating accounts, on sign-up only | The sign-up |
| bm-offer-hidden | Us (cookie) | Remembers you closed the welcome offer | Until the offer ends |
| bm-preview | Us (cookie) | The admin preview switch, for admins only | 12 hours |
| bm-theme, bm-rail | Us (browser storage) | Light or dark, and whether the menu is collapsed | Until you clear it. Never sent to us |
| hub:want-deletes | Us (browser storage) | Finishes removing a saved search if the connection dropped | Until it is sent |
| bm-pending, bm-ob-later, bm-auth-method | Us (browser tab storage) | Finishes what you started after signing in, and remembers a skipped question | Until the tab closes |
Emails
We email you what you asked for: sign-in links and codes, receipts, replies to your support requests and alerts such as a shipped request you follow. The weekly email is on when you join. Switch it off in Account or with the unsubscribe link in any weekly email, and we stop within five business days.
How long we keep it
- Your account and activity: while your account is open.
- When you delete your account: your name and email are removed straight away, and your posts and reviews stay under “Former member” unless you ask us to remove them.
- Payment records: seven years, as Australian tax law requires.
- Support requests: until they are resolved, then up to two years.
- Provider logs: as long as each provider keeps them, usually 30 days or less.
Your rights
You can ask us to:
- give you a copy of the personal information we hold about you;
- correct it;
- delete it, or stop using it for something you object to;
- send it to you or to another service in a common format.
You can change your name, email and photo, or delete your account, yourself in Account, under Manage profile. For anything else, email hello@bigmoves.ai. We answer within 30 days. If you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to the data protection authority where you live.
Children
The hub is for people 18 and over. We do not knowingly collect information from children; if you think a child has an account, email us and we will delete it.
Do Not Track
The hub does not track you across other sites, so a browser’s Do Not Track or Global Privacy Control signal has nothing to switch off. We treat it as a request not to sell or share your information, which we never do anyway.
How we protect it
Everything travels over HTTPS. Only our servers reach the database, which turns away any direct access from browsers. Members-only files are served through short-lived links after your access is checked. If a breach puts your information at risk, we will tell you and the regulator as the law requires.
Changes to this policy
We update this policy when the hub changes. The date at the top shows the latest version, and for a change that matters we will also tell members in the hub or by email.
Contact
BigMoves Pty Ltd, Queensland, Australia. Email hello@bigmoves.ai.