EXsessions — Privacy Policy

Version: 1.1 Effective: To be set on publish

1. Who this Policy covers

The EXsessions platform is operated by Wyuna Ventures Pty Ltd (ABN 55 133 591 250) of Suite 607, Level 6, 80 William Street, Woolloomooloo NSW 2011, Australia ("EXsessions", "we", "us", "our"). For the purposes of the Privacy Act 1988 (Cth), Wyuna Ventures Pty Ltd is the entity responsible for personal information collected through the EXsessions platform. This Privacy Policy applies to everyone who uses EXsessions — both clients who book sessions and professionals who deliver them. It describes the personal information we collect, how we use it, and your rights.

2. Information we collect

We collect:

• Account information (name, email, phone number)

• Session and booking records

• Payment information (processed by Stripe; we do not store card details)

• Professional billing information (ABN, business details) from professionals

— this is used for payouts and tax documentation only and is never shown to clients

• Technical information (IP address, browser user-agent — stored only as

one-way SHA-256 hashes in our acceptance records)

3. How we use your information

We use your information to:

• Operate the platform and deliver the sessions you book

• Process payments and issue receipts, tax invoices, and payout

documentation

• Send you service emails (booking confirmations, reminders, receipts)

• Protect the platform from fraud and abuse

• Comply with our legal obligations

4. Who we share information with

• Stripe — for payment processing (subject to Stripe's own privacy

terms)

• Daily.co — for video session infrastructure

• Supabase — for data hosting

• Resend — for transactional email delivery

We do not sell your personal information. Professional legal/tax details (ABN, business address) are never shared with clients.

5. Provider privacy

Professionals on EXsessions have their legal entity details (ABN, business name, registered address) kept private from clients. Client-facing invoices show EXsessions as the seller; provider identity details appear only on internal payout documentation issued by EXsessions to the professional.

6. Your rights

You can request a copy of the personal information we hold about you, correction of inaccurate information, or deletion of your account. Contact us via exsessions.com/support.

7. Data retention

We retain account information for as long as your account is active, plus the period required to meet our tax and record-keeping obligations (typically 7 years in Australia).

8. Security

We use encryption in transit (TLS) and at rest. Acceptance records store one-way hashed versions of IP addresses and user-agent strings — the raw values are never persisted.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified to you at your next sign-in; you will be asked to re-accept before continuing to use the platform.

10. Business transfers and group restructure

We may transfer the EXsessions business — including the personal information we hold about you — to a related body corporate, a successor entity, a purchaser of the EXsessions business, or a dedicated EXsessions company established within our group. Where this happens, we will give you reasonable notice (for example, by email or in-platform notice). Your information will continue to be handled in accordance with this Policy or a substantially similar policy adopted by the receiving entity.

11. Governing law

This Policy is governed by the laws of New South Wales, Australia. It complies with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

---

Contact: exsessions.com/support