Privacy policy
This policy describes how AUOdds (“we”) handles personal information. We operate from New South Wales, Australia. Contact: hello@auodds.com.
Some small businesses with annual turnover under A$3 million are exempt from the Australian Privacy Principles. We still follow this policy so you know what we collect and why. If the Privacy Act applies to us in full (including if we become an APP entity), this policy is how we meet those obligations.
1. What we collect
- Account: email address, password hash (not the password itself), API key, plan, account status, terms-acceptance time
- Usage: login times, API calls, IP address, browser type, pages on auodds.com
- Support: emails you send to hello@, admin@, or support@auodds.com (those addresses currently forward to our operator inbox)
- Payments (when Square is connected): email, payment and subscription status, Square customer / payment / subscription ids, refund and dispute events. We do not store full card numbers. Square is the card processor.
- Cookies / local storage: session and API key on your device for sign-in
We do not collect tax file numbers, health records, or identity documents unless a law later requires checks we have not implemented. We do not collect your bookmaker account balances or betting history — we do not have access to them.
2. Why we collect it
- To create and secure your Partner account and API key
- To provide the odds board, alerts, and streams you paid for (or that we granted while checkout is not yet live)
- To send confirmation, password-reset, billing, and outage email
- To detect abuse, outages, and billing events (paid, refunded, disputed, failed, cancelled)
- To meet Australian Consumer Law and tax record-keeping if they apply
We do not sell your email list. We do not use the service to profile you for third-party ads.
3. Who we share with
- Hosting: our VPS provider (Google Cloud, Sydney region)
- DNS / domain: Namecheap
- Email: inbound forwarding Namecheap → the operator Gmail inbox, until a dedicated mailbox is live; outbound transactional mail via an SMTP provider we configure (intended: Resend)
- Payments: Square Australia, when connected
- The law: if a court, regulator, or Australian law requires it
Servers and backups are intended to stay in Australia (Sydney). Email forwarding to Gmail and SMTP providers can mean a copy sits on those providers’ systems, which may be outside Australia. Square processes payments under Square’s own privacy terms.
4. Overseas disclosure
If the Privacy Act APPs apply, sending personal information outside Australia can be an APP 8 disclosure. Namecheap, Google (Gmail), Resend, and Square may store or access data outside Australia. We use them only to run the service (hosting, email, payments). We do not sell that access.
5. Security and retention
Passwords are stored as PBKDF2 hashes. API keys are secrets; rotate them if leaked. We keep account and billing records while the account exists and for a reasonable period after closure (typically up to 7 years if needed for tax or dispute records). Mail logs on the admin desk retain recent send attempts so we can see failures. Webhook logs retain recent Square events (ids and status, not card numbers).
6. Access, correction, complaints
You may request access to or correction of the personal information we hold, or complain about our handling of it, by emailing hello@auodds.com. We will respond in a reasonable time. If the Privacy Act applies to us as an APP entity, you may then contact the Office of the Australian Information Commissioner (oaic.gov.au). If we are a small business operator under s 6D, the OAIC process may not apply; consumer issues can still go to NSW Fair Trading or the ACCC.
7. Direct marketing and Spam Act
We may email service notices (outages, billing, security, password reset). Those are not marketing. Marketing emails, if we send them, will include an unsubscribe and will only go to people who have a relationship with us or who consented, consistent with the Spam Act 2003 (Cth). We will not buy or sell marketing lists as part of this product.
8. Children
The service is for people 18 years or older. We do not knowingly create accounts for children. If we learn an account belongs to a child, we will close it.
9. Cookies
We use local storage for your session and API key so you stay signed in on that browser. We do not run third-party advertising cookies on auodds.com.
10. Changes
We will post updates on this page with a new effective date.