Privacy Policy — Effective May 14, 2026

1. Who we are

Edgewise Terminal ("we", "us") is a statistical sports research platform operated from Darwin, NT. We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Data we collect

• Account data: email, hashed password, display name.
• Bet & ledger entries: the records you upload or enter. These are stored against your account and are anonymised before being used in any aggregate or model-training context.
• Usage data: page views, feature interactions, device/browser, IP address (truncated for analytics).
• Payment metadata: processed by Stripe; we do not store full card numbers.

3. How we use it

• Provide the Service (authentication, ledger storage, model outputs).
• Improve probability models using anonymised, aggregated bet data.
• Send transactional emails (receipts, security alerts). Marketing email is opt-in only.
• Detect fraud, abuse, and breaches of our Terms.

4. Anonymisation

Bet and ledger data used for model training and benchmarking is stripped of direct identifiers (user ID, email, IP) and aggregated before processing. Re-identification is not attempted.

5. Sharing & sub-processors

• Hosting & database: Lovable Cloud (data stored in regions selected by the provider; primary region is documented in your account dashboard).
• Payments: Stripe (PCI-DSS Level 1) — processed in the United States and Australia.
• Markets data: OddsAPI (United States).
• Error monitoring: Sentry (United States).
• Product analytics: PostHog and Google Analytics (United States), in anonymised form.
• Email delivery: transactional providers under DPAs.
• We do not sell personal information.

International transfers: some sub-processors are located outside Australia. Where personal information is transferred overseas, we take reasonable steps to ensure the recipient is bound by privacy obligations substantially similar to the Australian Privacy Principles (e.g. standard contractual clauses, Data Processing Addenda).

6. Your rights

Under the APPs and GDPR you may:

• Access a copy of your personal data.
• Request correction or deletion (right to erasure).
• Object to or restrict processing.
• Port your ledger data (CSV export).
• Withdraw consent at any time.

Requests: edgewiseplatform@gmail.com — we respond within 30 days.

7. Retention

Account and ledger data is retained while your account is active and for up to 7 years after closure to meet financial-record obligations. Anonymised aggregates may be retained indefinitely.

8. Security

We use TLS in transit, encryption at rest, row-level security on all user tables, and least-privilege access. No system is perfectly secure — notify us immediately of any suspected breach.

Notifiable Data Breaches: if a breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by Part IIIC of the Privacy Act 1988 (Cth).

9. Cookies

We use first-party cookies and localStorage for authentication, session preferences, and the 18+ age gate. No third-party advertising cookies are set.

9a. Children's privacy

The Service is strictly for users aged 18 and over. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us and we will delete it.

9b. Marketing & communications

Transactional emails (receipts, security alerts, service notices) are sent on a service basis and cannot be opted out of while you hold an account. Marketing email is opt-in only and every marketing email contains an unsubscribe link.

9c. Automated processing

We do not make automated decisions that produce legal or similarly significant effects about you. Probability models are shown for research purposes only.

9d. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or in-app banner at least 14 days before they take effect.

10. Complaints & regulators

• Office of the Australian Information Commissioner: oaic.gov.au
• Australian Communications and Media Authority (ACMA): acma.gov.au
• EU residents — your local Data Protection Authority via the EDPB members list.

11. Contact

edgewiseplatform@gmail.com · See also our Terms of Use.