RaceVision Privacy Policy

RaceVision respects your privacy and is committed to handling personal information responsibly, transparently and in accordance with applicable Australian privacy laws.

This Privacy Policy explains how RaceVision collects, holds, uses and discloses personal information when you use the RaceVision website, create an account, purchase or manage a membership, contact us or otherwise interact with our services.

1. Who we are

RaceVision is an Australian racing intelligence and analysis service.

RaceVision is operated by The Trustee for Campion Family Trust, ABN 78 869 196 077, trading as RaceVision.

For privacy enquiries, requests or complaints, contact support@racevision.com.au.

2. Personal information we collect

The personal information we collect depends on how you interact with RaceVision.

Account information

When you create or use a RaceVision account, we may collect or hold information including:

• your email address;
• your RaceVision account identifier;
• account role and status;
• authentication and account-security information;
• login and session information;
• account creation and activity dates; and
• other information you voluntarily provide to us.

RaceVision uses Supabase to provide account authentication and related database services.

Passwords are handled through the authentication service and are not stored as readable passwords in RaceVision's ordinary customer profile records.

Membership and subscription information

If you purchase, trial, cancel, reactivate or otherwise manage a RaceVision membership, we may collect or hold information including:

• your membership plan;
• membership and subscription status;
• trial start and end dates;
• billing-period dates;
• cancellation status and dates;
• payment failure information and payment-attempt status;
• Founding Member status and number, where applicable;
• payment-provider customer and subscription identifiers; and
• other information required to administer your membership.

Payment information

RaceVision uses Stripe to process subscription payments.

When you enter payment-card or billing information during checkout or membership management, that information is provided directly to Stripe.

RaceVision does not store complete payment-card numbers or card security codes.

We may receive and retain limited information from Stripe necessary to administer your membership, such as payment or subscription status, Stripe customer and subscription identifiers, billing dates, failed-payment information and cancellation information.

Communications

If you contact RaceVision, we may collect your email address, the contents of your enquiry, information you provide to us and records of our correspondence with you.

Technical and security information

When you access RaceVision, technical information may also be generated or processed as part of operating and securing the service.

• authentication and session information;
• security tokens;
• request and connection information;
• browser or device information;
• IP address;
• timestamps; and
• technical logs generated by our hosting, authentication or security providers.

We use this information where reasonably necessary to operate, secure, troubleshoot and protect RaceVision.

3. Information we do not generally seek to collect

RaceVision does not require customers to provide wagering histories or details of bets they have placed in order to use the racing-analysis service.

RaceVision does not generally seek to collect sensitive information as defined by the Privacy Act 1988 (Cth).

If we receive sensitive information, we will handle it in accordance with applicable Australian privacy laws, including determining whether it may lawfully be retained.

4. Why we collect and use personal information

Our primary purposes for collecting and using personal information include:

• creating and administering RaceVision accounts;
• authenticating users and maintaining account security;
• providing access to RaceVision services;
• establishing and managing memberships and free trials;
• processing and administering subscription payments;
• determining whether an account has a current entitlement to access the service;
• providing account confirmation and password-recovery services;
• responding to enquiries and providing customer support;
• preventing misuse, fraud and unauthorised account access;
• maintaining, troubleshooting and improving the service;
• complying with legal and regulatory obligations; and
• enforcing our Terms of Service and protecting our legitimate interests.

We may also use or disclose personal information for a secondary purpose where you have consented, where you would reasonably expect us to do so and the secondary purpose is related to the primary purpose, or where otherwise permitted or required by law.

5. Artificial intelligence and racing analysis

RaceVision uses third-party artificial intelligence services as part of its racing-analysis system.

Racing information, form data, market information, research findings and related racing-analysis inputs may be processed by external artificial intelligence service providers to assist RaceVision in producing racing analysis, rankings and predictions.

The racing-analysis information supplied to these systems may include information about races, horses, jockeys, trainers, racing form, market prices, track conditions, race updates and other racing-related evidence.

RaceVision does not intentionally provide member account information, payment information or subscription information to AI providers as part of the race-analysis process.

RaceVision takes reasonable steps to limit information supplied to AI providers to information required for the relevant racing-analysis function.

RaceVision's racing predictions do not determine a member's subscription price, payment eligibility or entitlement to membership.

RaceVision may use automated systems to administer ordinary account functions, such as determining access based on subscription status.

6. Service providers and disclosures

RaceVision uses third-party providers to operate the service.

• Supabase — authentication, account management and database services;
• Stripe — subscription billing and payment processing;
• Resend — transactional and authentication email delivery;
• Vercel — website and application hosting;
• artificial intelligence providers used by RaceVision's racing-analysis system; and
• racing-data, odds, research and information providers used to generate RaceVision racing analysis.

We may disclose information to contractors and service providers only where reasonably necessary for them to provide the relevant service, subject to applicable contractual, technical and legal controls.

RaceVision does not sell or rent members' personal information.

We may also disclose personal information to professional advisers, where required or authorised by law, to law enforcement or regulators, to investigate fraud or security incidents, in connection with a genuine business sale or restructure, or with your consent.

7. Email communications

RaceVision uses email to provide important account and service communications.

Authentication emails, including account confirmation and password-recovery messages, are generated through our authentication system and delivered using our email service provider.

Your email address and the information necessary to deliver the relevant message may therefore be processed by those providers.

If RaceVision sends direct marketing communications, we will do so in accordance with applicable Australian law and provide an appropriate way to unsubscribe where required.

Unsubscribing from marketing does not prevent RaceVision from sending necessary transactional, account, security, billing or service-related communications.

8. Cookies, browser storage and similar technologies

RaceVision uses essential browser storage and similar technologies to provide authentication, maintain sessions, protect accounts and operate the website.

At the date of this Privacy Policy, RaceVision does not intentionally use third-party advertising pixels or behavioural advertising trackers on the RaceVision website.

If we later introduce non-essential analytics, advertising or tracking technologies, we may update this Privacy Policy and provide additional notices or controls where appropriate or required.

9. Overseas processing and disclosure

Some of RaceVision's technology and service providers operate infrastructure outside Australia or use global cloud infrastructure.

As a result, personal information may be processed, stored or accessible outside Australia depending on the provider, service configuration and infrastructure used at the relevant time.

Providers that may involve overseas processing include cloud hosting, authentication, payment, email and other technology service providers.

Where the Australian Privacy Principles require RaceVision to take steps in relation to an overseas disclosure, RaceVision will take reasonable steps required by applicable law.

Because cloud providers may change infrastructure locations and subprocessors over time, it may not always be practicable for RaceVision to identify every country in which information may be processed.

10. Security

RaceVision takes reasonable technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

• authenticated account access;
• restricted administrative access;
• server-side access controls;
• secure authentication tokens;
• payment processing through a specialist payment provider;
• secure hosting and database services;
• encrypted communications where supported;
• secret and credential management; and
• monitoring and investigation of suspected security issues.

No internet-based service can guarantee absolute security.

11. Data breaches

RaceVision will investigate suspected data breaches and take appropriate steps to contain and respond to them.

Where the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth) applies and a breach is likely to result in serious harm, RaceVision will comply with applicable notification obligations.

12. Retention and deletion

RaceVision retains personal information only for as long as reasonably necessary for the purposes for which it was collected, to operate and protect the service, to resolve disputes, and to comply with legal, accounting, taxation, fraud-prevention or regulatory requirements.

Different categories of information may therefore be retained for different periods.

When personal information is no longer required and RaceVision is not required or authorised to retain it, we will take reasonable steps to destroy or de-identify it.

Information may remain temporarily in secure backups until those backups are overwritten or deleted in accordance with normal backup and retention processes.

De-identified information that can no longer reasonably identify an individual may be retained for analytics, service improvement, statistical or historical purposes.

13. Access to your personal information

You may request access to personal information RaceVision holds about you by contacting support@racevision.com.au.

We will respond within a reasonable period and generally aim to respond within 30 days.

We may need to verify your identity before providing access.

14. Correction of personal information

If you believe personal information RaceVision holds about you is inaccurate, out of date, incomplete, irrelevant or misleading, you may request correction by contacting support@racevision.com.au.

We will take reasonable steps to consider the request and generally aim to respond within 30 days.

15. Account deletion

You may request deletion or closure of your RaceVision account by contacting support@racevision.com.au.

Account closure or deletion may be irreversible.

Certain records may need to be retained after account closure, including information required for taxation, accounting, payment records, fraud prevention, dispute resolution or other legal obligations.

16. Children

RaceVision is intended for persons aged 18 years and over.

We do not knowingly seek to establish RaceVision memberships for persons under 18.

If we become aware that an account has been created by a person under 18, we may suspend or close the account and take reasonable steps to delete or appropriately handle the associated personal information, subject to legal retention requirements.

17. Collection notices

Where appropriate, RaceVision may provide additional privacy or collection notices at or before the time personal information is collected.

Those notices may explain why information is collected, whether collection is required or optional, what may happen if information is not provided, likely disclosures, overseas processing and how to contact RaceVision.

18. Privacy complaints

If you have a question or complaint about how RaceVision has handled your personal information, contact support@racevision.com.au.

We will acknowledge and investigate privacy complaints within a reasonable period and generally aim to provide a substantive response within 30 days.

If you are not satisfied with our response, you may have the right to complain to the Office of the Australian Information Commissioner.

19. Third-party websites and services

RaceVision may contain links to third-party websites or services.

RaceVision is not responsible for the privacy practices of independent third parties. You should review the privacy policies of those organisations when providing information directly to them.

20. Changes to this Privacy Policy

RaceVision may update this Privacy Policy from time to time to reflect changes to our services, technology providers, information-handling practices or legal obligations.

The current version will be published on the RaceVision website with its effective or last-updated date.

21. Contact RaceVision

RaceVision
The Trustee for Campion Family Trust
ABN 78 869 196 077
Email: support@racevision.com.au