Privacy Policy

Effective: 30 June 2026

Compliant with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who We Are

EdgeBoard ("we", "us", "our") is an Australian odds comparison and analytics platform for NRL sports betting. We are committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth).

Contact: troyflavel@gmail.com

2. What Information We Collect

Information you provide directly:

Email address (required to create an account)
Name (if you sign in with Google or Facebook)
Phone number (optional — only if you opt into SMS notifications)
Bet log entries you choose to record (match, odds, stake, result)
Bookmaker balances you enter in the balance tracker
Notification preferences

Payment information:

Pro subscriptions are processed by Stripe. We never store your card number, expiry, or CVV. Stripe stores payment details under their own privacy policy and PCI-DSS compliance. We receive and store only your Stripe Customer ID and subscription status.

Information collected automatically:

Browser push notification subscription tokens (if you opt in)
Cookies used for session management and preferences (favourite team, bookmaker balances)
Referral codes passed in URLs
Aggregate analytics (page views, feature usage) via Posthog — anonymised where possible

3. How We Use Your Information

To provide and operate the EdgeBoard platform
To send notifications you have subscribed to (arb alerts, price alerts, EV alerts, digest emails)
To process and manage your Pro subscription via Stripe
To calculate and display your bet P&L, ROI, and closing line value
To send transactional emails (trial reminders, payment receipts, weekly performance summaries)
To improve the platform based on anonymised usage analytics
To contact you about material changes to these policies

We do not use your information for automated decision-making that produces legal or similarly significant effects.

4. Affiliate Links

When you click a bookmaker link from EdgeBoard, we track the click for affiliate commission purposes. We may receive a commission if you sign up or deposit at a bookmaker. We do not share your personal information with bookmakers — the click tracking is anonymous.

5. Third-Party Services

We use the following third-party services to operate EdgeBoard:

Supabase

Authentication and database (PostgreSQL). User data stored in AWS ap-southeast-2 (Sydney).

Stripe

Payment processing and subscription management.

Resend

Transactional email delivery.

Twilio

SMS notifications (only if you provide a phone number).

Posthog

Product analytics — anonymised usage data.

Vercel

Web hosting and edge functions.

Google / Meta

OAuth sign-in only — we receive your email and name. We do not share any other data with them.

6. Data Storage and Security

Your data is stored in Supabase PostgreSQL hosted in AWS ap-southeast-2 (Sydney, Australia). We use industry-standard encryption in transit (TLS) and at rest. Access to production data is restricted to the platform operator.

We do not sell, rent, or trade your personal information to third parties.

7. Cookies

We use cookies for:

Session management — Supabase authentication tokens (essential)
Preferences — your favourite NRL team and bookmaker balances (stored locally, never sent to our servers)
Referral tracking — a temporary cookie to attribute your registration to a referrer

We do not use third-party advertising cookies.

8. Your Rights Under the Australian Privacy Act

Under the Australian Privacy Principles you have the right to:

Access the personal information we hold about you
Correct inaccurate personal information
Delete your account and associated personal data
Opt out of marketing emails using the unsubscribe link in any email
Withdraw consent for push or SMS notifications at any time from Settings

To exercise these rights, email troyflavel@gmail.com. We will respond within 30 days.

9. Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. Stripe billing records).

10. Children

EdgeBoard is not directed at persons under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via email to registered users. The effective date at the top of this page will always reflect the current version.

12. Complaints

If you have a complaint about how we handle your personal information, please contact us first at troyflavel@gmail.com. If we cannot resolve your complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.