Privacy Policy

This Privacy Policy explains how ClearStake Betting Pty Ltd ("ClearStake", "we", "us", "our") collects, uses, discloses, and protects personal information about members and visitors to our website at clearstakebetting.com and the services offered through it.

ClearStake is based in Melbourne, Australia. We comply with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth) and applicable Australian privacy law.

We collect the following categories of personal information:

• Account information. When you sign up, we collect your email address, name (if provided), authentication identifiers, and any profile details you choose to add. This data is managed by our authentication provider, Clerk.
• Billing information. When you subscribe, you provide payment details directly to our payment processor, Stripe. We do not see, store, or have access to your full card number. We do receive billing metadata from Stripe — customer ID, subscription status, plan, and billing period — which we store against your account.
• Usage information. We collect aggregated, mostly anonymised data about how the service is used — pages viewed, features accessed, approximate location (city / country level only, derived from IP), device type, and browser. This is collected by Vercel Analytics.
• Communications. If you email us or reach out via Discord, we keep a record of those communications so we can respond and refer back to them.
• Cookies and similar technologies. We use a small number of strictly necessary cookies for authentication (Clerk session) and for keeping you logged in. We do not use advertising or cross-site tracking cookies.

We do not collect sensitive information as defined under the Privacy Act (such as health information, racial or ethnic origin, or political beliefs).

We use personal information only for the purposes for which it was collected, namely:

• To create and operate your account, including authentication and access control;
• To process subscriptions, billing, renewals, and refunds via Stripe;
• To provide the services you have subscribed to, including the EV Board, recommended tips, and related analytics;
• To respond to your support requests and communicate service updates;
• To improve the service, debug issues, and develop new features (using aggregated usage data wherever possible);
• To meet legal obligations, prevent fraud, and enforce our Terms & Conditions.

We do not sell your personal information to anyone, and we do not use it for targeted advertising.

To operate the service, we rely on a small number of third-party providers ("sub-processors"). These providers receive only the information necessary to perform their function:

• Clerk — authentication and user identity management.
• Stripe — payment processing, subscription billing, customer portal.
• Vercel — application hosting and analytics.
• Google Workspace / Google Sheets — internal data storage for service outputs surfaced to members. No personal information is stored here other than what is necessary to operate the service.
• Discord — community channel. Information you share there is governed by Discord's own privacy policy.
• Email providers — transactional email delivery (e.g. password reset, billing notifications).

Each of these providers has its own privacy practices. We choose providers we consider reputable and that offer appropriate data protection. Some of these providers are based outside Australia (primarily in the United States and Europe), so by using the service you consent to your information being transferred and processed in those jurisdictions.

We may disclose your personal information:

• To the sub-processors listed in section 4, strictly for the purposes of operating the service;
• To our professional advisors (lawyers, accountants, auditors), where reasonably necessary;
• To law enforcement or regulatory authorities where required by Australian law or in response to a valid legal request;
• To a successor entity in the event of a business sale, merger, or restructure, in which case we will require any successor to honour this Privacy Policy.

We will not disclose your personal information for any other purpose without your consent, except where required or permitted by law.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These steps include:

• Encryption in transit (TLS / HTTPS) for all data sent to and from the service;
• Encryption at rest for stored data, where provided by our sub-processors;
• Restricted access — only ClearStake personnel who need access to perform their role can reach production systems;
• Use of established, security-audited platforms (Clerk, Stripe, Vercel) for the highest-risk surfaces (auth and payments).

No system is completely secure. While we take reasonable steps, we cannot guarantee absolute security. If you become aware of any security issue, please email hugo@clearstakebetting.com immediately.

We retain personal information only for as long as is reasonably necessary for the purposes for which it was collected, or as required by law.

• Account data is retained while your account is active and for a reasonable period after cancellation (typically up to 24 months) so we can restore access if you return, handle billing disputes, and meet record-keeping obligations.
• Billing records are retained for at least 7 years to comply with Australian tax and financial record-keeping laws.
• Support communications are retained for as long as needed to resolve the matter and any related follow-up.
• Aggregated and anonymised usage data may be retained indefinitely.

When data is no longer needed, we delete or de-identify it.

Under Australian privacy law, you have the right to:

• Access the personal information we hold about you;
• Correct any inaccurate or out-of-date information;
• Request deletion of your personal information, subject to our legal obligations to retain certain records;
• Withdraw consent for any optional processing, by closing your account or contacting us;
• Lodge a complaint if you believe we have mishandled your information.

To exercise any of these rights, email hugo@clearstakebetting.com. We will respond within 30 days. If we cannot resolve your concern, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We use a minimal set of cookies, all of which fall into the "strictly necessary" or "analytics" category:

• Authentication cookies (set by Clerk) keep you signed in. Without them you would have to log in on every page load.
• Analytics cookies (Vercel Analytics) collect anonymous usage data about pages viewed and approximate location. These do not track you across other websites.

We do not use advertising cookies, third-party retargeting, or cross-site trackers. You can disable cookies in your browser, but doing so will prevent you from signing in to your account.

ClearStake is intended for adults only. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that we have collected information from a person under 18, we will delete it promptly.

Some of our sub-processors (notably Clerk, Stripe, and Vercel) are based in the United States or other jurisdictions outside Australia. Where personal information is transferred outside Australia, we take reasonable steps to ensure it is handled in a manner consistent with the Australian Privacy Principles.

By using the service you consent to your personal information being transferred to, and stored or processed in, jurisdictions outside Australia.

We may update this Privacy Policy from time to time to reflect changes to the service, our practices, or the law. The "Effective date" at the top of this page indicates when it was last updated.

Material changes will be communicated via email or in-product notice. Continued use of the service after such notice constitutes acceptance of the updated Policy.

For any privacy-related questions, requests, or complaints, contact us at hugo@clearstakebetting.com. We aim to respond to all privacy enquiries within 30 days.