Privacy Policy

1. Who We Are

RadarOps ("we", "us", "our") is a company incorporated in Victoria, Australia. We operate the RadarOps market data analytics platform available at radarops.uk. We are the data controller responsible for your personal data.

For any privacy-related queries, contact us at: [YOUR CONTACT EMAIL]

2. Applicable Privacy Laws

This Privacy Policy is governed by the Australian Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). If there is any inconsistency between this policy and the APPs, the APPs will prevail to the extent of that inconsistency.

RadarOps is an Australian business and this policy is written in accordance with Australian law. While we sell our service globally, we do not make representations about compliance with the privacy laws of any other jurisdiction. By using our service, you agree that your data is handled in accordance with Australian law.

3. Data We Collect

We collect the following personal data:

• Email address — collected when you create an account.

• Password — stored as a one-way Argon2id hash; we cannot read your password.

• Payment information — processed by Stripe. We do not store card numbers or payment details directly.

• Telegram Chat ID — collected only if you voluntarily enable Telegram alerts in your account settings.

• Usage data — including login timestamps, IP address, and session activity, collected for security and fraud prevention purposes.

We collect personal information only by lawful and fair means, and not in an unreasonably intrusive way (APP 3).

4. Lawful Basis for Processing

Under the Australian Privacy Principles, we collect and use personal information for the primary purpose for which it was collected — providing you with access to the RadarOps platform — or for a related secondary purpose you would reasonably expect (APP 6). We only collect information by lawful and fair means and not in an unreasonably intrusive way (APP 3).

5. How We Use Your Data

We use your data to:

• Provide and maintain your account and subscription.

• Authenticate your identity and protect account security.

• Process payments via Stripe.

• Send Telegram alerts if you have opted in and provided your Chat ID.

• Send transactional emails (account verification, password resets, billing notices, trial notifications).

• Monitor for fraudulent or abusive activity.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Third-Party Services

We use the following third-party processors who may handle your data:

• Stripe (stripe.com) — payment processing. Stripe is PCI-DSS compliant. Stripe's privacy policy is available at stripe.com/privacy.

• Telegram — if you enable Telegram alerts, your Telegram Chat ID is stored and used to deliver alerts via the Telegram Bot API. Telegram's privacy policy is available at telegram.org/privacy.

• Binance — market data is sourced from Binance's public data feeds. We do not share your personal data with Binance.

We do not use third-party advertising networks, analytics trackers, or data brokers.

Before disclosing personal information to a third party, we take reasonable steps to ensure that the third party does not breach the Australian Privacy Principles in relation to that information (APP 6).

7. Cookies & Sessions

We use a single HTTP-only session cookie to keep you logged in. This cookie:

• Is not used for tracking or advertising.

• Is not accessible by JavaScript.

• Expires after 24 hours of inactivity.

• Is required for the service to function.

We do not use third-party cookies, tracking pixels, or advertising cookies of any kind.

8. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will remove your personal data from our live systems within 30 days. Some data may be retained in encrypted backups for up to 90 days before being purged. Payment records may be retained for up to 7 years to comply with financial and tax obligations.

We will take reasonable steps to destroy or de-identify personal information once it is no longer needed (APP 11.2).

9. International Data Transfers

Your data may be processed by Stripe, whose infrastructure is based in the United States. Stripe relies on Standard Contractual Clauses (SCCs) for international data transfers where required.

For Australian users: before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles in relation to that information (APP 8). By using our service, you consent to your personal information being processed in the United States by Stripe in accordance with Stripe's privacy policy.

We do not transfer your personal data to parties other than those listed in this policy.

10. Notifiable Data Breaches

We are subject to the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). In the event of an eligible data breach that is likely to result in serious harm to any affected individuals, we will:

• Notify the Office of the Australian Information Commissioner (OAIC) as soon as practicable.

• Notify affected individuals directly as required by law.

• Take immediate steps to contain the breach and prevent further unauthorised access.

11. Your Rights

Under the Australian Privacy Act 1988 (Cth), you have the following rights:

• Access (APP 12) — request a copy of the personal information we hold about you.

• Correction (APP 13) — request correction of information that is inaccurate, incomplete, or out of date.

• Deletion — request deletion of your account and associated data, subject to legal retention requirements.

• Complaint — if we cannot resolve your concern directly, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

To exercise any of these rights, contact us at [YOUR CONTACT EMAIL]. We will respond within 30 days.

12. Children and Minors

RadarOps is not directed at persons under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will delete that data immediately. If you believe a minor has created an account, please contact us at [YOUR CONTACT EMAIL].

13. Security

We implement appropriate technical and organisational measures to protect your data, including:

• Argon2id password hashing — your password is never stored in readable form.

• HTTPS/TLS encryption for all data in transit.

• HTTP-only, SameSite session cookies.

• Two-factor authentication (2FA) available for all accounts.

• Access controls limiting who within our organisation can access personal data.

We take reasonable steps to protect personal information from misuse, interference, loss, and from unauthorised access, modification or disclosure (APP 11.1).

14. Complaints

If you believe we have breached the Australian Privacy Principles, you may make a complaint by contacting us at [YOUR CONTACT EMAIL]. We will respond within 30 days.

If you are not satisfied with our response, you may escalate to:

• Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au | 1300 363 992

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

16. Contact

For any questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact us at:

Email: [YOUR CONTACT EMAIL]

We aim to respond to all enquiries within 5 business days.

For unresolved Australian privacy complaints, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.