PedalPanel Privacy Policy
Last updated
1. About this policy
This policy explains how EGV PTY LTD (ABN 84 600 083 761), trading as PedalPanel (“we”, “us”), handles personal information. It covers:
- advertisers who create an account or buy a campaign,
- businesses that enquire about hosting our screens on their bikes,
- people who visit pedalpanel.com.
We handle personal information in line with the Australian Privacy Principles. Questions go to admin@pedalpanel.com.
2. What we collect
| Who | What we collect | Where it comes from |
|---|---|---|
| Advertisers | Name, email, business name, password (stored securely, never readable by us), phone number if you give it. If you sign in with Google, your name and email from your Google account | You, when you sign up |
| Advertisers | Campaign details: plays bought, length, start date, approvals, credit, refunds, play counts | Our systems and the screens' play logs |
| Advertisers | The ads you upload, and any notes you send with them | You |
| Advertisers | Payment records: amounts, dates, the last four digits and type of your card | Stripe (we never receive your full card number) |
| Rental shops | Name, email, phone, shop name, suburb, number of bikes, anything you write in your enquiry | You, through our enquiry form |
| Website visitors | Pages visited, clicks, scrolling, device and browser type, approximate location from your IP address | Microsoft Clarity, on our public pages only (see section 5) |
We don't collect sensitive information such as health or religious details, and we ask you not to include it in ads or messages. Our screens show ads only; they don't have cameras or count passers-by.
3. How we use it
We use your information to:
- run your account and campaigns: review and approve ads, schedule them, count plays and show them on your dashboard,
- take payments, give refunds and keep financial records we're required to keep,
- email you about your campaigns: receipts, start dates, approvals, reminders and when your campaign finishes,
- reply to enquiries, including from rental shops interested in hosting screens,
- understand how people use our website so we can make it easier to use,
- meet our legal obligations and protect against fraud or misuse.
We don't send marketing emails at the moment. If we start, we'll ask for your consent first, and every marketing email will have an unsubscribe link. Some campaign emails include a short suggestion to run your campaign again; you can turn those off with the unsubscribe link in the email.
We don't sell your personal information, and we don't share it with other advertisers.
4. Who we share it with
Only the two people who run PedalPanel can see customer information. We use the services below to run PedalPanel. Each gets only what it needs to do its job.
| Service | What it does for us | What it receives | Where data may be stored |
|---|---|---|---|
| Stripe | Payments and refunds | Your payment details and payment records | Australia and the United States |
| Supabase | Our database and file storage | Account, campaign and ad data | Singapore |
| Render | Hosts our website | Data passing through the website | Singapore |
| Resend | Sends our emails | Your name, email address and email content | United States |
| Microsoft (365 and Clarity) | Our email inbox; website analytics | Emails you send us; website usage data | United States and other countries |
| Vehicle HUB (Sysolution) | The system that runs our screens | Your ad image and its play schedule, not your contact or payment details | China |
Some of these services store data outside Australia. Before sharing, we take reasonable steps to make sure they protect it in line with Australian privacy law.
We may also disclose information if the law requires it, or to protect our rights in a dispute. Rental shops that host our screens see play counts for their own bikes only, never advertisers' personal details.
5. Cookies and session recordings
- Login cookies. When you sign in, we store a small cookie so you stay signed in. The site doesn't work without it. If you sign in with Google, Google confirms who you are; we don't get your Google password.
- Campaign draft cookie. If you start building a campaign before signing in, a cookie remembers your choices for up to 7 days.
- Referral cookie. If you arrive through a referral link, a cookie remembers which link you came from for up to 90 days, so we know how people find us.
- Microsoft Clarity. On our public pages (home, pricing, how it works, the campaign builder), Clarity records how visitors scroll, click and move around, and makes heatmaps. We use this to find what's confusing and fix it. It uses cookies to tell visits apart.
- What it doesn't record. Anything typed into forms is masked, so we can't see it. Clarity doesn't run on signed-in pages such as your dashboard, and card details are entered on Stripe's own page, never ours.
- Microsoft's use. Microsoft may use this data in aggregated, anonymised form to improve its own products. See Microsoft's privacy statement for details.
- Turning it off. You can block or delete cookies in your browser settings. Blocking Clarity's cookies won't stop the site working.
6. Keeping it safe, how long we keep it, and your rights
- Security. Our systems use encrypted connections, access is limited to the two people who run PedalPanel, and passwords are stored in a form we can't read. No system is perfectly secure; if a data breach is likely to cause you serious harm, we'll tell you and the regulator as the law requires.
- How long we keep it. Account and campaign records are kept while your account is open, and financial records for 7 years after a transaction, as tax law requires. Rental shop enquiries are kept for up to 2 years unless we start working together. Clarity recordings are kept for up to 90 days.
- Access and correction. You can ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing admin@pedalpanel.com. We'll reply within 30 days.
- Deleting your account. Email us and we'll close your account and delete your personal information, except records we must keep by law.
- Complaints. Email admin@pedalpanel.com first and we'll respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
- Changes. If we change this policy, we'll update the date at the top and, for significant changes, email account holders.