TrackMySlabs ("the Platform") is operated by TRACKMYSLABS PTY LTD. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our PSA submission management platform. Please read this privacy policy carefully. By using TrackMySlabs, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Personal Information
We may collect personal information that you voluntarily provide when using our Platform, including:
- Name and contact information (email address, phone number)
- Business information (store name, address)
- Account credentials
- Customer data that you input into the Platform
- PSA submission details and card information
- Uploaded documents, including PSA submission PDFs, where you have opted in to PDF storage
Automatically Collected Information
When you access the Platform, we may automatically collect certain information, including:
- Device information and browser type
- IP address and general location
- Usage data and interaction with the Platform
- Cookies and similar tracking technologies
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Platform
- Process and manage PSA submission tracking
- Send notifications about submission status updates
- Communicate with you about your account and provide customer support
- Improve and personalise your experience
- Analyse usage patterns to enhance our services
- Protect against fraudulent or unauthorised activity
- Comply with legal obligations
3. Data Storage & Security
We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Secure authentication mechanisms
- Regular security assessments
- Access controls and data isolation between stores
Your data is stored on secure servers provided by Supabase, which maintains industry-standard security certifications and practices.
Uploaded PSA submission PDFs (where the PDF storage opt-in is enabled) are stored in encrypted cloud storage, isolated by store account, and accessible only to your store. These files are not used for any purpose other than providing you with a record of your submission documents.
4. Third-Party Services
We may use third-party services to help us operate the Platform. These services may have access to your information only to perform specific tasks on our behalf:
- Supabase: Database and authentication services
- PSA (Professional Sports Authenticator): Submission status tracking via their API
- Shopify: Customer data synchronisation (if enabled by store owner)
- Vercel: Hosting and infrastructure
- Twilio: SMS notification delivery
- Resend: Email notification delivery
- Stripe: Payment processing and subscription billing
4a. Portal Analytics
When customers visit a store's public tracking portal, we may collect limited analytics data to help store owners understand portal usage. This may include:
- Page views and visit timestamps
- Referral source information
- Device type and browser (aggregated, non-identifying)
This data is used solely to provide store owners with portal usage insights and is not shared with third parties for advertising purposes.
5. Cookies
We use cookies and similar tracking technologies to track activity on our Platform and store certain information. Cookies are used to maintain your session, remember your preferences, and improve your experience. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Platform.
6. Your Rights
Depending on your location, you may have certain rights regarding your personal information, including:
- The right to access the personal information we hold about you
- The right to request correction of inaccurate information
- The right to request deletion of your personal information
- The right to withdraw consent where processing is based on consent
- The right to lodge a complaint with a supervisory authority
To exercise any of these rights, please contact us using the details provided below.
6a. Legal Basis for Processing (GDPR)
For individuals in the European Economic Area or United Kingdom, we process your personal information under the following legal bases:
- Contract performance: Processing your account information and store data is necessary to provide the Platform services you have subscribed to.
- Legitimate interests: We process usage data and analytics to improve the Platform, prevent fraud, and ensure security, provided these interests are not overridden by your rights.
- Legal obligation: We may process data where required to comply with applicable laws and regulations.
- Consent: Where we process data based on consent (such as SMS notifications), you may withdraw that consent at any time.
6b. International Data Transfers
TrackMySlabs is operated from Australia. Our service providers are primarily based in the United States. If you are located in the European Economic Area, United Kingdom, or other regions with data transfer restrictions, please be aware that your personal information may be transferred to and processed in countries that may not provide the same level of data protection as your home country.
We take appropriate safeguards to ensure such transfers comply with applicable law, including relying on Standard Contractual Clauses approved by the European Commission, or other applicable transfer mechanisms. Our key service providers (Supabase, Vercel, Twilio, Resend, Stripe) maintain their own data transfer compliance programs.
6c. Australian Privacy Act Compliance
TRACKMYSLABS PTY LTD is subject to the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). We are committed to handling personal information in accordance with these principles.
If you believe we have not complied with our privacy obligations, you may contact us at trackmyslabs@gmail.com to raise your concern. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
7. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymise your personal information within a reasonable timeframe, except where we are required to retain it for legal or regulatory purposes.
Specifically, we retain:
- Account and store data: for the duration of your subscription plus 90 days after closure
- Audit and activity logs: up to 3 years, to comply with legal and financial obligations
- Billing records: 7 years, as required by Australian tax law
- Uploaded PSA submission PDFs (where opt-in is enabled): retained for the life of the associated submission record, and deleted when the submission is deleted or your account is closed
8. Children's Privacy
Our Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take necessary actions.
9. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at: