1. Who we are
BoxOne (boxone.com.au) is operated by RMC Holdings Pty Ltd (ACN 675 135 618) ("we", "us", "our"). We are an Australian company providing AI-powered greyhound racing intelligence, data analytics, form guides and tipping services.
Our principal place of business is in Queensland, Australia. For privacy enquiries, contact us at support@boxone.com.au.
2. Scope
This Privacy Policy applies to all personal information collected through:
- Our website at boxone.com.au and all subdomains
- Our email communications (daily picks, newsletters, transactional emails)
- Our Telegram channel and bot (@BoxOneAU, @BoxOneBot)
- Payment processing via Stripe
- Any other interaction with our services
By using our services, you acknowledge that you have read and understood this Privacy Policy.
3. Information we collect
3.1 Information you provide directly
- Account registration: email address, name (optional), password
- Subscription and payment: billing name, email address, payment card details (processed and stored by Stripe — we do not store card numbers)
- Communications: any information you provide when contacting us via email or Telegram
3.2 Information collected automatically
- Device and browser data: IP address, browser type and version, operating system, device type, screen resolution
- Usage data: pages visited, time on page, click patterns, referring URL, search queries within our site
- Cookies and similar technologies: session cookies for authentication, preference cookies, analytics cookies (see Section 9)
- Analytics: we use Google Analytics to collect aggregated usage statistics including demographics, traffic sources and user behaviour
3.3 Information from third parties
- Stripe: subscription status, payment history, billing email, customer ID
- Greyhound Racing Australia: publicly available racing data (not personal information)
4. How we use your information
We use personal information for the following purposes:
- Service delivery: providing access to our platform, delivering daily email picks, managing your subscription
- Account management: creating and maintaining your account, authenticating your identity, processing payments
- Communications: sending transactional emails (subscription confirmations, payment receipts, trial expiry notices), daily tips emails, and occasional product updates
- Improvement: analysing usage patterns to improve our platform, models and user experience
- Security: detecting and preventing fraud, abuse and unauthorised access
- Legal compliance: complying with applicable laws, regulations and legal processes
We will not use your personal information for purposes materially different from those described above without your consent.
5. Legal basis for processing
Under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), we process your personal information on the following bases:
- Contractual necessity: processing required to perform our agreement with you (e.g. providing your subscription, delivering email picks)
- Consent: where you have opted in to receive marketing communications or have voluntarily provided information
- Legitimate interests: improving our services, preventing fraud, ensuring platform security
- Legal obligation: complying with Australian tax, consumer and gambling advertising laws
6. How we share your information
We do not sell, rent or trade your personal information to third parties. We may share information with:
- Stripe: payment processing (Stripe's privacy policy applies to data they process)
- Resend: transactional and marketing email delivery
- Kit (ConvertKit): email list management and broadcast delivery
- Google: analytics and website performance measurement
- Railway: cloud hosting infrastructure
- Supabase: database hosting
- Telegram: delivery of tips via our public channel
- Law enforcement or regulators: where required by law, court order or regulatory obligation
All third-party service providers are bound by their own privacy policies and data processing agreements. We take reasonable steps to ensure they handle your data securely and in accordance with applicable privacy laws.
7. Data storage and security
Your personal information is stored on secure servers provided by Supabase (hosted on AWS infrastructure) and Railway. Data may be stored and processed in Australia, the United States and other jurisdictions where our service providers operate.
We implement reasonable technical and organisational measures to protect your data, including:
- Encryption of data in transit (TLS/HTTPS)
- Encryption of data at rest
- Hashed and salted passwords (bcrypt)
- Access controls and authentication for administrative functions
- Regular security reviews
No method of transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
8. Data retention
- Active accounts: we retain your data for as long as your account is active
- Cancelled subscriptions: account data is retained for 12 months after cancellation to facilitate resubscription, after which it is deleted
- Payment records: retained for 7 years as required by Australian tax law
- Analytics data: aggregated and anonymised data may be retained indefinitely
- Banned accounts: email addresses of banned users are retained indefinitely to prevent re-registration
You may request deletion of your personal data at any time (see Section 11).
9. Cookies
We use the following types of cookies:
- Strictly necessary: authentication session cookies that enable you to log in and access your account. These cannot be disabled.
- Analytics: Google Analytics cookies (_ga, _gid) that help us understand how visitors interact with our site. These collect anonymised data.
You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in.
10. Third-party links
Our website may contain links to external sites including wagering operators, racing authorities and responsible gambling services. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing personal information.
11. Your rights
Under the Australian Privacy Act 1988, you have the right to:
- Access: request a copy of the personal information we hold about you
- Correction: request correction of inaccurate or incomplete personal information
- Deletion: request deletion of your personal information (subject to legal retention requirements)
- Opt out of marketing: unsubscribe from marketing emails at any time via the unsubscribe link in any email or by contacting us
- Complain: lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached your privacy
To exercise any of these rights, contact us at support@boxone.com.au. We will respond within 30 days.
12. Children
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you are under 18, you must not use our services or provide any personal information. If we become aware that we have collected personal information from a person under 18, we will delete it promptly.
13. International users
Our services are designed for Australian residents. If you access our services from outside Australia, you do so at your own risk and are responsible for complying with your local laws. Your information may be transferred to and processed in Australia and other countries where our service providers operate.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "last updated" date. For significant changes, we may also notify you by email. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
15. Contact us
If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
RMC Holdings Pty Ltd (ACN 675 135 618)
Email: support@boxone.com.au
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by phone on 1300 363 992.