Privacy Policy
Effective date: 26 June 2026
1. Introduction
Netrope PTY Ltd ("we", "us", "our") operates CrowdChoose. This Privacy Policy explains how we collect, use, disclose, and protect your personal information. It applies to all users — both creators and voters.
We comply with the Australian Privacy Act 1988 (Cth) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Information We Collect
Creators: When you create an account, we collect your email address, display name, and optionally your creator handle and bio. We also collect your Stripe account ID when you connect for payouts.
Voters: When a vote is cast, we collect the voter's email address (provided by Stripe after payment), the option voted for, the amount paid, and Stripe session identifiers.
Payment data: We do not store payment card details. All payment information is handled directly by Stripe and governed by Stripe's Privacy Policy.
3. How We Use Your Information
- To operate the Platform and process votes
- To calculate and facilitate creator payouts via Stripe
- To send transactional emails (vote confirmations, winner notifications, poll results)
- To send account-related emails (welcome emails, important notices)
- To detect and prevent fraud or abuse
- To comply with legal obligations
We do not sell your personal information to third parties. We do not use your data for advertising.
4. Third-Party Services
We share data with the following third parties to operate the Platform:
Stripe
Payment processing and creator payouts. Stripe receives payment card data and voter email addresses.
Supabase
Database and authentication. User data is stored on Supabase infrastructure.
Resend
Transactional email delivery. Voter emails and creator emails are sent via Resend.
Vercel
Application hosting. Requests pass through Vercel infrastructure.
5. Data Retention
We retain creator account data for as long as your account is active. Poll data, including voter emails associated with completed polls, is retained for 2 years after the poll closes, then deleted.
If you delete your account, your creator profile and all associated polls will be removed. Due to Stripe's requirements, transaction records may be retained for up to 7 years for financial compliance purposes.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict certain processing
- Data portability (receive your data in a structured format)
To exercise any of these rights, email us at hello@crowdchoose.com. We will respond within 30 days.
7. Cookies
CrowdChoose uses cookies solely for authentication session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser, but this will prevent you from logging in.
8. Security
We use industry-standard security practices including HTTPS encryption, Supabase Row-Level Security (RLS), and service-role-key isolation to protect your data. No system is 100% secure — if you suspect a breach, contact us immediately.
9. Children
CrowdChoose is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us and we will remove it.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or a notice on the Platform. The effective date at the top of this page reflects the most recent update.
11. Contact
For privacy enquiries or to exercise your rights, contact Netrope PTY Ltd at hello@crowdchoose.com.