This Privacy Policy explains how RapidTok Pty Ltd (“we”, “us”, “RapidTok”) collects, holds, uses, and discloses personal information when you visit our site or use RapidTok (the “Service”). It applies to visitors and account holders, and forms part of our Terms of Service.
We are based in Australia and handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Because we also serve customers in the United States and Canada, Section 7 below covers rights that may additionally apply to California residents under the CCPA, and Section 3 covers the (currently limited) circumstances in which GDPR could apply.
We use personal information to: provide, maintain, and secure the Service; create and manage your account, including Google sign-in; process subscriptions and payments via Stripe; send transactional email (such as sign-up verification codes and password-reset messages) via Resend; detect and prevent bots, fraud, and abuse (via Cloudflare Turnstile and our own rate-limiting); respond to support and contact-form requests; and understand usage patterns via Google Analytics so we can improve the product.
Under the Australian Privacy Principles, we collect and use personal information that is reasonably necessary for our functions and activities as described above, principally to provide the Service you’ve signed up for, to bill you, to keep the Service secure, and (with analytics data) to improve it. Where we rely on your consent (for example, for non-essential analytics or any future marketing communications), you may withdraw that consent at any time by contacting us (Section 12).
If GDPR applies to you (for example, if you access RapidTok from the EU/EEA even though the Service is not currently marketed there): we process your data under contract necessity, our legitimate interests in operating and securing the Service, consent for analytics, and legal obligation. Contact us if you’d like more detail on the basis for a specific processing activity.
We share personal information with service providers who process it on our behalf, namely:
We do not sell personal information. Because we don’t currently use advertising or remarketing services, we do not disclose personal information for cross-context behavioral advertising either.
We use essential cookies to keep you signed in and to secure your session, and analytics cookies (via Google Analytics) to understand how the Service is used. We don’t yet show a cookie consent banner; if we introduce one, this section will be updated to describe how to manage your cookie preferences. You can also control cookies through your browser settings, though blocking essential cookies will prevent you from staying signed in.
We keep your account data while your account is active. If you close your account, we delete or anonymise your personal information within 90 days, except where we’re legally required to retain it for longer (for example, financial records related to payments processed via Stripe). Note that under our Terms of Service, closing your account does not include a data export, so export anything you need before closing your account.
Under the Australian Privacy Principles, you may request access to, and correction of, the personal information we hold about you. To make a request, contact us using the details in Section 12; we’ll respond within a reasonable period and won’t charge you for making the request.
If you’re a California resident, the CCPA gives you additional rights to know what personal information we’ve collected about you, to request deletion, and to correct inaccurate information. Since we don’t sell or share personal information for cross-context behavioral advertising, there is currently no “sale”/“sharing” to opt out of.
If you believe we haven’t handled your personal information properly, you can lodge a complaint with us first (Section 12); if you’re not satisfied with our response, Australian residents may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
We use reasonable technical and organisational measures to protect personal information, including hashed passwords, encrypted connections (HTTPS/TLS), and rate-limiting and bot-detection on sensitive account flows. No method of transmission or storage is 100% secure, and we can’t guarantee absolute security.
Some of our service providers (including Stripe, Google, and Microsoft Azure) may store or process personal information outside Australia, including in the United States.
The Service is not directed to, and may not be used by, anyone under 18 years old (consistent with the eligibility requirement in our Terms of Service), and we do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. If we make material changes, we’ll update the “Last updated” date above and, where practical, notify you by email or an in-app notice, consistent with how we handle changes to our Terms of Service.
Questions, requests, or complaints about this policy or your personal information? Email us at team@rapidtok.com or use our contact page.
