Privacy Policy
Last updated: 19 February 2026
1. Introduction
RottoWatch ("we", "us", "our") operates the RottoWatch website and service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
By using RottoWatch, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Account Information
When you create an account, we collect:
- Your full name
- Email address
- Password (stored securely via hashing — we never store plaintext passwords)
Watch Data
When you create a watch, we collect:
- Your preferred check-in and check-out dates
- Number of guests (adults and children)
- Accommodation type and location preferences
- Date flexibility preferences
Billing Information
If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number or full payment details. We store only your Stripe customer ID and subscription status to manage your account.
Automatically Collected Information
When you access our service, we may automatically collect certain information including your IP address, browser type, operating system, referring URLs, and pages viewed. This data is used for analytics and service improvement.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the RottoWatch service
- Monitor Rottnest Island accommodation availability on your behalf
- Send you email notifications when availability matching your watch criteria is found
- Process payments and manage your subscription
- Communicate with you about your account and service updates
- Improve and optimise our service
- Detect and prevent fraud or abuse
4. How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information with:
- Supabase — our database and authentication provider, which stores your account data securely
- Stripe — our payment processor, which handles billing for paid subscriptions
- Resend — our email delivery provider, which sends notification emails on our behalf
- Vercel — our hosting provider, which serves the application
These third parties are bound by their own privacy policies and are only given access to the minimum information needed to perform their services.
5. Data Retention
We retain your account information for as long as your account is active. Watch data and poll results are retained for the lifetime of the watch plus 30 days. You can delete your watches at any time through the dashboard.
If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it by law.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including encryption in transit (TLS/HTTPS), secure password hashing, and row-level security on our database. However, no method of electronic transmission or storage is 100% secure.
7. Your Rights
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate personal information
- Request deletion of your personal information
- Export your data in a portable format
- Withdraw consent for email notifications at any time
To exercise these rights, please contact us at privacy@rottowatch.com.au.
8. Cookies
We use essential cookies to maintain your authentication session. We do not use third-party tracking cookies or advertising cookies.
9. Children's Privacy
RottoWatch is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at privacy@rottowatch.com.au.