Last updated: 16 May 2026 · Applies to all use of PuntGenius.
PuntGenius is owned and operated by GOATech Inc. ("GOATech", "we", "us", "our"). GOATech Inc. is the data controller / APP entity responsible for your personal information under this Policy. You can reach us at [email protected].
This Policy is designed to comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and, where relevant, equivalent protections under the EU/UK GDPR. It must be read together with our Terms of Service.
We collect the following categories of personal information:
We do not knowingly collect sensitive information (as defined under the Privacy Act). Please do not send us sensitive information unless we specifically request it.
We use personal information for the following purposes:
| Purpose | Legal basis (AU APPs / GDPR) |
|---|---|
| Create, secure, and operate your account | Performance of contract |
| Take payment, prevent chargeback fraud, comply with payment-network rules | Performance of contract / legitimate interests |
| Deliver picks, results, dashboard, transactional emails | Performance of contract |
| Improve algorithms, picks accuracy, product features | Legitimate interests |
| Detect and prevent fraud, abuse, multi-accounting, sharing | Legitimate interests / legal obligation |
| Send marketing about PuntGenius features and offers | Consent (you can opt out anytime) |
| Comply with law, court orders, regulator requests | Legal obligation |
| Enforce our Terms and protect our rights | Legitimate interests |
We do not use your information for any purpose materially different from those listed above without your consent, unless required or permitted by law.
We do not sell your personal information. We share limited information only with the following categories of recipient, and only as needed for the purposes above:
All processors are contractually bound to handle your data only as directed by us and to maintain appropriate security.
GOATech Inc. and several of our service providers (including Stripe, Resend, and Railway) are based in or process data in the United States and other countries outside Australia. By using the Service you acknowledge and consent to your personal information being transferred to, stored in, and processed in those countries.
The privacy laws of those countries may differ from those of your country. We take reasonable steps to ensure that overseas recipients handle your personal information consistently with the APPs, including by relying on the contractual commitments of major processors (such as Stripe and Railway) and, where applicable, the European Commission's Standard Contractual Clauses or equivalent transfer mechanisms.
We use cookies and similar storage technologies for the following purposes:
You can request opt-out from product analytics or session recording at any time by emailing [email protected] and we will configure your account to be excluded.
We keep your personal information only as long as needed for the purposes in Section 3, or as required by law:
We use industry-standard measures to protect your information, including HTTPS/TLS encryption in transit, bcrypt or comparable hashing for passwords, HMAC-signed session tokens, server-side input validation, parameterised database queries, role-based access controls, infrastructure provided by reputable cloud vendors, and segregation of payment data with Stripe.
No method of transmission or storage is 100% secure. You play a critical role in protecting your account: use a strong, unique password, never share credentials, and notify us immediately of any suspected compromise.
Subject to applicable law, you have the right to:
To exercise any of these rights, email [email protected] from the email address on your account. We may ask you to verify your identity before responding, and we will respond within 30 days or as required by applicable law. Some requests may be denied or limited where permitted by law (for example, where granting them would prejudice fraud prevention, legal obligations, or the rights of others).
We send transactional emails (account, billing, security, password resets) that are required to operate the Service; you cannot opt out of these while your account is active. We may also send product and marketing emails about PuntGenius features, results, and offers. You can unsubscribe from marketing at any time via the link in any such email, or by emailing us. Opting out of marketing does not affect transactional messages.
PuntGenius is strictly for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have done so, we will delete it promptly. If you believe we hold information about a minor, contact [email protected].
Our pick selection and rating algorithms are automated, but they do not make decisions with legal or similarly significant effects on you. We may use automated risk signals to detect fraud, multi-accounting, or wrongful chargeback patterns; if these signals contribute to account suspension you may request human review by emailing us.
If GOATech Inc. is involved in a merger, acquisition, financing, reorganisation, sale of assets, or insolvency event, your personal information may be transferred as part of that transaction to the acquiring or surviving entity, or to a prospective buyer under appropriate confidentiality protections. We will require any successor to honour the commitments in this Policy or notify you of any material change.
We may update this Policy from time to time. The "Last updated" date at the top reflects the most recent change. For material changes, we will give reasonable advance notice (by email, in-product banner, or dashboard notice). Your continued use of the Service after the updated Policy takes effect constitutes acceptance.
If you have a question, concern, or complaint about our handling of your personal information, please contact us first:
GOATech Inc. (operator of PuntGenius)
Email: [email protected]
We will acknowledge your complaint within a reasonable time and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.