Privacy Policy

Last updated: 16 February 2026

1. About Petrolmate

Petrolmate is an Australian-based fuel price comparison platform operated under the brand name "Petrolmate." We aggregate real-time fuel price data from official government APIs and community sources to help motorists across Australia and New Zealand find cheaper fuel.

Website: petrolmate.com.au
Location: Australia

2. Information We Collect

2.1 Information You Provide Directly

When you create an account or interact with our services, we may collect:

• Account Information: Email address and display name provided during registration via Supabase Auth, Google OAuth, or Apple Sign-In
• Preferences and Settings: Watchlists, preferred fuel types, saved vehicles, notification settings, and dashboard configuration
• Communications: Feedback, bug reports, support enquiries, and any other correspondence you send to us

2.2 Information Collected Automatically

When you access or use Petrolmate, we automatically collect:

• Device and Browser Information: Browser type and version, operating system, device type, screen resolution
• Usage Data: Pages visited, features used, interactions with the interface, referring URLs
• Log Data: IP address, access timestamps, request method, response status codes
• Approximate Location: If you grant browser geolocation permission, your coordinates are used transiently in your browser to identify nearby fuel stations. Your precise GPS coordinates are not stored on our servers. We may log approximate location at the suburb or city level derived from your IP address.

2.3 Information We Do Not Collect

• Payment or financial information (our service is free)
• Government identifiers (Medicare number, Tax File Number, driver licence number)
• Sensitive information as defined under the Privacy Act 1988 (such as health, biometric, racial, or political information)
• Persistent server-side GPS tracking of your location

3. How We Use Your Information

We collect and use your personal information only where it is reasonably necessary for our functions and activities, or where you have provided consent. The table below sets out our purposes and the corresponding basis under the APPs.

Purpose	Basis (APPs)
Provide and operate the fuel price comparison service	Reasonably necessary for our functions and activities (APP 3)
Create and manage your user account	Reasonably necessary for service delivery (APP 3)
Send price alerts, notifications, and digest emails	Consent (APP 3)
Personalise your experience (watchlists, preferences, ML insights)	Reasonably necessary for our functions and activities (APP 3)
Improve and analyse our services, fix bugs, and develop new features	Reasonably necessary for our functions and activities (APP 3)
Respond to your enquiries, feedback, and support requests	Reasonably necessary for service delivery (APP 3)
Ensure security, prevent fraud, and enforce our Terms of Service	Reasonably necessary for our functions and activities (APP 3)
Comply with applicable laws, regulations, and legal processes	Required or authorised by law (APP 6)

4. Disclosure to Third Parties

We may disclose your personal information to the following categories of third-party service providers who assist us in operating Petrolmate. We take reasonable steps to ensure these providers handle your information consistently with the APPs.

Provider	Purpose	Country
Supabase Inc.	User authentication and account management	United States
Resend Inc.	Transactional and notification email delivery	United States
Cloudflare Inc.	Content delivery network, DDoS protection, and web security	United States / Global
Google LLC	OAuth authentication (Google Sign-In)	United States
Apple Inc.	OAuth authentication (Apple Sign-In)	United States / Ireland
Australian Government APIs	Fuel price data collection (NSW, QLD, SA, VIC, WA, NT, TAS, ACT)	Australia

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Cross-Border Data Transfers (APP 8)

In accordance with APP 8, we disclose that some of your personal information may be transferred to and processed in countries outside Australia, specifically the United States and Ireland, by the service providers listed in Section 4 above.

Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to that information. These steps include:

• Selecting reputable service providers with established privacy and security practices
• Reviewing the privacy and data handling policies of overseas recipients
• Using contractual arrangements that require overseas recipients to handle personal information in a manner consistent with the APPs
• Limiting the categories of personal information disclosed to what is reasonably necessary for the service

By using Petrolmate and providing your personal information, you acknowledge and consent to the transfer of your information to these overseas jurisdictions as described above.

6. Data Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include:

• All data transmitted between your browser and our servers is encrypted using TLS 1.3 (HTTPS)
• User passwords are never stored in plain text; authentication is handled by Supabase using industry-standard bcrypt hashing
• Database access is restricted to authorised systems and monitored for anomalies
• Regular security updates and vulnerability assessments are performed
• Access to personal data is limited to authorised personnel on a need-to-know basis

While we take reasonable steps to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your personal information.

7. Data Retention

We retain your personal information only for as long as is reasonably necessary for the purposes described in this policy, or as required by law.

• Account Data: Retained while your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.
• Usage Logs: Retained for up to 90 days for security monitoring and service improvement purposes.
• Email Communications: Retained for up to 2 years for customer service and compliance records.
• Fuel Price Data: Aggregated and anonymised fuel price data may be retained indefinitely as it does not contain personal information.

8. Your Rights Under the APPs (APPs 12 and 13)

Under the Australian Privacy Act 1988, you have the following rights in relation to your personal information:

• Access (APP 12): You may request access to the personal information we hold about you. We will respond to your request within 30 days. Access may be refused in limited circumstances permitted by law, and we will provide reasons for any refusal.
• Correction (APP 13): You may request that we correct any personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
• Deletion: You may request deletion of your account and associated personal data by contacting us or using account settings. Deletion will be completed within 30 days.
• Opt-Out: You may unsubscribe from marketing and non-essential email communications at any time via the unsubscribe link in any email or through your account settings.
• Complaint: If you believe we have breached the APPs, you may lodge a complaint with us (see Section 15 below). If you are unsatisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC).

9. New Zealand Users

Petrolmate also provides fuel price data for New Zealand. If you are a New Zealand resident or access our services from New Zealand, we acknowledge that the New Zealand Privacy Act 2020 may also apply to the handling of your personal information.

We endeavour to handle the personal information of New Zealand users in a manner consistent with the Information Privacy Principles (IPPs) under the NZ Privacy Act 2020. New Zealand users have equivalent rights to access, correct, and request deletion of their personal information. Complaints may also be directed to the New Zealand Office of the Privacy Commissioner.

10. Cookies and Similar Technologies

We use cookies and similar technologies (such as local storage) to provide essential functionality, remember your preferences, and improve your experience. We do not use advertising or third-party tracking cookies.

For detailed information about the specific cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy.

11. Notifiable Data Breaches

In the event of a data breach that is likely to result in serious harm to individuals whose personal information is involved, we will comply with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988. This includes:

• Conducting a reasonable and expedient assessment of the suspected breach
• Notifying the OAIC and affected individuals as soon as practicable if the breach is determined to be an eligible data breach
• Providing a statement that includes the nature of the breach, the types of information involved, and recommended steps individuals should take in response

12. Children

Petrolmate is not directed at individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected information from a child under 16, we will take reasonable steps to delete that information promptly.

13. Automated Decision-Making and Machine Learning

Petrolmate uses machine learning models to generate fuel price predictions, trend analysis, and personalised insights. These outputs are provided for general informational purposes only and do not constitute financial advice or any other form of professional advice.

No legally or financially significant decisions are made about you solely on the basis of automated processing. All ML-generated content is supplementary and intended to assist you in making your own informed decisions.

14. Changes to This Privacy Policy

We may update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where practicable, notify registered users by email.

Your continued use of Petrolmate after the posting of changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

15. Contact Us