Privacy Policy

1. Who is responsible for your data

Wake Up Media Pty Ltd (ABN 79 674 915 265) is the data controller for personal information processed through Winora. Winora is a product of Wake Up Media Pty Ltd. For privacy enquiries or to exercise any rights below, contact support@winorapro.com.

2. What we collect

2.1 You provide directly

• Email address (account and trial signup)
• Discord username (for access provisioning)
• Payment information — handled and stored entirely by Whop; we never see card numbers
• Optional: name, country, betting preferences for personalisation

2.2 Collected automatically

• IP address, browser type, device type, OS version
• Pages visited, referring URL, timestamps
• Cookie-based analytics events (only after you consent)

3. Why we collect it (legal bases)

• To deliver the Service — provisioning Discord access, processing payments via Whop, providing customer support. Legal basis: performance of contract.
• To improve the Service — aggregated analytics on site usage. Legal basis: legitimate interest, with consent for non-essential cookies.
• To communicate — receipts, service announcements, optional marketing. Legal basis: contract for transactional; consent for marketing.
• To comply with law and prevent abuse — fraud detection, KYC where applicable, security logs. Legal basis: legal obligation and legitimate interest.

4. Who we share with

We share personal information only with the following categories of third-party processors, each under written agreement:

• Whop — payments, subscriptions, Discord role provisioning
• Vercel — hosting
• Cloudflare — CDN, DNS, DDoS protection
• Neon — Postgres database (EU/US region)
• Upstash — Redis cache and rate limiting
• Resend / Loops — transactional and marketing email
• PostHog — product analytics (after consent)
• Sentry — error monitoring (PII scrubbed)
• Arcjet — bot detection and rate limiting

We never sell personal information. We do not share with advertisers for targeted-advertising purposes.

5. International transfers

Some processors above operate in the United States or European Union. Where applicable, transfers from Australia, the EU, or the UK rely on Standard Contractual Clauses or adequacy decisions. By using the Service you acknowledge these transfers.

6. Retention

• Account information: for the life of the account plus 7 years for tax and compliance.
• Analytics events: 12 months, then aggregated and anonymised.
• Error logs: 90 days.
• Marketing email lists: until you unsubscribe.

7. Your rights

Depending on your jurisdiction, you have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information (subject to legal-retention obligations)
• Object to or restrict certain processing
• Portability — receive your data in a machine-readable format
• Withdraw consent for non-essential processing at any time
• Lodge a complaint with your local data-protection authority

Australian residents may contact the Office of the Australian Information Commissioner (OAIC). EU/UK residents may contact their national supervisory authority. California residents have additional rights under the CCPA, including the right to opt out of any “sale” — which we do not perform.

8. Cookies and tracking

Essential cookies (authentication, session) are set without consent. Analytics and marketing cookies are set only after you accept the cookie banner. You can change your preference at any time from the footer.

9. Security

We apply industry-standard administrative, technical, and physical safeguards including: HTTPS-only transport, encrypted database connections, scoped API keys, audit logging of admin actions, and third-party penetration testing. No system is perfectly secure; report suspected vulnerabilities to support@winorapro.com.

10. Children

Winora is intended for users aged 18 and over. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us and we will delete it.

11. Changes to this policy

Material changes will be notified by email and posted here at least 14 days before they take effect.

This document is a template and should be reviewed by qualified legal counsel before public launch.