Privacy Policy

1. Who is responsible

This website and the My Fedora service are owned and operated by Jamie Callis trading as My Fedora, a registered business name under ABN 19 643 547 178. Privacy questions and requests can be sent to support@myfedora.com.au.

2. Information we collect

We may collect account information such as name, email address and authentication data; artist-profile information and media; social, music, appearance and website links; optional booking-enquiry settings and contact email; legacy Founding Artist application records and current verification status; Halo Pulse identifiers and claims; official QR entitlement numbers, activation and pause status; payment-provider selection and connection status; merchant, account and location identifiers; business name; permission scopes and token-expiry status; support-payment records such as amount, artist, status, provider order and payment references, processor fee and receipt URL; support enquiries; and technical information such as device, browser, IP address, logs, cookies and aggregate usage information.

We do not receive or store complete payment-card numbers or artist bank-account details. The artist's selected payment provider collects and processes payment, identity, business and payout information under its own privacy policy.

3. Payment-provider connections

When an artist connects Square, My Fedora receives limited access and refresh tokens approved on Square's authorisation screen. We encrypt those tokens at rest and restrict them to server-side use. Stripe connections use a connected-account identifier and Stripe's hosted verification flow. We use provider connections only to create artist checkouts, read payment status and fees, and manage the connection. Artists can disconnect or revoke access through My Fedora or their provider, subject to records we must retain.

4. How we collect and use information

We collect information from you, through your use of My Fedora and from service providers. We use it to create and secure accounts, verify Founding Artist eligibility, publish profiles at an artist's direction, connect selected provider accounts, route direct artist support, verify payments, claim and manage Halo Pulse devices and official QR entitlements, provide support, prevent fraud and misuse, improve reliability, meet legal obligations and communicate essential service information.

Marketing messages are sent only with the consent required by law and include a practical way to unsubscribe.

5. Public information

Published artist-profile information, including names, biographies, images, links and appearances, is publicly accessible and may be indexed or shared by others. If an artist enables booking enquiries, their chosen booking contact email is also made publicly accessible through the booking button. Artists control whether their profile and booking option are published and should not publish information they wish to keep private.

6. Service providers and overseas handling

We use providers including Supabase for database, authentication and media storage, Vercel for hosting and analytics, selected providers such as Square or Stripe for payments and payouts, and service providers for operational email. They may process or store information outside Australia and their locations and subprocessors can change. We take reasonable steps appropriate to our size and service to select reputable providers and protect information entrusted to them.

7. Cookies, analytics and security

My Fedora uses cookies and similar technology where needed for authentication, security, preferences and service operation. We use reasonable technical and organisational safeguards, but no online system can be guaranteed completely secure.

Vercel Web Analytics helps us understand aggregate page visits and selected actions such as starting profile setup, publishing a profile or opening checkout. We do not intentionally send names, email addresses, profile content or payment amounts with those analytics events.

8. Retention

We keep personal information only for as long as reasonably needed for account operation, programme administration, fraud prevention, disputes, financial records and legal compliance. Revoking a provider connection deletes stored access tokens where applicable and stops new access; we may retain connection and transaction records where reasonably necessary for payments, disputes, fraud prevention or law. We then delete or de-identify information where reasonably practicable.

9. Access, correction and deletion

You may request access to or correction of personal information we hold, or ask us to close your account and delete information we are not required to retain. Email support@myfedora.com.au. We may need to verify your identity before acting.

10. Complaints and changes

Send a privacy complaint to support@myfedora.com.au with enough detail for us to investigate. If the Privacy Act 1988 (Cth) applies and you are not satisfied, you may be entitled to contact the Office of the Australian Information Commissioner.

We may update this policy as the service develops. Material changes will be communicated where reasonably appropriate.