Legal

Privacy Policy — Offleash Walker Portal

Effective: 1 November 2026Version: 2026-11-01

1.About this policy and who it applies to

This Privacy Policy applies to professional dog walkers who use the Offleash Walker Portal at www.offleashpack.com.au (the "Portal"). The Portal is operated by BetSense Pty Ltd t/a Offleash Pack (ABN 37 673 664 447) of Malvern East VIC 3145 ("we", "us", "our", "Offleash").

This policy is separate from and supplements the Offleash Consumer Privacy Policy, which governs use of the Offleash consumer app at getoffleash.com.au. If you use both the Portal and the consumer app, both policies apply to their respective services.

This policy applies to you if you are:

  • A registered walker on the Offleash Walker Portal
  • A person applying to become a registered walker
  • An employee or contractor of a registered walker business using the Portal on behalf of that business

This policy explains what personal information we collect about you and your clients in connection with the Portal, how we use and disclose that information, and your rights in relation to it. We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

If you have questions about this policy, contact us at privacy@offleashpack.com.au.

2.The nature of your relationship with Offleash

You are an independent contractor, not an employee of Offleash. Offleash provides the Portal as a software platform to help you run your dog walking business. Offleash does not direct, supervise, or control the services you provide to your clients.

This distinction is important for privacy purposes. When you collect personal information from your clients through the Portal (for example, their dog's health details or home address), you do so as an independent data controller in your own right. You are responsible for complying with any privacy obligations you have to your clients, including under the Privacy Act 1988 (Cth) where it applies to you.

Offleash processes client personal information on your behalf as a data processor, subject to our Walker Agreement and this policy. This does not relieve you of your own independent obligations as a data controller.

3.What personal information we collect about you (the walker)

Account and identity information

  • Full legal name
  • Email address and phone number
  • Password (stored in hashed form — we never see your plain text password)
  • Profile photo
  • Authentication data if you sign in using Google OAuth

Business information

  • Business name (if operating under a registered business name)
  • Australian Business Number (ABN), if you give one — printed on your invoices to identify you as the supplier
  • GST registration status
  • Business address and service area
  • Professional bio and public profile content

Identity and credentials

  • Copy of government-issued photo ID (collected by Stripe as part of Stripe Connect onboarding — not stored by Offleash directly; see Section 8)
  • Which credentials you tell us you hold, such as public liability insurance, a first aid certificate, a National Police Check, or a permit or qualification you name yourself. We record only that you hold them: no policy or permit numbers, and no expiry dates

Financial and payment information

  • Stripe Connect account ID (a reference identifier — not your bank account number)
  • The bank account name, BSB, account number and PayID you enter under Settings → Getting paid. We print them on your invoices so your clients can pay you by transfer, email you whenever they change, and use them for nothing else. We don't check them with any bank
  • Transaction metadata for payments processed through the Portal (see Section 8 for full details)
  • Subscription billing details for your Offleash Walker Portal subscription (managed by Stripe Billing)

Walk session and operational data

  • Walk session records — scheduled sessions, actual start and end times, dogs walked, parks visited
  • In-walk event logs — potty events, photos taken, 'all is well' notifications sent
  • Walk report cards generated for clients
  • Incident reports submitted during or after walks
  • Park check-in records associated with your walk sessions

Communications

  • Messages exchanged with clients through the Portal's messaging feature
  • Support communications with Offleash

Usage and device data

  • Pages and features accessed within the Portal
  • Login times and session duration
  • Device type and browser information
  • IP address

4.What personal information we collect about your clients

When you use the Portal to manage your dog walking business, you and Offleash jointly handle personal information belonging to your clients (dog owners). The following client information is collected through the Portal:

Client account information

  • Client's name and email address
  • Phone number
  • Home address and any alternative pick-up/drop-off addresses
  • How you get into their home: whether you hold a key or use a lockbox or keypad, any lockbox, keypad or alarm code, and access notes. Codes are stored sealed, so a copy of our database doesn't show them
  • If you import clients from a spreadsheet, the details you choose to bring across. Your file is read on your device and isn't uploaded. We keep a record of each import (when, the file's name and its column headings) so you can undo it. To suggest which column holds which detail, we send Anthropic the column headings and the first three rows, which hold client details

Dog information

  • Dog name, breed, date of birth, weight, and size
  • Gender and desexed status
  • Energy level and personality notes
  • Vaccinations: which vaccine, when it was given and when it is next due, as you record them. Offleash doesn't check them
  • Known health conditions and allergies, and medications with their dose and when they're given
  • Veterinary clinic name and phone number
  • An emergency contact: their name, phone number and relationship to your client. This is information about another person, so only record it with their agreement or your client's
  • How the dog is handled: on or off lead, whether it comes back when called, how it is with other dogs, people and children, its triggers, and whether it may have treats
  • Your private notes about the dog, which Offleash doesn't show your client
  • Anything you record in fields of your own for a client or their dog, which Offleash doesn't show your client either

Walk and service records

  • Walk history — dates, times, parks, duration
  • Walk report cards and photos from each session
  • When a client first opens the page for a walk report you sent or shared with them. We record that time when the page loads in their browser and show it to you as Viewed. We put no tracking image in report emails and don't record whether an email was opened
  • Incident reports involving the client's dog
  • A record of each offer to email a client that booked walks were cancelled or are back on: which walks, what changed them (your time off, a pause, an end date or a skip), and whether you sent it, when, and to which address
  • Payment history for services rendered
  • A record of each cash or bank-transfer payment you remove after recording it by mistake: what it was, when it was recorded, and when you removed it

Client payment data

  • Transaction metadata for payments made by clients through the Portal (see Section 8)
  • When a client first opens the page for an invoice you sent them. We record that time when the page loads in their browser and show it to you as Viewed. We put no tracking image in invoice emails and don't record whether an email was opened
  • No raw card data is stored by Offleash — all payment credentials are handled by Stripe

You are responsible for obtaining appropriate consent from your clients to collect and use their personal information through the Portal. Offleash provides standard consent language in the client onboarding flow, but you remain the data controller for your client relationships.

5.How we collect personal information

We collect personal information:

  • Directly from you when you register on the Portal, set up your walker profile, schedule walks, log walk events, and otherwise use the Portal
  • From Stripe, when you complete Stripe Connect onboarding and when you process payments — Stripe shares transaction metadata with us (see Section 8)
  • From your clients, when they complete their onboarding through your walker booking link or when they provide information about their dogs
  • Automatically through the Portal's usage logging and analytics systems

6.Why we collect personal information — our purposes

We use personal information to:

For walker account management

  • Create and manage your walker account and business profile
  • Pass Stripe what it needs to verify your identity when you connect card payments. Offleash does not check credentials
  • Record the credentials you tell us you hold, and show them as your own declaration wherever Offleash displays your profile
  • Process your monthly subscription payment
  • Provide you with the Portal's scheduling, client management, invoicing, and analytics features
  • Show your name, photo and bio to clients on the invitations you send them, and to dog owners wherever Offleash displays walker profiles
  • Send transactional communications including account confirmations, walk reminders, and payment receipts
  • Provide customer support

For payment processing

  • Facilitate payments from your clients to your Stripe Connect account
  • Collect Offleash's service fee via Stripe's platform fee mechanism
  • Generate invoices and transaction records
  • Print the bank details you choose on your invoices, and email you when they change

For client management

  • Enable you to manage your client roster and dog profiles
  • Store walk records, report cards, and incident reports on your behalf
  • Send automated notifications to your clients on your behalf (park check-ins, 'all is well' updates, walk report delivery)
  • Email a client a receipt when they pay one of your invoices by card on its page, in your business name with replies to your sign-in email
  • Email a client which of their booked walks are cancelled, or back on, when you choose to send it. It goes in your business name with replies to your sign-in email, lists the dates, and never says why. We send none unless you press Send

For safety and compliance

  • Maintain incident records as evidentiary documents
  • Monitor for unusual transaction patterns as a good governance measure
  • Comply with our legal obligations under Australian law

For service improvement

  • Conduct analytics on Portal usage to improve the product
  • Produce aggregated, anonymised data about dog walking patterns and park usage (see Section 7)

We do not use your personal information or your clients' personal information for targeted advertising. We do not sell personal information to third parties.

7.Aggregated and anonymised data

Walk session data — including parks visited, times, and dog characteristics — contributes to Offleash's park intelligence features on the consumer app (breed mix, energy levels, real-time activity). This data is aggregated and anonymised before being displayed publicly. Individual walkers and their clients are never identified in park intelligence displays.

We may also produce aggregated, anonymised reports about dog walking patterns for internal analytics purposes and, in future, for councils and research partners. This data will not identify any individual walker or client.

We do not share walk data, aggregated or otherwise, with anyone outside Offleash today. Before we do, we will update this policy and add a setting in Portal Settings that lets you keep your walk data out of anything shared. Opting out will not affect core Portal functionality.

8.Payment data and Stripe Connect

How payments work

The Offleash Walker Portal uses Stripe Connect to facilitate payments between your clients and your business. When a client pays for a walk through the Portal:

  • The client's payment goes directly to your own Stripe account
  • Offleash collects its service fee (0.5% of each card payment, capped at A$3) through Stripe's application fee
  • Offleash's bank account never receives or holds your client's funds
  • Stripe's own processing fees are deducted from your Stripe account by Stripe directly

What Offleash stores

Offleash stores only the following transaction metadata in its database (hosted in AWS ap-southeast-2, Sydney):

  • Stripe transaction ID
  • Total transaction amount
  • Offleash service fee amount
  • Your Stripe Connect account ID
  • The type of payment method, and the country that issued the card
  • Transaction status and timestamp
  • Last 4 digits of the card used (for reference only)

Offleash does not store your card number, CVV, or your clients' full card details, and the bank account Stripe pays you into stays with Stripe. The only bank details Offleash keeps are the ones you enter to print on your invoices (Section 3).

Autopay

When a client of yours turns on autopay, Stripe saves their card on your Stripe account. Offleash keeps:

  • The card's type, last four digits, expiry month and year, and issuing country
  • Stripe's references to the card and to your client as your Stripe customer
  • The autopay terms your client agreed to, word for word, and when
  • Every offer, notice, charge, failed charge, card change and stop, and who or what made it

Offleash uses these to charge your client's invoices as they agreed, to tell them before each charge, and as the record you and your client can rely on in a dispute. Section 12 says how long they are kept.

Stripe Connect onboarding

As part of the Stripe Connect onboarding process, Stripe will collect and verify your identity directly. This includes your full name, date of birth, residential address, and a copy of a government-issued photo ID. This information is held by Stripe under Stripe's own Privacy Policy (stripe.com/au/privacy) and is not stored by Offleash.

You must accept the Stripe Services Agreement as part of the onboarding process. By doing so, you establish a direct contractual relationship with Stripe Payments Australia Pty Ltd. You can disconnect Offleash from your Stripe account at any time; Offleash then stops receiving information about it from Stripe.

ABN

If you give Pack an ABN, it is printed on your invoices as part of your identity as the supplier. You are responsible for your ABN and for keeping it up to date. Offleash checks only that the ABN you enter is correctly formed (see Section 14). It does not check that the ABN is active or registered to you, and it does not ask for an ABN, or anything in its place, before you connect Stripe or accept client payments. Client card payments go directly to your Stripe account, so Offleash does not pay those amounts to you and does not withhold anything from them.

GST

If you tell Pack you are registered for GST, your invoices charge GST at 10% unless you switch it off for one, either included in your prices or added to them, as you choose on your Rate Card and on each invoice. An invoice that charges GST is headed “Tax Invoice”; one that doesn’t is headed “Invoice”. If you are not registered, your invoices charge no GST. Keep “Registered for GST” in Settings up to date: Pack relies on your answer and does not check it.

9.Who we share personal information with

Your clients

Walk records, report cards, incident reports, and notifications are shared with the relevant dog owner as part of the core service.

Service providers

We share personal information with the following third-party providers who assist us in operating the Portal. Each is bound by contractual obligations to handle personal information securely and only for the purposes we specify:

ProviderPurposeLocation
Supabase (via AWS ap-southeast-2)Database, authentication, and file storageAustralia (Sydney region)
VercelApplication hosting and deploymentAustralia (Sydney region), United States and global CDN
Stripe Payments Australia Pty LtdPayment processing, Stripe Connect account management, identity verificationUnited States / Australia
ResendTransactional email deliveryJapan and United States
PostHogProduct analytics, usage tracking, page performance measurement and error reportingUnited States / EU
AnthropicAI language model for walk report card summary generation, and for suggesting which column of a spreadsheet you import holds which detail (it receives the column headings and the first three rows)United States
Xero (if enabled)Accounting integration — transaction data onlyAustralia / New Zealand
GoogleSign-in via Google OAuth (if used)United States
Cloudflare (Turnstile)Bot check on email sign-in and sign-up: it reads your browser and connection details, including your IP address, to tell a person from an automated scriptUnited States and global network

Regulatory and law enforcement authorities

We may disclose personal information where required by law, court order, or to cooperate with law enforcement or regulatory authorities. We will notify you of such disclosure where we are legally permitted to do so.

Business transfers

If BetSense Pty Ltd or the Offleash business is acquired, merged, or undergoes a change of ownership, personal information held by us may be transferred to the acquiring entity. We will notify affected walkers before any such transfer.

Overseas disclosure

Personal information may be stored or processed in the United States and other countries where our service providers operate. We take reasonable steps to ensure overseas recipients handle personal information consistently with the Australian Privacy Principles, including through Data Processing Agreements with each provider.

10.Data Processing Agreements

Offleash has entered into Data Processing Agreements (DPAs) with its key service providers, including Supabase, Stripe, Resend, and PostHog. These agreements ensure that personal information processed on our behalf is handled in accordance with the APPs.

11.Your clients' rights — your responsibilities

As the data controller for your client relationships, you are responsible for:

  • Informing your clients about how their personal information is collected and used through the Portal
  • Obtaining appropriate consent from clients before collecting sensitive information (such as health conditions)
  • Responding to client requests to access, correct, or delete their personal information held within your walker account
  • Complying with all applicable Australian privacy laws in your dealings with clients

Offleash provides standard privacy disclosure language in the client onboarding flow to assist you. However, this does not constitute legal advice, and you should seek independent advice if you are uncertain about your obligations.

To help with a client's data request, you may ask us for a copy of that client's records at privacy@offleashpack.com.au.

12.Retention of personal information

We retain personal information for as long as necessary to provide the Portal and fulfil the purposes described in this policy, unless a longer retention period is required by law. This section describes what we actually do today, and we will update it before we change that — not after.

While your account is open

Your account data, walk records, report cards, incident reports, invoices, messages and client records are retained for as long as your account is open, so that the Portal works as a record of your business. You can delete individual records — clients, dogs, draft invoices — at any time from within the Portal, and we do not keep a copy once you do, with one exception: autopay records.

When you close your account

Closing your Offleash account deletes your profile, your walk and report records, your client and client-dog records, and your messages. Backup copies are purged within 90 days.

Invoices are the exception. Invoices you have issued are retained and detached from your account — they are no longer linked to you and nobody can view them in the Portal. Australian tax law requires business records to be kept for at least five years, and a request to delete your account does not displace that obligation. They are also your own evidence if a client, an insurer or the ATO later asks about a transaction.

Autopay records are kept too. The record of each client's autopay agreement (Section 8) is kept, detached in the same way, for at least seven years after the agreement ends, whatever happens to the account or the client: it is your client's evidence of what they agreed to and what was charged, as well as yours.

What we do not yet do

We do not currently run scheduled deletion of older records inside an open account — for example, automatically removing walk records after a set number of years. Building that is on our roadmap. Until it exists we are not going to publish a schedule of retention periods we do not enforce, because a policy that describes software we have not written is worth nothing to you.

Incident reports are immutable once submitted — they cannot be edited, though addenda may be added — because they may be needed as evidence in an insurance claim or a dispute.

13.Data security

We use industry-standard security practices to protect personal information held in the Portal, including:

  • Encryption of data in transit (TLS)
  • Encryption of data at rest
  • Row-level security (RLS) on all database tables — your data is accessible only to you and authorised Offleash personnel
  • Role-based access controls within the Offleash team
  • Regular review of security practices

Stripe maintains its own security standards for payment data, including PCI DSS compliance. Offleash is out of scope for PCI DSS because we do not store, process, or transmit raw card data.

In the event of a data breach that is likely to result in serious harm, we will notify affected walkers and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

14.Automated decision-making

Offleash uses automated processes in certain circumstances, including:

  • Overdue subscription — if your plan's payment is still overdue 14 days after it failed, your paid features switch off automatically until the payment succeeds. We use your subscription's payment record. Your data stays available to you throughout
  • Active-client limit — if more clients were active in a month than your plan covers, then in the following month Pack automatically refuses new walks, and invoice lines that aren't walks already in Pack, for the clients beyond the limit. We use your walk and invoice records. Adding a client, walks already booked and payments are never refused
  • ABN validation — the ABN you enter is checked automatically for correct length and checksum. This is a format check only: it confirms the number is a structurally valid ABN, not that it is registered to you or that you are registered for GST
  • Walk report summaries — AI-generated draft summaries using Anthropic Claude, which are reviewed and approved by you before being sent to clients. The summary decides nothing about you or your client
  • Client import — Anthropic Claude suggests which column of a spreadsheet you import holds which detail, from its column headings and first three rows. You check every column and every client before anything is saved, and the suggestion decides nothing about you or your clients
  • Autopay charges and retries — for a client who turned on autopay, Pack charges each invoice you send them on its due date, and if their bank declines it, tries again 2, 4 and 7 days later unless the bank says not to. We use the invoice, its notice to your client and the bank's answer. Pack stops trying when the client or you turn autopay off, or the invoice is paid another way or voided

Where an automated process may materially affect your access to the Portal or payment processing, you may request human review by contacting privacy@offleashpack.com.au. Offleash is a small business operator under the Privacy Act, so the Australian Privacy Principles do not currently bind it. We follow APP 1 voluntarily, including the automated-decision transparency requirements that apply from 10 December 2026.

15.Your rights

Access

You may request access to the personal information we hold about you. We will respond within 30 days.

Correction

If you believe personal information we hold is inaccurate, incomplete, or out of date, you may request a correction via the Portal or by emailing privacy@offleashpack.com.au.

Deletion

You may close your walker account at any time from Portal Settings → Account → Close Account. Personal information will be retained for the periods set out in Section 12 where required by law or for legitimate business purposes (such as incident records and ATO compliance). You may also request deletion by emailing privacy@offleashpack.com.au.

Data export

We will provide a full export of your walk records, client data and transaction history on request within 30 days. Email privacy@offleashpack.com.au with the subject line Data export request.

Opt out of analytics

You may opt out of PostHog analytics tracking at any time in Portal Settings → Privacy. That also stops error reports from your browser. Errors on our servers are still reported to PostHog so we can fix them: they are not recorded against any person and name only the kind of page they came from, though they can include the internal ID of the record involved, such as an invoice.

Opt out of aggregated data sharing

Nothing is shared outside Offleash today. Before anything is, you will be able to keep your walk data out of it in Portal Settings (Section 7).

To exercise any of these rights, contact us at privacy@offleashpack.com.au.

16.Minimum age

The Offleash Walker Portal is intended for users aged 18 and over. You must be at least 18 years old to hold a Stripe Connect account and to register as a professional walker on the Portal. We do not knowingly collect personal information from anyone under 18 in connection with the Portal.

17.Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you via email and via an in-app banner in the Portal, with at least 14 days notice before the changes take effect.

If you do not accept the updated policy, you may close your account before the changes take effect. Continued use of the Portal after the effective date constitutes your acceptance of the updated policy.

The version history of this policy is available on request.

18.Complaints

If you believe we have not handled your personal information in accordance with this policy or the Australian Privacy Principles, you have the right to make a complaint.

Step 1

Contact us directly at privacy@offleashpack.com.au. Please describe your concern in as much detail as possible. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

Step 2

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

From June 2025, individuals may also bring a direct court action for serious invasions of privacy under the statutory tort introduced by the Privacy and Other Legislation Amendment Act 2024 (Cth).

19.Contact

BetSense Pty Ltd t/a Offleash Pack

ABN: 37 673 664 447

Malvern East VIC 3145

Email: privacy@offleashpack.com.au

Website: www.offleashpack.com.au