Privacy
Privacy policy
What we collect when you buy a code or send us a message, why, where it is kept, and how to ask about it.
Privacy
What we collect when you buy a code or send us a message, why, where it is kept, and how to ask about it.
Version 2, 18 October 2026. RMS Credits is run by ZenByte Australia Pty Ltd, ABN 38 698 761 956.
When you buy, we record the number of credits and a one-way hash of your connection's address, which we use only to limit repeated checkout attempts. On the checkout page you give us your email address and name and, if you choose, your business name, ABN and phone, so the code can be sent and the tax invoice made out; Stripe takes the card on its payment page and tells us the payment reference and status. We never see or store your card number. If you tick "Send me RMS credits news" (or switch it on in your account), we keep your email on our news list with the date, the page and the wording you agreed to, until you switch it off.
When you use the contact form we record what you enter: your name, email address, business name if given, the topic, an order number or RMS company ID if given, and your message, together with a one-way hash of your connection's address used only to limit repeated submissions. Each message is emailed to our support mailbox so a person can reply to you. We never send an automatic reply to the address entered, and we never use the form to email anyone else. Contact form messages are kept for two years so we can follow up, then deleted.
To take payment, issue the credit code, send the code and the tax invoice to you, keep the records the tax law requires, and answer your questions about the order. We do not sell your details. We send news only to people who tick the box to receive it, and you can unsubscribe at any time.
When something on this site, or behind it, goes wrong, a technical report of the error is sent to Sentry (Functional Software, Inc.), a service that helps us find and fix faults. Sentry keeps these reports in the European Union (Frankfurt, Germany), so this is a disclosure overseas. Before a report leaves our systems we remove personal details from it: names, email addresses, phone numbers, ABNs, credit codes, payment and invoice references, and anything after the page address. A report holds the kind of error, where in the site it happened and the technical steps that led to it. Error monitoring sets no cookies, does not record your screen, and Sentry is set not to store your IP address. Reports are deleted after 90 days.
You can create an account by signing in with your email and a code we send to it; there is no password. An account holds your email, and the name, business name and ABN you choose to add for tax invoices. Each time you show a credit code in your account we record the date, time and a hashed address, so we can see when a code was looked at. Orders placed as a guest with the same email are linked to the account when you sign in.
You can delete your account from the profile page. That removes your name, business name and ABN from the account and ends every sign-in. The orders, the codes issued for them, the tax invoices and the record of code views are kept, because tax law requires us to keep records of sales; the order records keep the email and name given at purchase.
We count visits with Vercel Web Analytics. It uses no cookies and stores nothing on your device. For each page view it records the page address without anything after the "?" (so no promo code, order detail or link you were sent), the website that referred you, your country, and your browser, operating system and device type. Vercel tells visits apart using a hash of the request that it discards after 24 hours, so a visit is not tied to you or to your IP address.
We also count four steps of buying: pressing Buy on the quick-buy card, opening the checkout page, applying a promo code, and pressing Continue to payment. Each count carries at most a rough order size (a range such as 10 to 49 credits) and never your email, name, business name, ABN, phone, promo code, client reference or order number. We use these figures only to see how the site is used and where people stop.
We use only the cookies the site needs to work, so there is no cookie banner. We use no advertising cookies, no advertising or social media pixels, no Google Analytics and no cross-site tracking.
On the sign-in pages your browser also keeps, on your device only, the times you asked for a sign-in code to the address you entered, so the page can show when you can ask again. Nothing in that storage is sent to us.
Order and invoice records are kept for as long as Australian tax law requires, which is at present five years. Checkout attempt hashes are not kept beyond what the rate limit needs. Contact form messages are kept for two years, then deleted.
You can ask to see, correct or delete what we hold about you by emailing hello@rmscredits.au. We handle requests in line with the Australian Privacy Principles. If you are not satisfied with our answer, you can contact the Office of the Australian Information Commissioner.