Privacy

Last updated 27 October 2026

Who we are

Contract Horizon (contracthorizon.com.au) is a sole trader business in Victoria, Australia. Contact is by email only. Questions, requests, and complaints go to hello@contracthorizon.com.au.

What we collect

We store only what the service needs:

• Your email address.
• A scrambled (hashed) copy of your password if you set one. We never store the password itself.
• Records of the one-time sign-in links and team invitations we send, including the email they went to.
• Scrambled session records that keep you signed in for up to 30 days.
• The searches you save: their names, filters, keywords, and digest settings, whether you opted in or unsubscribed, and which contract notices we have already emailed you.
• A private key for your calendar link.
• On Team plans, the email addresses of colleagues the owner invites.
• For paid plans, your Stripe customer and subscription reference, plan, status, and renewal date. Stripe collects your card and billing details directly. We never see your full card number.
• Short-lived technical logs, to keep the service running and secure.

Why we use it

To run your account, send the sign-in emails and digests you asked for, take payment, keep the service secure, answer your questions, and keep the records tax law requires.

We may also run internal, aggregate statistics on our own database, such as counts of subscribers, searches, and usage, to run and improve the service. Those figures stay inside the business. They are never sold or shared. We do not use third-party tracking or analytics.

We don't sell your information, we don't use it for advertising, and we never add you to a mailing list you didn't ask for.

Who helps us run the service

DigitalOcean hosts our server in Sydney, Australia.

Resend sends our emails and stores email data in the United States.

Stripe processes payments and may handle your details in the United States and other countries (stripe.com/au/privacy (opens in a new tab)).

If you add your calendar link to Google Calendar, Apple Calendar, or Outlook, that provider fetches and stores the feed.

Your email address and billing details are likely to be held in the United States.

Cookies

We use one essential cookie, th_session, to keep you signed in, for up to 30 days. We don't use analytics, advertising, or tracking cookies, and our emails don't track opens or clicks.

Your calendar link

Your calendar link works like a password: anyone who has it can see the expiry dates for that saved search. Keep it private, and reset it from your account page if it is shared by mistake. The calendar app you add it to will hold a copy of the feed.

Information about suppliers

Contract notices published on AusTender (opens in a new tab) name the supplier, and that can be a person's name when the supplier is a sole trader. We keep the published name, business number, and state or country, because that is the contracting party on a public notice. Supplier names and business numbers are shown only to signed-in users. Pages and responses you can open without an account show counts and totals, not the supplier's name or business number. We don't store phone numbers, email addresses, street addresses, or contact names, and there is no search by supplier name. If a notice is wrong, the agency or AusTender can correct it, and we pick up changes in the daily refresh. You can also write to us.

How long we keep it

While your account is open. When you email us to delete your account, we remove it from our live database within 30 days. Nightly backups are deleted after 14 days, and server logs after about 8 weeks. Stripe keeps payment records as the law requires, and we keep billing records for as long as tax law requires.

Your choices

Unsubscribe from any digest with the link in the email. A link from an earlier digest keeps working. Delete a saved search from your account page. Email us to get a copy of your details, correct them, or delete your account and the data we hold for it. We'll reply within 30 days.

Complaints

Email hello@contracthorizon.com.au and we'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au (opens in a new tab).

We'll post updates on this page and email account holders about significant changes.