Privacy Policy

Rishav Aryal (ABN 34 930 918 759) is the sole-trader service provider. R3 Racing Analytics is the service/brand name used on this site.

Privacy enquiries can be sent to rishavaryal16@gmail.com.

R3 does not seek sensitive information about individuals and asks that you do not upload it unless it is genuinely required for portfolio administration.

To provide the service: recording costs and results, producing owner reporting, running your portal, and supporting you when something goes wrong.

To keep the service secure: authentication, multi-factor enforcement, access control, audit logging and abuse prevention.

To meet legal, taxation, accounting and contractual obligations.

R3 does not sell personal information and does not use client portfolio data for advertising.

The R3 Assistant's model provider is configured on the server; the current code defaults to Groq and can use the Lovable AI Gateway as an alternative or fallback. The Assistant code does not intentionally store prompt or answer text — it stores operational metadata such as quota, status, latency and token counts.

Quick Add Race can optionally transcribe an uploaded race image or PDF through the Lovable AI Gateway to Google Gemini 2.5 Flash. That transcription path is disabled by default and only operates when explicitly enabled.

R3 currently uses AI only as an assistive tool. R3 does not intentionally use AI to make decisions that could reasonably be expected to significantly affect an individual's legal rights or interests. If that changes, this policy and R3's customer disclosures will be updated as required.

Fuller detail is on the Technology Providers & AI Disclosure page and in the AI & Fair Use Policy.

R3 discloses information to the infrastructure and AI providers it uses to run the platform, and to professional advisers, insurers or authorities where reasonably required or legally compelled.

Those providers are named on the Technology Providers & AI Disclosure page.

R3 does not disclose one client's portfolio information to another client. Access is enforced by database-level row-level security.

Some providers process or store information outside Australia. By using R3 you acknowledge that your information may be handled overseas by those providers.

R3 selects managed providers that offer contractual and technical protections appropriate to the information involved, and limits what is sent to them.

Client documents and reports are held in private storage. Portal access requires authentication, administrator access requires multi-factor authentication, and sensitive administrative areas require a stepped-up session.

No online service can be guaranteed absolutely secure. R3's current security posture is described on the Security page without certification claims it cannot substantiate.

Retention periods, the designed 30-day Quick Add draft cleanup, backup behaviour and deletion requests are described on the Data Retention & Deletion page.

Export of your own records is described on the Data Export page.

You can request access to the personal information R3 holds about you, and ask for it to be corrected, by emailing rishavaryal16@gmail.com. R3 verifies authority before releasing information.

If you are not satisfied with how R3 has handled your personal information, contact R3 first so it can be addressed directly. If you remain unsatisfied, you can complain to the Office of the Australian Information Commissioner.

Nothing on this page limits or excludes rights you have under the Australian Consumer Law or other laws that cannot lawfully be excluded. Where any wording here conflicts with those rights, those rights prevail.

R3 may update this policy as the service changes. Material changes will be reflected here with a new effective date and, where they matter to clients, communicated directly.