Insurance & Security

SponsorLink.au · ABN 86 328 655 832

Updated: 11 October 2026

1. Insurance

SponsorLink does not yet hold cyber-liability, technology errors & omissions or public liability insurance. We are arranging this cover, and this page will show the insurer and the limits once the policies are in place.

2. How we protect your data

• Payments are handled by Stripe. Card and bank details never pass through or sit on SponsorLink's servers.
• Encryption: every connection uses HTTPS. Club payout details are encrypted in our database (AES-256-GCM), and SponsorWallet's copy of your cards on your phone is encrypted too.
• Sign-in: passwords are stored only as secure hashes; changing your password signs you out everywhere else; idle sessions expire. Sign-in attempts are rate-limited for each visitor.
• Our administrators sign in through Cloudflare Access plus a one-time emailed code, and need a second code before they can change anything.
• Secrets (API keys, passwords) are kept in Google Secret Manager, and automated scanning stops them being written into our code.
• Logs are kept for 30 days, with passwords, tokens and locations removed.
• Backups are taken every three hours plus daily, stored in a second Australian region, and restores are tested.

3. If something goes wrong

If we confirm a data breach that affects you, we will tell affected customers within 72 hours, and notify the Office of the Australian Information Commissioner where the Notifiable Data Breaches scheme requires it. Questions: [email protected].