Privacy policy
Effective 21 October 2026.
Who is responsible
Pegasos is a sports and racing technology project. This policy covers pegasos.io and the invitation-only operator platform at app.pegasos.io.
Thoroughbreds AI Pty Ltd operates the project and is responsible for the personal information described here.
Contact for privacy questions: hello@thoroughbreds.ai.
Information we handle
- Operator account information, including email address, optional name details, account identifiers, access permissions, password hashes and authentication records.
- Technical and security information, such as IP addresses, request details, timestamps, login events and records of administrative activity.
- Correspondence you send us, and transactional email delivery information such as bounces and complaints.
- Data feeds may include provider-supplied customer references and bet or transaction details.
We receive information from you, from the administrator who invites you, from data providers, and through operation of the platform and its infrastructure.
How we use information
We use this information to provide authorized access, operate and troubleshoot the platform, protect accounts, investigate misuse, respond to enquiries, and send invitations and account-security messages. Required account information is needed to provide operator access.
Provider-supplied customer references and transaction details are processed for authorized data operations and analysis under the applicable provider arrangements.
Cookies and the public website
The public marketing website has no analytics scripts, advertising trackers or signup forms. Its fonts and images are hosted with the site. Hosting infrastructure still processes technical request information to deliver and protect the website.
The operator platform uses essential authentication cookies to keep you signed in. Blocking these cookies prevents normal sign-in. These cookies are separate from the public marketing website.
Service providers and disclosure
Authorized administrators and service providers process information as needed to operate and secure the service. Amazon Web Services provides hosting, infrastructure and transactional email delivery. We may also disclose information where required by law.
The application backend is hosted in the AWS Sydney region. CloudFront uses a global network to deliver website content, and email delivery involves recipients' email providers. Information may therefore be processed outside Australia; we do not represent that all processing or support occurs only in Australia.
Security and retention
We use access controls and technical safeguards to protect information. No online service can guarantee absolute security.
Operational logs and backups have different retention periods. Account and security audit records are retained, and disabling an account does not immediately erase related records or backups. A uniform automatic deletion schedule has not been established. Contact us to request deletion; we will assess the request against operational requirements and applicable law and explain any information that must be retained.
Access, correction and complaints
Contact the privacy contact above to request access to, correction of or deletion of your information, or to raise a privacy concern. We may need to verify your identity before responding. Requests about provider-supplied information may require coordination with the source provider. We will consider requests in accordance with applicable law and explain any limits on what we can provide or change.
If you are dissatisfied with our response, you may contact the privacy regulator relevant to your circumstances. Information about Australian privacy complaints is available from the Office of the Australian Information Commissioner.
Changes
We will update this page when our practices change and identify the effective date. Material changes affecting operator accounts will also be communicated through an appropriate contact channel.