Last updated: 28th April 2026
Our philosophy
RoadFootage is an Australian platform based in Queensland that helps motorists find and share dashcam evidence. Because our marketplace involves media that may contain personal information, we are committed to being clear and honest about how we handle data.
We follow the Australian Privacy Principles (APPs) found in the Privacy Act 1988 (Cth). We have written this policy in plain English to ensure it is readable for the average person, not just lawyers.
Our approach is built on three simple ideas:
- Transparency: We tell you what we collect and why we collect it.
- Security: We take reasonable steps to protect the data you share with us.
- Control: We give you options regarding how your footage is shared and when your data is deleted.
1. Information we collect
We collect information to provide our services, maintain security, and fulfill legal requirements. We break this down into four categories:
A. Information you provide through our forms
When you interact with our website, we collect the details you voluntarily enter:
- Early Access Program: We collect your email address so we can invite you to the platform and send you periodic updates.
- Contact Us: We collect your email address and any information you choose to include in your message so we can respond to your inquiry.
- “Join Us” (Employment Applications): If you apply to work with us, we collect your name, phone number, LinkedIn URL, and area of specialisation. We retain this information for 5 years to contact you about current or future opportunities.
- Takedown Requests (Copyright): Because these are formal legal notices, we require specific details to process them. This includes:
- The Requestor: Your full name, organisation name, job title, mailing address, phone number, and email address.
- The Copyright Owner: If you are acting on someone else’s behalf, we collect the owner’s name, phone number, and email address.
- The Claim: The URL of the allegedly infringing content on our platform and the URL of the original content.
B. Information collected when you register
- Identity & Authentication: We use Auth0 (hosted strictly on their Australian “au” endpoint) to manage your account. When you sign up or log in via email or social providers (like Google or Facebook), we store your email address and basic profile details.
- User Profile: You may provide additional details during onboarding to personalise your experience. While you can view these details, they are not presented publicly.
C. Dashcam footage and media
This is the core of the RoadFootage marketplace. When you upload an incident report:
- The Media Files: We collect and store the videos and photos you upload.
- Technical Metadata: We extract data embedded within the files, such as GPS coordinates (geolocation), timestamps (temporal data), device identifiers, and camera serial numbers.
- Inference and Transcription: We use Large Video-Language Models (LVLMs) and inference technologies to transcribe the contents of your videos (e.g., identifying vehicle types, colours, or actions). This makes the footage searchable for other users.
- Publicly Displayed Data: Only the details you provide specifically for the incident report such as the media, description, location/address, and date/time are displayed to the public or other users. Your personal identity (name, email, phone) is not displayed publicly.
D. Technical “hidden” data
To keep the platform secure and functional, we automatically record technical information, including:
- Security Identifiers: Your IP address, device fingerprints, trace IDs, and correlation IDs.
- Analytics: We use a self-hosted instance of Matomo to track platform usage and improve our services. Because we host this ourselves in Australia, this data remains under our direct control.
- Security Services: We use Cloudflare for traffic routing, encryption, and the prevention of bots and fraud. Cloudflare may collect technical data necessary to protect the site from attacks.
2. How we use your information
We use your information to operate our marketplace, improve our technology, and comply with the law. We do not sell your personal identity (such as your name or email) to third parties.
How we use your information internally
Operating the platform
We use your data to manage the account credit system, process your uploads, and deliver the downloads you purchase or earn.
Video analysis and indexing
We use technical processes like Large Video-Language Models (LVLMs) and inference to transcribe the contents of uploaded footage. This allows us to index videos so that they are searchable by specific details, such as the colour of a car or the nature of an incident.
Staff access and quality assurance
Because we are a small business, our staff members have reasonable access to system data. We use this for:
- Quality assurance: Manually reviewing footage to ensure redactions are accurate and effective.
- Diagnostics: Identifying and fixing technical bugs or errors.
- Research and development: Improving our internal models and the overall service for our users.
How we share information with others
With the general public
If you upload an incident report, certain details are made public so others can find the footage. This includes the descriptions, locations, addresses, dates, and times you provide. We may also display redacted previews of the media. Your personal profile details (email, name, phone number) are never shown to the public.
With purchasers and downloaders
The information shared with a purchaser depends on your privacy settings and the type of request:
- Unredacted footage: If you have enabled this option, or if you are responding to an Evidence Bounty, the purchaser receives the full file. This includes the video itself and the embedded technical metadata, such as GPS coordinates and device identifiers. This version is intended for evidentiary purposes, such as insurance claims or court proceedings.
- Redacted footage: If you have disabled unredacted downloads, we use a mixture of automated inference and manual review to obscure faces and license plates. We also strip identifying metadata from these files before they are downloaded.
- Confidentiality: Even when a purchaser receives unredacted footage, we do not provide them with your name, email address, or phone number. However, you accept that the photo or video itself or the technical metadata may contain information that could identify you.
The 30-day access rule
To ensure the fairness of the marketplace, if a user purchases or earns access to your footage, they are granted a 30-day window to download the file. If you choose to delete your account or your footage during this time, we are required to keep that specific file available to the purchaser until their 30-day access period expires.
Service providers
We share necessary data with trusted service providers to run the platform:
- Auth0: For managing your identity and login.
- AWS: For secure cloud storage.
- Cloudflare: For traffic routing, security, and fraud prevention.
Legal requirements and court orders We will only disclose your personal profile details (such as your name, email, or phone number) to third parties if we are legally compelled to do so. This includes responding to a valid court order, warrant, or subpoena from law enforcement or a government agency.
3. Your rights and managing your data
We believe you should have control over how much of your information is shared and how long we keep it.
The Redaction Toggle
We provide a privacy setting that lets you choose between two ways of sharing your footage:
- Unredacted downloads: By enabling this, you allow purchasers to download the full, original file for evidentiary use. This typically allows you to earn the full amount of credits offered.
- Redacted downloads: By disabling unredacted downloads, you instruct us to obscure faces and license plates before the file is shared. Choosing this option may reduce or nullify the credits you earn from that footage.
- Important exception: If you choose to upload footage specifically to claim an Evidence Bounty, the redaction toggle is not available. The nature of a bounty requires the delivery of unredacted evidence.
Account Deletion and the 30-Day Rule
You can request to delete your account at any time through your settings. We will process your request and remove your personal profile details within a reasonable timeframe.
When you delete your account, we also take reasonable steps to delete your uploaded media. However, there is one important exception to protect other users:
- If another user has already purchased or earned access to your footage before you requested deletion, our agreement with them requires that we keep the footage available for their download for 30 days.
- Once that 30-day window closes, your footage is deleted from our active systems.
Managing your credits
Your account credit balance is linked to your active profile.
- Forfeiture: If you delete your account, any remaining credits are lost and cannot be recovered, cashed out, or transferred.
- Adjustments: We may adjust your credit balance at our sole discretion. We only do this to fix technical errors, address suspected fraud, or reverse credits earned by violating our terms.
Data Retention
We do not hold onto data longer than necessary, but we must follow Australian record-keeping laws:
- Financial and Tax Records: Information related to transactions (including credit earnings and spends) is kept for 5 years to comply with Australian tax law.
- Applicant Data: If you applied for a job with us via the “Join Us” form and were not hired, we keep your details for 5 years so we can contact you about future roles.
- Takedown Notices: Records of copyright claims are kept as part of our legal compliance history.
Accessing and correcting your information
Under the Australian Privacy Principles, you have the right to see the personal information we hold about you and ask us to fix any mistakes.
- Self-service: You can update your profile details and preferences directly in the app at any time.
- Formal requests: If you need a copy of your data or want to request a correction that you cannot make yourself, please use our Contact Form. We will verify your identity and respond to your request within a reasonable timeframe.
4. Security and tracking
We use a combination of industry standard tools and internal systems to keep your data safe and to understand how our platform is being used.
Data security
We take the security of your data seriously and have implemented the following measures:
- In transit: Your data is encrypted while it is moving between your device and our servers.
- Stored securely at rest: Your data is stored securely when it is not in use. This includes storage on our Australian based servers and our cloud provider, AWS.
- In-memory processing: For technical and operational reasons, data is not encrypted while it is being processed in the active memory of our servers.
- Staff access: As a small business, our staff members have reasonable access to system data for quality assurance, diagnostics, and research. We use this access to improve the service and verify that our redaction processes are working correctly.
Cookies and analytics
We use cookies and similar tracking technologies to provide essential features and security:
- Authentication: We use Auth0 to manage your login and identity. Auth0 uses cookies to manage your session so you stay logged in as you move through the site. These services are hosted on Auth0’s Australian endpoint.
- Protection: We use Cloudflare for traffic routing, encryption, and to prevent bot attacks and fraud. Cloudflare may use cookies to identify legitimate traffic and protect the platform.
- Analytics: We use Matomo to see which parts of our site are being used. We host Matomo ourselves within Australia, which means we have total control over this data and do not share it with third party analytics companies.
Your choices
You have the right to control how your browser handles tracking:
- Browser settings: You can choose to disable cookies or use adblockers and tracking prevention tools.
- Impact on functionality: While you are welcome to use these tools, please be aware that the RoadFootage platform may not work correctly if essential cookies (like those used for login or security) are blocked.
Complaints
If you have a concern about your privacy or how we have handled your data, please contact us through our Contact Form. We will investigate your concern and get back to you within a reasonable timeframe.
If you are not satisfied with our response, you can lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
5. Data Retention and Deletion
Account Deletion
You can request to delete your account at any time. When you do:
- Personal Profile: We will delete your name, email, and profile details from our active systems within a reasonable timeframe.
- Uploaded Media: We will take reasonable steps to delete the videos and photos you uploaded, including both the redacted and unredacted versions (subject to the “30-Day Rule” below).
- At Deletion: Any credits remaining in your account at the time of deletion will be lost and are unrecoverable.
- Discretionary Adjustments: We reserve the right to adjust your account credit balance at our sole discretion. This is typically done to correct technical errors, address suspected fraudulent activity, or reverse credits earned through a violation of our Terms of Use.
- System Backups: For technical security and disaster recovery, we maintain system backups for up to 90 days. Your data may be retained within these backups for up to 90 days after your account or media is deleted from our active systems.
Discretionary Adjustments
We reserve the right to adjust your credit balance to correct technical errors, address fraud, or reverse credits earned via a violation of our terms.