Introduction
CrashDash is a project of CrowdLab (the umbrella brand), operated by CrowdSpot Pty Ltd (ABN: 36 160 702 296), an Australian company.
CrowdLab ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our crash data visualisation platform at crashdash.com.au and related beta environments.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Authentication credentials managed by our identity provider (Clerk) — we do not store your password on CrashDash servers
- Account preferences, organisation membership (where applicable), and saved views
Email Subscriptions
If you choose to subscribe to our email updates, we collect:
- Email address
- Subscription preferences and interests
- Email engagement data (opens, clicks)
You can unsubscribe at any time using the link in our emails.
Usage Data
We may collect information about how you use CrashDash:
- Map interactions and filters applied
- Features accessed and time spent
- Device information and browser type
- IP address (for security and abuse prevention)
- Diagnostic error reports (see Error monitoring below)
Crash Data
CrashDash displays publicly available crash data from government sources. We do not collect or store personal information from crash reports as part of those open datasets. If you upload supplementary files for analysis (for example in the Data Library), we process those files to provide the feature and store them according to your account or organisation workspace settings.
How We Use Your Information
- Account management: To create and manage your account and organisation access
- Service delivery: To provide saved views, sharing links, analysis tools, and related features
- Service improvement: To enhance CrashDash features and user experience
- Communication: To send important updates, feature announcements, and road safety insights
- Email marketing: To send newsletters and product updates if you've subscribed (you can unsubscribe anytime)
- Security and reliability: To protect against fraud, unauthorised access, and to diagnose errors
Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information only in these circumstances:
- With your explicit consent
- To comply with legal obligations
- To protect our rights and safety
- With service providers who assist in operating CrashDash (under contractual confidentiality and data-protection terms)
Data Security
We implement appropriate security measures to protect your information:
- Encryption of data in transit (HTTPS) and at rest where provided by our hosting and database providers
- Secure authentication through Clerk
- Access controls and least-privilege practices for operational systems
- Limited access to personal data within CrowdSpot Pty Ltd
Your Rights
You have the right to:
- Access your personal information
- Update or correct your account details
- Delete your account
- Opt out of non-essential communications
- Request data portability where applicable
Cookies and Tracking
Essential Cookies
We use essential cookies and similar storage to:
- Maintain your login session (Clerk)
- Remember preferences and dismissed notifications
- Store your consent choices
- Improve performance of map data loading in your browser (for example local cache)
Analytics
We use Google Analytics 4 and Mixpanel to understand how visitors use CrashDash. This helps us improve the platform. Analytics may collect:
- Pages visited and features used
- Time spent on the platform
- Device type, browser, and screen size
- General location (city/region level only, not precise location)
- Anonymized or truncated IP addresses where supported by the provider
Mixpanel is configured to use Mixpanel's EU data residency endpoint for CrashDash.
You can opt out of analytics tracking at any time using our cookie consent banner.
Error monitoring
We use Sentry to capture application errors and (in some cases) session replays to diagnose bugs. Replays are configured to mask on-screen text and block media by default. We scrub sensitive upload payloads from error reports where practicable.
What We Don't Do
- We do not use cookies for advertising or remarketing
- We do not sell your data to third parties
- We do not track you across other websites for advertising
- We do not use analytics for advertising audiences
For more information about how Google Analytics handles your data, see: Google Analytics Data Privacy
Third-Party Services
CrashDash uses these third-party services:
- Clerk: Authentication and account management
- Supabase: Application data such as saved views, share links, feedback, and analysis workspace features
- Mapbox: Map visualisation services
- Amazon Web Services (S3): Hosting of public crash map datasets
- Vercel: Application hosting
- Google Analytics: Usage analytics
- Mixpanel: Product analytics (EU endpoint)
- Sentry: Error monitoring and diagnostics
- MailerLite: Email communications and newsletters
These services have their own privacy policies, which we recommend reviewing. Examples:
Children's Privacy
CrashDash is not intended for children under 13. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new policy on this page
- Updating the "Last updated" date
- Sending you an email notification for significant changes
Contact Us
If you have questions about this Privacy Policy, please contact CrowdSpot Pty Ltd:
Email: anthony@crowdlab.com.au
Subject: Privacy Policy Inquiry