Privacy Policy

At Feasly, we take privacy very seriously.

Feasly respects your right to privacy and is committed to safeguarding the privacy of our customers and website visitors. Feasly is an Australian and New Zealand product. We handle personal information in accordance with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth), and, for our New Zealand customers, the Privacy Act 2020 (NZ).

This policy sets out how we collect, use, store and disclose your personal information.

“Personal information” is information we hold that identifies you or could reasonably identify you.

Collection of Personal Information

Feasly collects and stores the personal information you enter into our Services, provide to us directly, or give to us in other forms. This may include:

• Name and job title / occupation
• Contact details, including email address and postal address
• Company details, including company name, ABN, website, company address and company logo
• Your subscription and billing details (see “Payments” below — we do not store your card number)
• The project and feasibility data you create in the platform
• Records of your communications with us
• Information from enquiries, promotions, or support requests
• Technical information about your visit (see “Website, platform & cookies” below)

Payments. Subscription billing and payments are handled by our third-party payment provider. Your card details are held securely by that provider and are never stored by Feasly. Our payment provider is certified to PCI DSS Level 1, the highest level of payment-card security.

How We Collect Your Personal Information

We collect personal information directly from you when you create an account, subscribe, contact us, or use the platform. We may also receive personal information from third parties (for example, if someone invites you to a project). Where we do, we protect it as set out in this policy.

Use of Your Personal Information

We collect and use personal information only where you have consented, where we have a legitimate interest, or where it is necessary to perform our contract with you (see our Terms and Conditions). We use your personal information to:

• provide, maintain and improve our Services;
• process your subscription and payments;
• communicate with you about your account, updates, and support;
• tell you about new products, services or offers (you can opt out of marketing at any time); and
• meet our legal and security obligations.

Where Your Data Is Stored

Your account and project data is stored in Australia. Our application and database run on managed cloud infrastructure located in Australia, and we maintain automated backups. Data at rest is not stored or replicated outside Australia.

Disclosure of Your Personal Information (including overseas)

We use trusted third-party service providers to help us run Feasly — for example, hosting, payments, email, customer support, and analytics. We share personal information with them only as far as reasonably necessary to deliver our Services, and we take reasonable steps to ensure they handle it consistently with this policy. Some of these providers may process personal information outside Australia. A current list of the service providers we use is available on request — just contact us using the details below.

We may also disclose personal information: to our professional advisers, insurers, or agents; to protect Feasly’s legal rights, property or safety, or those of our customers or others; and where required or authorised by law.

If there is a sale or transfer of our business or assets, we may transfer user databases (including personal information) to a purchaser under confidentiality arrangements, to the extent permitted by law.

Security of Your Personal Information

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These include:

• Encryption of data in transit (TLS/HTTPS) and at rest;
• Managed, access-controlled infrastructure hosted in Australia;
• Enterprise authentication through Auth0, with optional multi-factor authentication; and
• internal access limited to authorised personnel.

No method of transmission or storage is completely secure, and the transmission of information is at your own risk. While we take reasonable measures, we cannot guarantee absolute security.

Data Breach Notification

We maintain procedures to detect, respond to, and where required, notify data breaches. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth). For customers in New Zealand, we will comply with the notification requirements of the Privacy Act 2020 (NZ).

Retention of Your Personal Information

We keep personal information for as long as needed to provide the Services and to meet legal, accounting or reporting obligations. When you terminate your subscription, your data is archived in line with our data retention practices; you can contact us to have your data deleted. See also the “Retention of your data” clause in our Terms and Conditions.

Access to and Correction of Your Personal Information

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Please contact us using the details below.

We may decline a request where permitted by the Privacy Act 1988 (Cth) or other applicable law, and will explain why. New Zealand customers have equivalent rights of access and correction under the Privacy Act 2020 (NZ).

Website, Platform & Cookies

When you use our website or platform we may collect technical information such as browser type, operating system, and the page you visited before ours. We use this in aggregate to understand and improve how our site is used.

Cookies. We may use cookies to recognise you, remember your preferences, and analyse traffic. Most browsers accept cookies automatically, but you can change your browser settings to refuse them — though some features may not work as well.

Analytics. We use analytics tools — including Google Analytics — to understand how our website and platform are used. Google Analytics sends aggregated traffic data to Google’s servers overseas and does not identify you individually. You can limit analytics cookies through your browser settings.

Third-party links. Our site and platform may link to third-party sites. We are not responsible for their privacy practices — please read their policies.

Complaints About Privacy

If you have a complaint about our privacy practices, please contact us using the contact us form. We take complaints seriously and will respond promptly. Feasly is the entity responsible for the personal information processed under this policy.

Changes to This Policy

We may update this policy from time to time. Changes are effective when posted on our website. Please check back periodically.

How to Contact Us

If you have any questions about this Privacy Policy, please contact us via the contact us form on the website.