Privacy Policy.

Information we collect.

Account information. When you sign up, we collect your email address and payment information (processed by Stripe). We do not store credit card numbers.

Usage data. We log API requests including: addresses queried, tools used, timestamps, and response times. This data is used for rate limiting, usage tracking, and service improvement. Your query history is visible only to you (in your own dashboard and usage stats) and to us for service operation, never to other users. API keys are stored hashed.

Homepage ticker. Our homepage shows a live “recently screened” ticker with the suburb and state of recent lookups, never the street address, and never who ran them. Ticker events expire within hours.

Automatically collected. We collect standard web analytics data: IP address, browser type, and referral source.

How we use your data.

• To provide and maintain the Service;
• To track your usage against your plan limits;
• To improve the accuracy and performance of our screening tools;
• To communicate about your account, billing, and service updates;
• To comply with legal obligations.

Data sharing.

We do not sell your personal information. We share data only with:

• Stripe — payment processing;
• Cloudflare — infrastructure and CDN;
• Government APIs — addresses are sent to public spatial APIs (Vicmap, NSW Spatial, PlanSA, SLIP, ACTmapi, theLIST, council ArcGIS endpoints) to retrieve planning data.

Data retention.

Account data is retained while your account is active. Queried addresses are automatically removed from our usage logs after 12 months — a daily sweep anonymises older entries, keeping only aggregate counts (tool, timing, success) for billing and statistics. You may request deletion of your account and associated data at any time — email hello@feasibly.com.au.

Security.

We use industry-standard security measures including HTTPS encryption, secure API key handling, and access controls. However, no system is 100% secure.

Your rights.

Under Australian Privacy law (the Privacy Act 1988 and the Australian Privacy Principles), you have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your account and data;
• Lodge a complaint with the OAIC if you believe we have breached the APPs.

Cookies.

Our marketing website and the web app use Google Analytics 4 to understand how people find and use the service. It records page views and a small number of product events (for example: running a demo lookup, creating an account), plus the coarse device, browser and approximate location Google derives from the request. It sets first-party cookies (_ga). Because the site and the app sit on different subdomains, the two are linked so a visit that starts on feasibly.com.au and ends at app.feasibly.com.au is counted once rather than twice.

We do not send Google any personal information — no name, no email address, no account identifier, and none of the addresses you look up. Google Analytics 4 does not log or store IP addresses. We do not run session recording, heatmaps, or advertising pixels, and we do not sell or share this data.

You can opt out with Google’s opt-out add-on or any tracker-blocking extension; nothing on the site depends on analytics loading. The MCP API and REST API do not use cookies.

Changes to this policy.

We may update this Privacy Policy from time to time. Material changes will be communicated via email to the address associated with your account.

Contact.

For privacy enquiries, email hello@feasibly.com.au. For data access or deletion requests, include “Privacy request” in the subject line.