We collect information you provide when creating an account (name, email address), data you enter into the platform (contacts, records, files), technical information (IP address, browser type, device information), and usage data (features used, pages visited). We collect this information to provide, maintain, and improve the FlecBase service.
We use cookies that are necessary for the service to work — principally to keep you signed in and to protect forms against cross-site request forgery. These cannot be turned off without breaking the service.
We also measure how people find and move through our public pages. Where a service of ours does this — currently the ISI site at isi.webgen.com.au — we use Google Tag Manager and Google Analytics, operated by Google. Those tools set cookies in your browser and send Google the address of the page you are viewing, the page title, your IP address, and general information about your device and browser. Google processes that information as a provider to us and under its own terms; see Google's Privacy Policy.
We have deliberately limited where that measurement runs. It is present on the public pages, the sign-in and registration screens, and the password and email-verification screens. It is not present on the incident pages. Analytics tools always report the address and title of the page being viewed, and on those pages the address contains the incident's identifier and the title contains its reference — so running analytics there would send the identifiers of your security incidents to a third party. We do not, and the content of an incident is never sent to an analytics provider under any circumstances.
If you would rather not be measured at all, blocking cookies for this site or using any standard tracker-blocking extension prevents it. The product works normally without them, and we do not treat refusing analytics as a reason to withhold any part of the service.
This Policy applies to every service operated by WebGen Services Pty Ltd that links to it, including FlecBase (flecbase.com and its subdomains) and ISI (isi.webgen.com.au). Where it refers to "FlecBase", "the platform" or "the Service", read that as whichever of our services you are using.
One difference is worth stating plainly, because it is unusual and it is yours to control.
ISI exists to record information security incidents. The material you enter there is, by its nature, likely to be sensitive: system detail, log extracts, the names and accounts of people involved, and your own assessment of what happened. We hold that material on the same terms as any other content you place in our services — it remains yours, we do not sell it, and we do not use it to train any model.
Parts of the ISI analysis are produced by sending the material you have entered against an incident to a third-party large language model provider for processing, and the output of that processing is returned to you. We do that only when you ask for an analysis, only with the material on that incident, and never with the content of another customer's incident. You can prevent it entirely for any given incident by turning AI processing off on that incident, in which case nothing from it is ever sent; you can also supply your own provider account, in which case the processing happens under your contract with that provider rather than ours. Where no analysis is requested, nothing you enter leaves our systems at all.
Material you record against an incident is kept until you ask us to remove it. Evidence in ISI is append-only — corrections and withdrawals add to the record rather than replacing it — so a withdrawal marks material as withdrawn rather than deleting it, which is what allows a past report to be reproduced. If you need material permanently erased, including from past reports, write to webgen@webgen.com.au and we will do so and tell you what it affected.
We use the information we collect to: operate and maintain the FlecBase platform, process transactions and manage your subscription, send service-related communications, improve our platform and develop new features, comply with legal obligations, and detect and prevent fraud or abuse.
Your data is stored on secure servers managed by Amazon Web Services (AWS) in the Asia-Pacific (Sydney) region. We implement industry-standard security measures including encryption in transit (TLS) and at rest, regular backups, and access controls. While we strive to protect your data, no method of electronic storage is 100% secure.
We use the following third-party services to operate FlecBase:
Stripe — for payment processing. Stripe's privacy policy applies to payment data.
Amazon Web Services (AWS) — for hosting, storage, and infrastructure.
Mailgun/GMail — for transactional emails.
We do not sell your personal information to third parties.
FlecBase uses essential cookies to maintain your session and preferences. We do not use third-party tracking cookies or advertising cookies. By using the platform, you consent to the use of essential cookies.
Under the Australian Privacy Act 1988 and Australian Privacy Principles (APPs), you have the right to: access the personal information we hold about you, request correction of inaccurate information, request deletion of your personal information (subject to legal retention requirements), and lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached your privacy.
We retain your account data for the duration of your subscription. After account cancellation, we retain your data for 30 days to allow for reactivation. After this period, your data may be permanently deleted. We may retain anonymised, aggregated data for analytics purposes.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the platform. The "Last updated" date at the top of this page indicates when the policy was last revised.
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:
WebGen Services Pty Ltd
Privacy Officer
Email: webgen@webgen.com.au
Address: Maroochydore, Queensland