Privacy Policy

Last updated 12 July 2026

Lotbase is operated by LotBase Pty Ltd trading as Lotbase, ABN 82 690 221 320 (“Lotbase”, “we”, “us”). This policy explains what personal information we collect when you use lotbase.com.au, how we use it, and the choices you have. We handle personal information in accordance with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth).

Information we collect

  • Account details. When you sign up we collect your name and email address, and a securely hashed password (handled by our authentication provider — we never see or store your password in plain text).
  • Billing information. Subscriptions are processed by Stripe. Your card number and payment details are entered on Stripe’s systems and never touch Lotbase — we only receive a customer reference, your subscription status, and the last four digits and card type for your records.
  • Usage analytics. If you consent to analytics cookies, we collect product-usage events (pages viewed, features used) through PostHog in identified-only mode, associated with your account so we can understand how consultants use the tool and improve it.
  • Technical and log data. Our host, Cloudflare, records standard request data such as IP address, browser type, and timestamps to serve the site securely and produce aggregate, cookieless traffic statistics.

How we use your information

  • To create and manage your account and provide the Lotbase service.
  • To take payment, manage your subscription, and send billing and transactional emails.
  • To understand product usage so we can fix problems and improve features.
  • To keep the service secure and to comply with our legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

Cookies and analytics

On your first visit we show a cookie banner. Analytics cookies are off by default — PostHog product analytics only runs after you actively choose to accept, and it operates in identified-only mode. If you decline, no analytics cookies are set. Separately, Cloudflare Web Analytics runs unconditionally to measure overall traffic shape; it is cookieless and does not track or identify individuals. We also set a small number of strictly necessary cookies (for example, to keep you signed in), which do not require consent.

Service providers

We rely on a small set of trusted providers to run Lotbase. Each processes personal information only on our instructions and under its own security and privacy obligations:

  • Supabase — database and authentication (account records).
  • Stripe — payment processing and subscription billing (card data is held by Stripe, not Lotbase).
  • PostHog — product analytics, enabled only with your cookie consent and in identified-only mode.
  • Cloudflare — website hosting, security, and cookieless traffic analytics.
  • Resend — delivery of transactional and account emails.

Overseas disclosure

Some of these providers store or process data on servers located outside Australia. Where that happens, we take reasonable steps to ensure the recipient handles your information consistently with the Australian Privacy Principles.

Storage and security

We take reasonable technical and organisational measures to protect your personal information, including encryption in transit, row-level access controls on our database, and restricting access to the small number of people who need it. No method of transmission or storage is completely secure, but we work to protect your information and to promptly address any issues.

Retention

We keep your personal information for as long as your account is active and for a reasonable period afterwards to meet legal, tax, and accounting obligations. When information is no longer needed, we delete or de-identify it.

Your rights

Under the Australian Privacy Principles you may request access to the personal information we hold about you and ask us to correct it if it is inaccurate. You can also ask us to delete your account and associated personal information. To make any of these requests, email hello@lotbase.com.au and we will respond within a reasonable time.

Complaints

If you have a concern about how we have handled your personal information, please contact us first at hello@lotbase.com.au so we can try to resolve it. If you are not satisfied, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “last updated” date above, and for material changes we will take reasonable steps to notify you.

Contact

Questions about this policy or your personal information? Email hello@lotbase.com.au.