Your data
Protected. Respected. Yours.
This platform exists because first responders trust FRSA. We protect that trust with rules enforced by the system itself — not just promises. Here's exactly how it works, in plain English.
What we collect, and why
Your account details
Name, email and password so you can sign in securely. Your password is never visible to anyone, including FRSA.
Your profile
Whether you're a first responder or family member, your agency type and state — so FRSA can understand needs across the community. Never shown to brands.
What you choose to share
Observations, problems, ideas and feedback. Private to FRSA unless you choose otherwise.
Your consent choices
What you've agreed to — research use, research contact, public display. You can change or withdraw these any time.
Who can see what
| Information | You | FRSA | Brands | Public |
|---|---|---|---|---|
| Your name and contact details | Full access | Yes | Never | Never |
| Your profile (agency type, state) | Full access | Yes | Never | Never |
| Private submissions | Full access | Yes | Never | Never |
| Submissions you chose to share | Full access | Yes | De-identified summaries only | Only as FRSA-approved ideas, anonymous unless you chose your display name |
| Your consent choices | Full access | Yes | Never | Never |
| De-identified opportunity summaries | Yes | Yes | Verified partners only | Published highlights only |
How it's protected
Role-based access
Separate sign-ins for community, brands and FRSA staff. Each role can only reach what it's allowed to — checked on every request.
Row-level security on every table
The database itself enforces who can read or change each row. Even a direct link can't bypass it.
Private file storage
Brand files live in private storage, served only through time-limited signed links to the owning organisation and FRSA.
An audit log of every admin action
Every moderation decision, verification, stage change and role change is recorded with who did it and when.
Verified brands only
Businesses can't see the marketplace until FRSA has verified their organisation — and even then, only de-identified content.
No automatic approvals
Gateway decisions are made by people at FRSA and recorded with reasoning. Nothing is approved by an algorithm.
You're in control
- Change or withdraw consent any time in Settings → Privacy. Withdrawal takes effect straight away.
- Request account deletion from the same screen. It creates a task for the FRSA team, who action it and confirm.
- Ask us anything about your data: FRSAInnovationLab@gmail.com.
Our commitment
We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). We collect only what we need, use it only for the purposes you agreed to, and never sell personal information.
Read the detail in our Privacy Policy and Terms of Use.