We collect only what we need to provide the service you have subscribed to, deliver your scan results and PDF reports, and maintain your account. We do not sell your information, and we never pass your account, domain or scan data to advertisers or any other third party for commercial purposes. Ever. When we advertise, the page our ads link to and our signup page use the Meta Pixel to measure those ads; what it collects, and how to switch it off, is set out under Advertising and the Meta Pixel.
01Who We Are
Red Bridge Cyber is an automated website security and performance scanning service operated by QANT Pty Ltd (ACN 088 738 943; ABN 77 088 738 943), a company registered in Australia. The service is accessible at redbridgecyber.com.au and associated domains including our test-mail domain testthis.email, report.redbridgecyber.com.au, and redbridgecyber.com.au/improve.
Red Bridge Cyber provides automated continuous scanning, analysis, and findings delivery (as a live view in your account with a rolling 4-week scan history and on-demand PDF reports) across the five categories that make up the platform: Email (deliverability and authentication), Speed (page performance), Domain (DNS and SSL certificate health), Visibility (a technical audit of how well your website is configured to be discovered by search engines and cited by AI tools - this is a configuration check, not a measurement of whether any specific search engine or AI product is actually citing your site), and Security (vulnerability indicators and security-header posture). Nothing on this platform constitutes professional security consulting, legal advice, or a guarantee of security outcomes.
For any privacy-related enquiries, contact us directly at privacy@redbridgecyber.com.au.
02What Information We Collect
We collect only the minimum information necessary to operate the platform, process your subscription, and deliver the live view and PDF reports in your account.
Account and Contact Information
Your name and email address, provided when you subscribe or create an account. Subscribers have a platform account at report.redbridgecyber.com.au where the live view and a rolling four-week scan history are stored.
Domain Information
The domain name or names you submit for scanning. This is the core input for every scan we run. Subscribers may register multiple domains depending on their plan.
Payment Information
Transaction details associated with your purchase. We do not store payment card details. All payment processing is handled exclusively by Stripe, which operates under PCI-DSS compliance standards. Your card statement will show a charge from RED BRIDGE CYBER.
Test Email
As part of the Email category of the scan, we ask you to send a test email from your business email account to a unique address on our scanning infrastructure (testthis.email - a dedicated domain we operate exclusively for receiving these test emails). We capture and process the technical headers of that email - the routing and authentication metadata that is invisible in a normal email reader - for the sole purpose of analysing your email deliverability and authentication configuration.
To be specific about what is and is not captured: the email headers - the technical routing and authentication metadata - are analysed. The message body, subject line, and any attachment are discarded immediately and are not read, stored, or used for any purpose. Header data is used only to generate findings for your live view and PDF reports, and is not retained beyond what is required to produce and store those.
Scan and Live View Data
The technical findings generated by scanning your domain. Scan data is retained as a rolling four-week (28-day) history to power the live view in your account and let you track corrections and regressions in your security and SEO posture over time.
Website Visits and Advertising Measurement (Meta Pixel)
When we advertise on Facebook or Instagram, the Meta Pixel runs on two pages of this website: the page those ads link to, and our signup page. If you visit either, it sets a Meta cookie in your browser and sends Meta Platforms information about the visit: that you viewed the page, that you started a signup, whether you completed a subscription and the plan price, your browser and device details, and your IP address. Meta may link this to a Facebook or Instagram account you hold. It does not run on any other page of this website or on the customer portal, and it does not follow you as you move around the site. We do not send Meta your name, email address or payment details (your card is entered in Stripe's own secure form, which the pixel cannot read), and it never sees your domains, scan results, test emails or reports. See Advertising and the Meta Pixel below.
Communications
Any messages you send us via email or through our support system, and any responses we provide.
03How We Use Your Information
Your information is used solely for the following purposes:
- To create and manage your account and subscription access
- To process your payment and maintain accurate transaction records
- To scan your nominated domain or domains and surface findings in your live view
- To generate PDF reports on request and email them to you once produced
- To send communications directly related to your subscription - including scan-result and report-delivery notifications, billing reminders, and account-related notices
- To enable historical comparison in the live view by retaining prior scan results
- To respond to support requests and direct communications
- To record which ad campaign or affiliate referral led to your subscription, so we can tell which of our advertising works
- To measure whether our advertising on Facebook and Instagram works, to show our ads to people likely to be interested (including people who have visited the page our ads link to), and to avoid showing them to people who have already subscribed - using the Meta Pixel on those two pages only
- To maintain the security and integrity of the platform
- To comply with applicable Australian law
Apart from the Meta Pixel measurement described under Advertising and the Meta Pixel, we do not use your information for advertising, automated profiling, or any purpose beyond the direct operation of this service.
04What We Do Not Do
We do not sell, rent, or trade your personal information. We never share your account details, domains, scan data, test emails or reports with advertisers, and never use them to target you with advertising on any platform - the Meta Pixel sees only visits to the page our ads link to and to our signup page, as described under Advertising and the Meta Pixel. We do not pass your contact details to any other business, partner, or affiliate without your explicit consent.
05Sharing of Information
The only circumstances under which limited information may be shared with a third party are:
Your transaction details are processed by Stripe. Only information strictly necessary to complete your transaction is shared. Stripe's own privacy policy and PCI-DSS security standards apply.
The application, the rolling scan history, and any PDF reports you generate are hosted on Google Cloud Platform - Cloud Run for compute, Cloud Storage for files - both deployed to the Sydney (australia-southeast1) region. This sub-processor holds your account information and scan history.
Cloudflare provides DNS, content delivery, and DDoS protection for our domains. Traffic passes through Cloudflare's edge network; no account-identifying data is stored there.
Our contact form uses Cloudflare Turnstile to confirm submissions come from a real person rather than an automated bot. Turnstile assesses browser and interaction signals and returns a verification token submitted with your message; it does not ask you to identify yourself and is not used to track you across sites. Turnstile is governed by Cloudflare's privacy terms.
We measure aggregate traffic - which pages are visited and how visitors arrive - using our own first-party analytics, built and hosted entirely within QANT infrastructure in Sydney. This analytics sends nothing to Google, Meta, or any third-party analytics provider. It stores no advertising profile, sets no tracking cookies (a short-lived in-browser session id only; the separate signup-attribution cookie is described under Cookies and Tracking), and never records your full IP address (only an aggregate country derived at our edge). If you arrive from a link we tagged (for example, one of our ads), it also records which campaign and which ad sent you, in aggregate. The Meta Pixel, below, is separate from this analytics.
When we advertise on Facebook or Instagram, the Meta Pixel on the page our ads link to and on our signup page sends Meta information about your visits to those pages, as described under Advertising and the Meta Pixel. Meta stores it, including outside Australia, under its own privacy policy. We receive only aggregated reports.
The transactional and account emails we send you - including scan-result and report-delivery notifications, billing reminders, account notices, and replies to your enquiries - are delivered through Mailgun (operated by Sinch). Mailgun is used for delivery only - it does not store your messages as part of our records. Because Mailgun operates outside Australia, the email content transits overseas infrastructure while it is being delivered.
DataForSEO supplies upstream data feeds used by the Visibility category of the scan. Queries sent to DataForSEO are limited to the domain you have submitted; no account-identifying data is shared.
In the rare circumstance where we are required to disclose information under Australian law or a valid legal order, we will comply. Where lawfully permitted, we will notify you before any such disclosure.
Of the sub-processors above, your personally identifiable information is only ever held by Stripe (for payment) and Google (for account and scan-data hosting), and handled transiently by Mailgun while a transactional email is being delivered. Meta receives the website-visit information the Meta Pixel collects, and never your account, domain or scan data. The other sub-processors - Cloudflare, Cloudflare Turnstile, and DataForSEO - handle traffic, infrastructure, or domain-level queries that do not contain your account-identifying information. All sub-processors are engaged under appropriate data processing terms.
Other than the website-visit information the Meta Pixel sends to Meta, we will never share your personal information with advertisers, data brokers, or any other commercial third parties.
06Data Storage and Security
All customer data - including account information, domain scan data, live-view content, and any PDF reports you generate - is stored on infrastructure located in Sydney, Australia, and stays in Australia at rest. There are two exceptions. The first is in transit: the transactional emails we send you (see Sharing, above) are delivered through Mailgun, which routes the message content through overseas infrastructure during delivery. The second is the Meta Pixel on the page our ads link to and our signup page: the visit information it collects is sent to and stored by Meta, including outside Australia (see Advertising and the Meta Pixel). We do not otherwise store your data outside Australia. International customers accessing the service from outside Australia: your account, live-view content, and PDF report data is also stored in Sydney - there is no separate regional copy.
Access to your data is strictly limited to authorised personnel only.
While we take all reasonable technical and organisational precautions to protect your personal information, no digital platform can guarantee absolute security. We encourage all customers to maintain strong, unique passwords on their accounts. If you suspect any unauthorised access to your account, contact us immediately at privacy@redbridgecyber.com.au.
07Cookies and Tracking
Our platform uses minimal browser storage technologies for maintaining your session and delivering platform functionality, plus one first-party cookie that remembers which ad campaign or affiliate referred you. The one third-party exception is the Meta Pixel, which sets a Meta cookie on two pages of this marketing website: the page our ads link to and the signup page (see below).
Specifically, we may use:
To maintain your logged-in state during your visit to report.redbridgecyber.com.au and deliver platform features correctly.
The redbridgecyber.com.au marketing site uses our own first-party analytics (see Sharing, above) - no third-party analytics provider is involved. It reports on aggregate traffic patterns only - page views, traffic sources, device categories - using a short-lived in-browser session id rather than a tracking cookie, and never stores or transmits your full IP address. No data is sent to any external analytics provider.
If you arrive at redbridgecyber.com.au from a link we tagged (for example, one of our ads) or from an affiliate's link, a first-party cookie remembers which campaign or affiliate sent you, for 30 days. If you then subscribe, that campaign or affiliate is recorded with your account and on your payment record with Stripe. It is never shared with advertisers.
When we advertise on Facebook or Instagram, the Meta Pixel runs on two pages of redbridgecyber.com.au - the page those ads link to and the signup page - and sets a Meta cookie in your browser to measure our ads. It is not loaded on any other page of the website, nor on the customer portal at report.redbridgecyber.com.au, and it is not loaded at all if your browser sends a Global Privacy Control signal. See Advertising and the Meta Pixel.
Apart from the Meta Pixel on those two pages, we do not run advertising tracking technology - including Google Ads remarketing tags - on any of our domains.
08Advertising and the Meta Pixel
The Meta Pixel is a piece of code from Meta Platforms, Inc. and Meta Platforms Ireland Limited (Facebook and Instagram). We use it on two pages only - the page our Facebook and Instagram ads link to, and our signup page - to measure whether our ads work, including whether they lead to a subscription, to show our ads to people likely to be interested (including people who have visited the page our ads link to), and to avoid showing them to people who have already subscribed. It is not loaded on any other page of this website, and it does not track your activity as you move around the site. Information it collects is sent to and stored by Meta, including outside Australia (principally in the United States), and Meta handles it under its own privacy policy. We receive only aggregated reports from Meta, not information that identifies you.
You can limit or stop this:
If your browser sends a Global Privacy Control signal, this website does not load the Meta Pixel at all.
Manage how Meta uses activity from other websites under Ad preferences and Your activity off Meta technologies.
Block or clear third-party cookies, or use a content blocker.
09Your Rights
Under the Australian Privacy Act 1988 and Australian Privacy Principles, you have the following rights regarding your personal information:
Request a copy of the personal information we hold about you.
Request corrections to any inaccurate or outdated information.
Request complete removal of your personal data from our systems.
Opt out of any marketing or non-transactional communications at any time.
Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy rights have been breached.
Withdraw your consent for us to hold your information at any time.
To exercise any of these rights, email privacy@redbridgecyber.com.au with your request. We will respond promptly and without question. Data access and correction requests will be actioned within 30 days. Data deletion requests will be completed within 30 days, subject to any legal retention obligations described below.
10Data Retention
We retain your personal information only for as long as you remain an active customer, or as long as is reasonably necessary to provide your live-view and reporting service and meet any outstanding obligations. Scan data is held as a rolling four-week (28-day) history; data older than the window rolls off automatically.
Transaction and billing records are retained for the period required under Australian taxation and financial record-keeping law - typically seven years - after which they are permanently deleted.
For subscription customers, your account data, domain registrations, and scan history are retained for the duration of your active subscription and for a reasonable period following cancellation to resolve any outstanding matters. Upon request, all personal data will be permanently removed within 30 days.
11International Customers
Red Bridge Cyber is an Australian business operating under Australian law. If you are located outside Australia and choose to use this service, you do so voluntarily and accept that your data will be stored and processed in Australia under Australian privacy law, apart from the website-visit information the Meta Pixel sends to Meta, described under Advertising and the Meta Pixel. We do not represent that our practices comply with the specific privacy laws of any other jurisdiction. If you have questions about whether this service is appropriate for use from your location, contact us before purchasing.
12Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our platform, services, or applicable law. Where changes are material, we will make reasonable efforts to notify active customers via email before the changes take effect.
The date of the most recent update is noted at the top of this page. Continued use of the platform following any update constitutes acceptance of the revised policy.