Privacy Policy

Scope of this policy

This policy explains what happens on the public jegasec.com marketing website. It does not cover:

• Fleet Shield accounts and billing: the live Fleet Shield product (fleetshield.systems) is a separate system with its own account data, fleet and vehicle telemetry, driver-behaviour data, and subscription billing.
• Product demonstrations: the interactive previews on the Fleet Shield and Defence R&D pages run entirely in your browser using simulated, canned data. They don't send anything to JEGASEC, and no visitor data is collected through them.

Product-specific privacy, data-processing and service terms are provided before a pilot or paid deployment.

Information We Collect

On the public website, we collect information in these ways:

• Information you submit through the Contact or Careers form: these forms submit directly (as a server-side request, not a mailto: link) to a Cloudflare Worker that JEGASEC operates as part of this website. The Worker receives and processes the fields you enter — including your name, organisation, work email, phone if provided, organisation type, fleet or project details, and your message — and passes them to Resend, a third-party transactional email delivery service, which constructs and sends the resulting email to JEGASEC's inbox. Your submission is transmitted to and processed by that Worker, then by Resend; it does not go directly from your email client to ours. Neither the Worker nor Resend writes submissions to a database: once the email has been sent (or the attempt has failed), the request is not retained by the Worker beyond the ephemeral, in-memory use described below, and Resend retains it only per its own operational delivery logs. The email JEGASEC receives is then kept in JEGASEC's ordinary business inbox like any other email.
• IP address, used briefly for spam and abuse prevention: the Worker reads the submitting request's IP address to apply a short-term rate limit (a maximum number of submissions per IP within a rolling window) and a same-origin check, both intended to reduce automated abuse of the form. This IP-based rate-limit record is held only in the Worker's in-memory state, is not written to persistent storage, and is cleared whenever that Worker instance restarts (in practice, within a short period).
• Basic technical logs: Cloudflare, as JEGASEC's hosting and edge-network provider, automatically logs standard web request data (such as IP address, browser type, and pages visited) for security and reliability purposes, in line with typical web hosting and CDN practice. JEGASEC's own Worker code additionally logs error conditions (for example, if the email-sending configuration is missing or a send attempt fails). These error logs record the type of failure, not the content of your submission.
• Product demonstrations remain unaffected: the interactive previews on the Fleet Shield and Defence R&D pages still run entirely in your browser using simulated, canned data, independently of the form-submission architecture described above. They don't send anything to JEGASEC, and no visitor data is collected through them.

How We Use Information

Any information we receive is used only to:

• Respond to your enquiry or expression of interest;
• Apply short-term rate limiting to reduce spam and automated abuse of the contact/careers forms;
• Maintain the security and reliability of this website; and
• Meet legal or regulatory obligations, where applicable.

We do not sell personal information, and we do not use it for advertising.

Service Providers

This website runs on Cloudflare's infrastructure (Cloudflare Workers and Cloudflare's edge network host the site and process form submissions). Email delivery for the Contact/Careers forms is handled separately by Resend, a third-party transactional email API. JEGASEC's Worker sends the submitted fields to Resend over an authenticated API call, and Resend delivers the resulting email to JEGASEC's inbox. We don't use any other third-party form-processing or marketing-automation service for this website's Contact or Careers forms.

Where Processing Occurs

Cloudflare Workers run across Cloudflare's global edge network. We have not configured or verified region-restricted (Australia-only) processing for the Contact/Careers form Worker, so submitted form data may be processed at a Cloudflare data centre outside Australia as part of ordinary request handling. Separately, Resend processes and briefly holds the submitted fields (name, organisation, work email, and your message) in order to deliver the email, using US-based infrastructure, so this data leaves Australia as part of the delivery step, even though JEGASEC itself is an Australian business and the email you send ultimately lands in an Australian-operated inbox. We do not claim Australia-only hosting or processing for either step.

Retention

The rate-limiting IP record described above is ephemeral: held in memory only, not persisted to disk or a database, and cleared on the Worker's normal recycling. The email JEGASEC receives from a form submission is retained in JEGASEC's business email system for as long as reasonably necessary to respond to and keep a record of the enquiry, consistent with ordinary business- correspondence practice, unless you ask us to delete it sooner (see "Your Rights" below).

Your Rights: Access, Correction and Deletion

You can ask us what information we hold about you from a form submission, ask us to correct it, or ask us to delete the email(s) resulting from your submission, by contacting hello@jegasec.com. We'll respond within a reasonable time. This doesn't extend to the ephemeral rate-limiting record described above, which is not retained long enough to be individually retrievable.

Analytics & Cookies

This site does not currently use advertising, cross-site tracking, or third-party analytics cookies. If we add privacy-conscious analytics in the future to understand basic site usage, this policy will be updated first to describe what's collected and how to opt out.

Third-Party Links

This site may link to third-party resources, including our own products (Fleet Shield, Spectrum Sentry) hosted on separate domains. We aren't responsible for the privacy practices of external sites, and we encourage you to review their policies separately.

Data Security

The Contact/Careers form Worker validates and sanitises submitted fields (length limits, control-character stripping) before constructing an email from them, and rejects same-origin-check failures and known spam patterns before processing. That said, no method of transmission or storage is completely secure, and we can't guarantee absolute security. See our Security and Procurement page for more on our general approach, including that JEGASEC does not currently hold formal security certifications.

Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect the most recent revision.

Contact Us

If you have questions about this policy or how your information is handled, contact us at hello@jegasec.com.