Privacy Policy

Braza Consulting Pty Ltd ABN 35 662 678 408 ("we", "us", "our") operates the Freemasons One platform at freemasons.one and app.freemasons.one. This Privacy Policy explains how we collect, use, disclose, store and protect personal information in accordance with applicable privacy law. For Lodges registered in Australia, this includes the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Lodges in other jurisdictions are subject to the privacy laws applicable in their country, and jurisdiction-specific addenda to this policy will apply where required.

By registering a Lodge or using the platform you acknowledge that you have read and understood this policy.

We collect personal information that is necessary to provide the platform. This includes:

We use the information we collect to:

• Create and manage Lodge workspaces and user accounts
• Provide and improve the platform's features and services
• Authenticate users and maintain platform security
• Process subscription payments and manage billing
• Send service communications (account confirmations, invoices, security notices)
• Respond to support requests
• Comply with legal and regulatory obligations

We do not use Lodge member data for marketing, profiling or any purpose beyond the provision of the platform services.

Each Lodge operates as a fully isolated workspace (tenant). Lodge data — including member records, minutes, correspondence, financial records and attendance — is logically separated and cannot be accessed by other Lodges.

Platform staff and administrators do not have default access to a Lodge's financial records or confidential minutes. Any access to Lodge data by platform staff is limited to what is strictly necessary to resolve a support request, and is subject to audit logging.

One directory deliberately reaches beyond your Lodge. So that brethren can introduce themselves across Lodges, Brotherhood Chat lets any member search other members in the same country by name. That search returns a member's name, Masonic rank, profile photo and the name and number of their Lodge — and nothing else. Email addresses, phone numbers, dates of birth and every other Lodge record stay inside the Lodge. Members can be reached only through the platform's own messaging.

We do not sell, rent or trade personal information. We may share information with:

• Cloud infrastructure providers — hosting, storage and database services used to operate the platform. Lodge data is stored in the cloud region allocated to your Lodge at registration, based on your Lodge's country.
• Stripe — payment processing. Stripe's privacy policy is available at stripe.com/au/privacy.
• Email delivery services — for sending transactional emails (account notices, invitations).
• Law enforcement or regulators — where required by law, court order or to protect the rights and safety of users.

All third-party providers are contractually required to handle personal information in accordance with applicable privacy law.

• Lodge data is stored in the cloud region allocated at registration, determined by your Lodge's country (e.g. Australian Lodges are hosted in Australia).
• Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Access to production systems is restricted to authorised personnel and requires multi-factor authentication.
• Audit logs capture sensitive actions (minutes approval, financial entries, permission changes).
• We conduct regular security reviews and apply patches promptly.

While we take all reasonable steps to protect personal information, no internet-based service can guarantee absolute security. We encourage Lodge administrators to use strong passwords and enable MFA.

We retain Lodge and member data for as long as the Lodge subscription is active, plus a 90-day grace period following cancellation to allow data export. After the grace period, Lodge data is permanently deleted.

Audit logs and billing records are retained for seven years for accounting and compliance purposes.

Under applicable privacy law (including the Australian Privacy Principles for Australian Lodges), you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or out-of-date information
• Request deletion of your personal information (subject to legal retention requirements)

To exercise these rights, contact us at privacy@freemasons.one. We will respond within 30 days.

Lodge members who wish to update or remove their profile information should contact their Lodge Administrator in the first instance, as Lodge-level data is managed by the Lodge.

The platform uses session cookies strictly necessary for authentication. We do not use third-party advertising cookies or behavioural tracking.

For aggregated, anonymous usage statistics we use Plausible Analytics, a privacy-focused service that is cookieless — it sets no cookies, collects no personal or identifying information, and does not track visitors across websites or over time. We use this data only to understand how the platform is used and to improve it.

The platform is designed for adult Masonic Lodge officers and members. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor's information has been submitted in error, please contact us immediately.

We may update this Privacy Policy from time to time. When we make material changes, we will notify Lodge Administrators by email and display a notice within the platform. Continued use after the effective date constitutes acceptance of the updated policy.

For privacy enquiries or to make a complaint, contact our Privacy Officer:

If you are an Australian Lodge and are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. Lodges in other jurisdictions may have recourse to their applicable local privacy regulator.