Privacy Policy

Information We Collect

We collect information that helps us provide better cash flow budgeting services and support. This includes details you share directly with us and information gathered through your use of our platform.

Personal Information You Provide

• Contact details including name, email address, phone number, and postal address
• Business information such as company name, industry type, and business size
• Financial data you input for budgeting analysis and cash flow planning
• Payment information processed through our secure payment partners
• Communication records including emails, chat messages, and support tickets
• Account preferences and customisation settings

Information Collected Automatically

When you use our services, we automatically collect certain technical information to improve your experience and ensure platform security.

• Device information including IP address, browser type, and operating system
• Usage data such as page views, session duration, and feature interactions
• Location data based on IP address for service personalisation
• Cookies and similar tracking technologies for functionality and analytics

How We Use Your Information

Your information helps us deliver personalised cash flow budgeting services and maintain a secure platform. We're committed to using your data responsibly and only for legitimate business purposes.

Information Sharing and Disclosure

We maintain strict control over your personal information. Sharing occurs only in specific circumstances that support our service delivery or comply with legal requirements.

Service Providers and Partners

We work with trusted third-party providers who help us deliver our services. These partners have access only to information necessary for their specific functions.

• Payment processors for secure transaction handling
• Cloud hosting providers for data storage and platform infrastructure
• Analytics services for platform improvement and user experience enhancement
• Customer support tools for efficient communication management
• Security services for fraud detection and platform protection

Legal and Regulatory Requirements

We may disclose your information when required by Australian law or to protect our rights and the safety of our users. This includes compliance with court orders, regulatory investigations, or legitimate law enforcement requests.

Business Transfers

In the event of a merger, acquisition, or sale of business assets, your information may be transferred as part of that transaction. We'll notify you of any such change and explain your options regarding your data.

Data Security and Protection

Protecting your information is fundamental to our operations. We implement comprehensive security measures designed to safeguard your data against unauthorised access, alteration, or disclosure.

Technical Safeguards

• End-to-end encryption for all data transmission and storage
• Multi-factor authentication for account access and administration
• Regular security audits and vulnerability assessments
• Secure data centres with 24/7 monitoring and physical security
• Automated backup systems with encrypted storage
• Network security protocols including firewalls and intrusion detection

Operational Security

Our team follows strict security protocols to ensure your information remains protected. Staff access to personal data is limited based on job requirements, and all employees undergo regular privacy and security training.

Your Privacy Rights

Under Australian Privacy Principles and applicable privacy laws, you have specific rights regarding your personal information. We respect these rights and provide clear processes for exercising them.

Access and Correction

You can request access to your personal information and ask us to correct any inaccuracies. We'll respond to your request within 30 days and provide the information in a commonly used format.

Data Portability

You have the right to receive your personal data in a structured, machine-readable format. This makes it easier for you to transfer your information to another service provider if you choose.

Deletion and Restriction

You can request deletion of your personal information or restriction of its processing in certain circumstances. We'll honour these requests while considering our legitimate business needs and legal obligations.

• Request a copy of all personal information we hold about you
• Correct inaccurate or incomplete personal information
• Delete your personal information when no longer needed
• Restrict processing of your information in specific circumstances
• Object to processing based on legitimate interests
• Withdraw consent for optional data processing activities

How to Exercise Your Rights

To make a privacy request, contact our privacy team using the details provided below. We'll verify your identity to protect your information and respond to valid requests promptly.

Data Retention and Storage

We retain your personal information only for as long as necessary to provide our services and comply with legal obligations. Our retention periods are based on the type of information and its purpose.

Data Deletion Process

When retention periods expire or you request deletion, we securely delete your information from our systems. This includes backups and archived copies, though some anonymised data may be retained for statistical purposes.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, remember your preferences, and understand how you interact with our platform. You have control over these technologies.

Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality and security
• Performance Cookies: Help us understand how you use our service to improve it
• Functional Cookies: Remember your preferences and customisation settings
• Analytics Cookies: Provide insights into user behaviour and platform performance

Managing Cookie Preferences

You can control cookies through your browser settings or our cookie preference centre. Disabling certain cookies may affect platform functionality, but essential cookies remain necessary for basic operations.

International Data Transfers

While our primary operations are based in Australia, some of our service providers may process your information in other countries. We ensure appropriate safeguards are in place for any international transfers.

Transfer Safeguards

When transferring personal information internationally, we use approved mechanisms such as adequacy decisions, standard contractual clauses, or certification schemes to ensure your data receives equivalent protection.

Countries and Regions

Your information may be processed in countries including the United States, Canada, and European Union member states by our trusted service providers for cloud hosting, analytics, and customer support services.

Children's Privacy

Our services are designed for business users and are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

If we become aware that we have inadvertently collected information from a child under 18, we will take immediate steps to delete that information from our systems and terminate any associated account.

Parents or guardians who believe their child has provided personal information to us should contact our privacy team immediately using the contact details provided below.

Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, services, or legal requirements. We'll notify you of significant changes and give you time to review the updated policy.

Notification Process

• Email notification for material changes affecting your rights
• Platform notifications for general policy updates
• 30-day advance notice for changes requiring your consent
• Updated effective date clearly displayed at the top of this policy

Continued use of our services after policy changes indicates your acceptance of the updated terms. If you disagree with changes, you may close your account and request deletion of your information.