We collect different types of information depending on how you interact with our platform. Some of it you provide directly. Other bits we gather automatically to make the service work properly.

We don't collect information we don't need. If something isn't listed here, we're probably not gathering it. And we never sell your personal data to third parties.

Everything we collect serves a specific purpose. Here's what we actually do with your data:

1. Deliver the core service features you signed up for, including budget analysis, trend forecasting, and reporting tools.
2. Send you service notifications about your account, important updates, or changes to our terms.
3. Provide customer support when you reach out with questions or technical issues.
4. Improve our platform by analyzing usage patterns and identifying areas where users get stuck.
5. Protect against fraud, unauthorized access, and other security threats.
6. Comply with legal obligations under Australian privacy law and financial regulations.

We process your information based on your consent, our contract with you, or legitimate business interests. You can withdraw consent at any time, though this might limit what features you can use.

Your data lives on secure servers located in Australia. We use industry-standard encryption both in transit and at rest.

Once retention periods expire, we securely delete your information. You can request early deletion of certain data types, though legal requirements might prevent us from deleting everything immediately.

We keep your information within our organization. But there are a few situations where we share data with others:

• Service providers who help us run the platform (cloud hosting, email delivery, payment processing). These partners are contractually required to protect your data and can't use it for their own purposes.
• Professional advisors like accountants and lawyers when we need their input on business or legal matters.
• Law enforcement or regulatory bodies when legally required, such as responding to valid court orders or investigating suspected fraud.
• Potential buyers if we ever sell the business, though we'd notify you beforehand and ensure they commit to this privacy policy.

We never share your financial data with marketing companies or advertising networks. Your budget information stays private.

The Privacy Act 1988 gives you specific rights over your personal information. Here's what you can do:

We respond to privacy requests within 30 days. Most requests are free, though we might charge a reasonable fee for complex or repeated requests that require significant effort.

We take data security seriously and implement multiple layers of protection:

• 256-bit SSL encryption for all data transmitted between your browser and our servers.
• Encrypted database storage using AES-256 encryption at rest.
• Multi-factor authentication options for account access.
• Regular security audits and vulnerability assessments by independent third parties.
• Strict access controls limiting employee access to only the data they need for their role.
• Automated backup systems with encrypted off-site storage.
• Incident response procedures to quickly address any potential breaches.

Despite our best efforts, no system is completely secure. If we detect a data breach that affects your information, we'll notify you within 72 hours and explain what happened and what steps we're taking.

Our platform uses cookies and similar technologies to function properly. Here's what we use and why:

You can manage cookie preferences in your account settings. Disabling non-essential cookies won't prevent you from using core features.

We integrate with a few carefully selected third-party services to deliver our platform:

• Payment processors to handle subscription billing securely.
• Cloud infrastructure providers for hosting and data storage.
• Email service providers for account notifications and support communications.
• Analytics platforms to understand usage patterns.

These providers have their own privacy policies. While we vet them carefully and require strong data protection standards, we encourage you to review their policies as well.

We don't integrate with social media platforms or advertising networks. Your budget data stays within our platform and doesn't get shared with external marketing systems.

Our service isn't designed for children under 18. We don't knowingly collect information from minors. If you're a parent or guardian and believe your child has provided us with personal information, contact us immediately and we'll delete it.

Your data is stored on servers in Australia. If we ever need to transfer information overseas, we'll ensure adequate protection through standard contractual clauses or other approved safeguards.

Currently, we don't transfer personal data outside Australia except in rare cases where you request support from an international team member or when required by law.

We update this policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email and display a prominent notice on the platform.

The "Last Updated" date at the top shows when we last modified this policy. We encourage you to review it periodically, especially before providing new types of information.

Continuing to use our service after policy updates means you accept the changes. If you disagree with modifications, you can close your account before they take effect.