Privacy Policy

Information We Collect

We collect different types of information depending on how you interact with our platform. Some of this you provide directly, while other data gets collected automatically as you use our services.

Personal Information You Provide

• Your name, email address, and phone number when you create an account or contact us
• Business details including company name, Australian Business Number (ABN), and industry classification
• Financial data you upload for reporting purposes, including profit and loss statements, balance sheets, and cash flow records
• Payment information when you subscribe to our services, though we don't store complete credit card details
• Communication preferences and feedback you share with our support team

Information Collected Automatically

Our systems automatically gather certain technical information to help us improve your experience and maintain security. This includes your IP address, browser type, device information, and how you navigate through our platform. We also track which features you use most and where you might be running into problems.

How We Use Your Information

Everything we collect serves a specific purpose. We don't gather data just for the sake of it, and we're pretty careful about how we apply the information you trust us with.

We base our data processing on several legal grounds recognized under Australian privacy law. Sometimes it's necessary to fulfill our contract with you. Other times we have legitimate business interests that don't override your privacy rights. And in certain cases, particularly around marketing communications, we rely on your explicit consent.

Sharing and Disclosure

We don't sell your personal information. Never have, never will. But we do share data with specific third parties who help us run our business.

Service Providers

Companies that handle our payment processing, cloud hosting, email delivery, and customer support tools receive certain information. These providers operate under strict contractual obligations and can only use your data for the specific services they provide to us.

Professional Advisers

Our accountants, lawyers, and business consultants occasionally need access to user data as part of their work for lorenyxava. They're bound by professional confidentiality requirements.

Legal Requirements

If Australian law enforcement or regulatory bodies issue valid legal requests, we'll provide the information they're entitled to receive. We also reserve the right to disclose data when we believe it's necessary to protect our rights or prevent harm.

Data Storage and Security

Your financial data lives on secure servers located in Australia, operated by reputable cloud service providers. We've chosen Australian-based hosting specifically to keep your information within the country's jurisdiction and legal framework.

Security Measures

• Industry-standard encryption for data transmission and storage
• Regular security audits and penetration testing by independent firms
• Multi-factor authentication options for all user accounts
• Strict access controls limiting which team members can view your data
• Automated backup systems with secure off-site storage
• Employee training on data protection and privacy best practices

No system is completely bulletproof. We can't guarantee absolute security, but we've built multiple layers of protection and monitor our systems constantly for potential threats. If we detect a breach that affects your personal information, we'll notify you promptly and explain what happened.

Your Privacy Rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have several rights regarding your personal information. Here's what you can do and how to exercise these rights.

Access and Correction

You can request a copy of the personal information we hold about you at any time. If you spot something that's inaccurate or out of date, let us know and we'll fix it. Most of your information is directly accessible through your account dashboard, where you can update details yourself.

Data Portability

Want to take your financial data elsewhere? We'll provide it in a commonly used, machine-readable format. This includes all the reports and information you've uploaded to our platform.

Deletion Requests

You can ask us to delete your personal information, and we'll comply unless we have legal obligations to retain certain records. Financial data often falls under regulatory retention requirements, so there might be some information we need to keep for specified periods even after you close your account.

Marketing Communications

Every marketing email includes an unsubscribe link at the bottom. Click it and you're off the list immediately. You can also manage your communication preferences through your account settings or by contacting our support team directly.

Data Retention

We keep your information for as long as your account remains active, plus whatever period Australian financial regulations require. Different types of data have different retention schedules.

Account details and contact information typically stay in our systems for seven years after you close your account. This aligns with standard business record retention practices and tax requirements. Financial reports and transactional data follow similar timelines due to regulatory obligations around financial record keeping.

Communication logs and support interactions are usually retained for three years. Technical data like IP addresses and usage logs get deleted much sooner, often within twelve months unless needed for security investigations.

International Data Transfers

While we primarily store data in Australia, some of our service providers operate globally. This means certain information might be processed or stored in other countries. When this happens, we ensure appropriate safeguards are in place through contractual protections and compliance with cross-border data transfer requirements.

Any international transfer involves providers who maintain privacy standards comparable to Australian requirements. We assess each provider's practices before engaging their services and monitor compliance on an ongoing basis.

Children's Privacy

Our platform is designed for business use and financial reporting. We don't knowingly collect information from individuals under 18 years of age. If you believe we've accidentally gathered data from a minor, contact us immediately and we'll delete it.

Changes to This Policy

We review and update this privacy policy periodically to reflect changes in our practices, legal requirements, or platform features. When we make significant changes, we'll notify you through email and display a prominent notice on our website.

The "Last Updated" date at the top of this document shows when the most recent changes took effect. We encourage you to review this policy occasionally to stay informed about how we're protecting your information.

Continuing to use our platform after we post changes means you accept the updated policy. If you disagree with modifications, you can close your account, though some information might be retained as described in our retention section.

Complaints and Disputes

If you're unhappy with how we've handled your personal information, we want to know. Start by contacting our privacy team directly. We take complaints seriously and investigate each one thoroughly.

Should you feel we haven't adequately addressed your concerns, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC). They're the independent authority overseeing privacy compliance in Australia.