Privacy Policy

Information We Collect

When you engage with our budget reporting services, we collect several types of information to provide you with personalised financial insights and maintain secure account management.

• Personal Identification Data: Your full name, email address, phone number, and postal address for account creation and communication purposes
• Financial Information: Bank account details, transaction histories, income sources, and expense categories that you choose to connect through our secure integration systems
• Technical Data: IP addresses, browser types, device information, and usage patterns to optimise our platform performance and security
• Communication Records: Support conversations, feedback submissions, and any correspondence you initiate with our team
• Preference Settings: Your customised dashboard configurations, reporting preferences, and notification settings

How We Use Your Information

Your data serves specific purposes that directly benefit your experience with nytrelviso's budget reporting tools. We've designed our data usage practices around transparency and user control.

The information we collect helps us generate accurate budget reports, identify spending patterns, and provide personalised recommendations for financial optimisation. Additionally, we use your data to maintain account security, prevent fraudulent activities, and comply with Australian Privacy Principles under the Privacy Act 1988.

Data Sharing and Third Parties

We maintain strict control over your personal information and only share data when absolutely necessary for service delivery or legal compliance. Understanding exactly when and why we might share your information helps you make informed decisions about using our platform.

Our primary data sharing occurs with secure banking integration partners who facilitate the connection between your financial accounts and our reporting system. These partners operate under stringent security protocols and are bound by confidentiality agreements that match our own privacy standards.

• Bank integration services that enable secure account connectivity and transaction data retrieval
• Cloud hosting providers who maintain our infrastructure under enterprise-grade security arrangements
• Payment processors for subscription billing, who only receive necessary transaction information
• Legal authorities when required by Australian law or court orders
• Professional service providers like accountants or auditors, but only with your explicit consent

Your Rights and Control

Australian privacy law grants you significant control over your personal information. We've implemented straightforward processes to help you exercise these rights without unnecessary complexity or delays.

You can access your complete data profile through your account dashboard, where you'll find detailed records of all information we've collected and how it's being used. Our self-service tools allow you to modify most settings independently, though our support team is always available for more complex requests.

• Access Rights: View all personal data we hold about you, including raw transaction data and processed reports
• Correction Rights: Update or correct any inaccurate information in your profile or connected accounts
• Deletion Rights: Request complete removal of your account and associated data, with some exceptions for legal compliance
• Portability Rights: Download your data in standard formats for transfer to other financial management platforms
• Objection Rights: Opt out of specific data processing activities while maintaining your core account functionality
• Restriction Rights: Temporarily limit how we process your information during disputes or verification processes

Data Security and Protection

Financial data requires exceptional security measures, and we've invested heavily in both technological and procedural safeguards. Our security framework combines industry-standard encryption with Australian-specific compliance requirements.

All data transmission occurs over encrypted channels using TLS 1.3 protocols, while stored information is protected through AES-256 encryption at rest. We maintain redundant backups across geographically separated data centres within Australia, ensuring both security and compliance with data sovereignty requirements.

• Multi-factor authentication for all account access, with optional biometric verification
• Regular security assessments and penetration testing by certified ethical hackers
• Staff background checks and ongoing security training for all employees with data access
• Automated monitoring systems that detect and respond to potential security threats
• Secure development practices including code reviews and vulnerability scanning

Data Retention and Deletion

We retain your personal information only as long as necessary to provide our services or meet legal obligations. Our retention policies balance your privacy interests with practical needs for account management and regulatory compliance.

Active account data remains accessible while you maintain your subscription. After account closure, we retain essential records for seven years to comply with Australian taxation and financial regulations, but we delete detailed transaction histories and personal preferences within 90 days.

• Active transaction data: Retained throughout your subscription period plus 90 days
• Account information: Seven years after account closure for tax compliance
• Communication records: Three years for customer service quality and dispute resolution
• Technical logs: 12 months for security monitoring and platform optimisation
• Marketing preferences: Removed immediately upon unsubscribe or account deletion

International Data Transfers

While we prioritise keeping Australian customer data within Australia, some technical operations may involve international data transfers to ensure optimal service delivery and security.

Any international transfers comply with Australian Privacy Principles and include appropriate safeguards such as standard contractual clauses or adequacy decisions. We maintain detailed records of all cross-border data movements and can provide specific information upon request.

Changes to This Policy

We review and update this privacy policy annually or when significant changes occur in our data practices. Any modifications will be communicated through your registered email address and prominently displayed in your account dashboard.

Material changes that affect how we collect or use your personal information will require your active consent before implementation. We provide at least 30 days' notice for any policy changes that might impact your privacy rights.