Information We Collect

Running a business finance platform means we need certain information to serve you properly. Here's what we collect and why it matters for your experience.

Information You Provide Directly

When you sign up or use our services, you share information with us voluntarily. This includes:

• Your name, email address, and phone number when creating an account
• Business details including ABN, business name, and trading structure
• Financial information you input for tracking expenses and income
• Payment details when you subscribe to our services
• Communications you send us through support channels or feedback forms

Information Collected Automatically

Like most online services, we gather some data automatically to improve functionality and security:

• Device information including IP address, browser type, and operating system
• Usage patterns showing which features you access and how often
• Log data recording your interactions with our platform
• Cookie data that helps us remember your preferences

How We Use Your Information

Every piece of data we collect serves a specific purpose. We don't collect information just to have it sitting around.

Data Sharing and Disclosure

We're not in the business of selling your information. When we do share data, it's only in specific circumstances that benefit you or fulfill legal requirements.

Service Providers

We work with trusted third-party providers who help us deliver our services. These include payment processors, cloud hosting providers, and email service platforms. They can only use your data for the specific tasks we assign them, and they're contractually bound to protect it.

Legal Requirements

Sometimes Australian law requires us to share information with government agencies. This happens when we receive valid legal requests from the Australian Taxation Office, regulatory bodies, or law enforcement agencies with proper authorization.

Business Transfers

If oraventhis is involved in a merger, acquisition, or sale of assets, your information might be transferred. You'll receive notice before this happens, and the new entity will be bound by this privacy policy.

Data Storage and Security

Protecting your financial information isn't just a priority—it's foundational to everything we do.

Where We Store Data

Your data is stored on secure servers located in Australia, operated by certified cloud infrastructure providers. This ensures compliance with Australian privacy laws and keeps your information within local jurisdiction.

Security Measures

• Industry-standard encryption for data transmission and storage
• Regular security audits and vulnerability assessments
• Multi-factor authentication options for account access
• Restricted employee access to personal information based on role requirements
• Automated backup systems with encrypted storage
• Continuous monitoring for suspicious activity or unauthorized access attempts

Despite our best efforts, no online service can guarantee absolute security. We recommend using strong passwords and enabling two-factor authentication on your account.

Your Rights Under Australian Privacy Law

The Australian Privacy Principles give you significant control over your personal information. Here's what that means in practice.

Access and Correction

You can request access to the personal information we hold about you at any time. If something's incorrect or outdated, you have the right to ask us to fix it. We'll respond to these requests within 30 days.

Data Portability

Want to take your data elsewhere? You can request a copy of your information in a commonly used format. This includes your financial records, transaction history, and account details.

Deletion Requests

You can ask us to delete your personal information, though we might need to keep some records for legal or regulatory reasons. For example, Australian tax law requires us to retain certain financial records for seven years.

Marketing Communications

You can opt out of marketing emails at any time using the unsubscribe link. We'll still send you essential service-related communications like security alerts or billing notifications.

Data Retention

We don't keep your information forever. Here's our approach to retention:

• Active account data: Retained while your account remains active and for 90 days after closure
• Financial records: Kept for seven years to comply with Australian Taxation Office requirements
• Communication logs: Maintained for three years for customer service quality purposes
• Marketing data: Removed immediately upon unsubscribe request
• Technical logs: Automatically deleted after 12 months unless needed for security investigations

When we no longer need information, we securely delete it or anonymize it so it can't be traced back to you.

Cookies and Tracking

We use cookies to make our platform work properly and to understand how people use it. Most are essential for basic functionality.

Types of Cookies We Use

• Essential cookies that keep you logged in and remember your settings
• Performance cookies that help us identify and fix technical issues
• Analytics cookies that show us which features get used most often

You can control cookie settings through your browser, but disabling certain cookies might affect how the platform functions.

Third-Party Services

Our platform integrates with several third-party services to provide better functionality. Each has its own privacy policy:

• Payment processors handle transactions securely and maintain PCI DSS compliance
• Cloud infrastructure providers store and process data according to ISO 27001 standards
• Email service providers manage communication delivery with their own security protocols

We carefully vet these partners, but we're not responsible for their privacy practices. We recommend reviewing their policies independently.

Changes to This Policy

Privacy regulations evolve, and so does our service. When we update this policy, we'll post the new version here and update the "Last Updated" date at the top.

For significant changes that affect how we handle your data, we'll send you an email notification at least 30 days before the changes take effect. Continuing to use oraventhis after that period means you accept the updated policy.

Children's Privacy

oraventhis is designed for business owners and isn't intended for anyone under 18. We don't knowingly collect information from children. If we discover we've accidentally gathered data from someone underage, we'll delete it immediately.

Privacy Complaints

If you believe we've mishandled your personal information, you can lodge a complaint with us directly. We'll investigate and respond within 30 days.

If you're not satisfied with our response, you have the right to contact the Office of the Australian Information Commissioner (OAIC). They're the independent authority that oversees privacy law compliance in Australia.