What Information We Collect

Look, we only collect what we actually need to provide you with useful financial insights. Nothing more, nothing less. Here's what that includes:

Personal Information

• Contact details: Your name, email address, phone number, and business address when you reach out to us or sign up for our services.
• Business information: Company name, ABN, industry sector, and the type of financial data you're working with.
• Financial data you share: The specific datasets, reports, or financial information you upload for interpretation and analysis.
• Payment information: Billing details and transaction history when you purchase our services (processed securely through third-party payment providers).

Technical Information

• Usage data: How you interact with our platform, which features you use most, and where you might be getting stuck.
• Device information: Your IP address, browser type, operating system, and device identifiers.
• Cookies and similar tech: We use cookies to keep you logged in and remember your preferences. More on that below.

How We Use Your Information

We're not in the business of selling your data or bombarding you with irrelevant marketing. Here's what we actually do with your information:

Who We Share Your Information With

We keep your information close to the chest, but sometimes we need to work with trusted partners. Here's the complete picture:

• Service providers: Cloud hosting platforms, payment processors, and email service providers who help us run our business. They're contractually bound to protect your data.
• Professional advisors: Our accountants, lawyers, and auditors when necessary for business operations.
• Legal requirements: Government authorities or law enforcement if we're legally required to do so under Australian law.
• Business transfers: If xaliomeoxent is acquired or merges with another company, your information may be transferred (but the same protections apply).

We don't sell your data to third parties. Period. And we don't share your financial information with marketing companies or data brokers.

Your Rights Under Australian Law

The Australian Privacy Principles give you specific rights over your personal information. Here's what you can do:

Access Your Information

You can request a copy of the personal information we hold about you. We'll provide this within 30 days of your request, free of charge in most cases. If there's a fee involved (for particularly complex requests), we'll let you know upfront.

Correct Your Information

Found something that's not quite right? You can ask us to correct inaccurate or outdated information. We'll update our records within 30 days and notify anyone we've shared that information with (if applicable).

Delete Your Information

You can request deletion of your personal information, though there are some exceptions. We might need to keep certain records for legal or accounting purposes, typically for seven years under Australian tax law.

Object to Processing

You can object to how we're using your information in specific situations. We'll review your request and respond within 30 days.

How We Protect Your Data

Security isn't something we take lightly, especially when dealing with financial information. Here's what we do to keep your data safe:

• Encryption: All data transmitted between you and our servers uses TLS 1.3 encryption. Financial data at rest is encrypted using AES-256 standards.
• Access controls: Only team members who genuinely need access to perform their jobs can view your information. We use role-based access and multi-factor authentication.
• Regular audits: We conduct security reviews quarterly and engage third-party experts for annual penetration testing.
• Secure infrastructure: Our servers are hosted in Australian data centers that meet ISO 27001 standards.
• Staff training: Everyone on our team receives regular privacy and security training.

Despite our best efforts, no system is 100% secure. If we experience a data breach that's likely to result in serious harm, we'll notify you and the Office of the Australian Information Commissioner as required by law.

Data Retention

We don't hang onto your information forever. Here's how long we keep different types of data:

• Active account data: Maintained while your account is active and for 90 days after closure (unless you request earlier deletion).
• Financial records: Seven years from the end of the relevant financial year, as required by Australian tax law.
• Communication records: Three years for support inquiries and correspondence.
• Marketing data: Until you unsubscribe or request deletion.
• Usage analytics: Aggregated and anonymized data may be retained indefinitely for platform improvement.

When we delete your data, it's gone for good. We use secure deletion methods that make recovery impossible.

Cookies and Tracking

We use cookies to make our platform work properly and to understand how people use it. You can control cookie settings through your browser, though some features might not work if you disable certain cookies.

Types of Cookies We Use

• Essential cookies: Required for the platform to function. These handle login sessions and security features.
• Functional cookies: Remember your preferences and settings.
• Analytics cookies: Help us understand usage patterns and improve the service.

We don't use advertising cookies or allow third-party advertising networks to track you through our platform.

International Data Transfers

Your data is primarily stored within Australia. However, some of our service providers have infrastructure in other countries. When we transfer data internationally, we ensure:

• The receiving country has substantially similar privacy protections to Australia, or
• We have contractual agreements in place that require equivalent data protection standards

Currently, we may transfer data to providers in the United States and Europe, all of whom have certified their compliance with appropriate privacy frameworks.

Changes to This Policy

We review and update this privacy policy at least annually, or whenever there are significant changes to how we handle data. When we make material changes, we'll:

• Email active users with a summary of the changes
• Update the "Last Updated" date at the top of this policy
• Give you 30 days' notice before significant changes take effect

Your continued use of our services after changes take effect means you accept the updated policy. If you disagree with changes, you can close your account.

Complaints and Disputes

If you're not happy with how we've handled your personal information, here's what you can do:

1. Contact us directly at info@xaliomeoxent.com. We'll investigate and respond within 30 days.
2. If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or call 1300 363 992.

We take complaints seriously and will work with you to resolve any concerns about privacy and data handling.