Privacy Policy

Effective Date: 1st March 2025 | Last Updated: 15th February 2025

1 Introduction and Commitment

kyrenolavus respects your privacy and is committed to protecting your personal information. This privacy policy explains how we collect, use, store, and safeguard your data when you interact with our budget variance analysis platform and related services.

We understand that trust is earned through transparency. That's why we've structured this policy to give you clear, actionable information about your data rights under Australian Privacy Principles (APPs) and the Privacy Act 1988 (Commonwealth).

By accessing our services at kyrenolavus.com, you acknowledge that you've read and understood this privacy policy. We encourage you to review this document periodically as we may update it to reflect changes in our practices or legal requirements.

2 Information We Collect

We collect information through various touchpoints during your interaction with our platform. This collection is purposeful and directly related to providing you with effective budget variance analysis services.

Data Category Examples Collection Method
Account Information Name, email, phone number, business details Direct registration and profile setup
Financial Data Budget figures, variance reports, financial projections User uploads and platform integrations
Usage Analytics Feature usage, session duration, click patterns Automated tracking systems
Communication Records Support tickets, feedback, consultation notes Customer service interactions
Device Information IP address, browser type, operating system Automatic collection via web technologies

We don't collect sensitive information like credit card details directly — payment processing is handled by certified third-party providers who maintain their own strict security standards.

3 How We Use Your Information

Your data serves specific purposes that directly benefit your experience with our budget variance analysis platform. We operate under the principle of data minimization — using only what's necessary for legitimate business purposes.

  • Delivering personalized budget variance analysis and reporting tailored to your business needs
  • Maintaining platform security and detecting unusual activity or potential security threats
  • Improving our analytical algorithms and developing new features based on usage patterns
  • Providing customer support and responding to your inquiries or technical issues
  • Sending service updates, maintenance notifications, and important policy changes
  • Conducting research to better understand financial analysis trends and user preferences
  • Complying with legal obligations and regulatory requirements in Australia
Marketing Communications: We only send promotional emails to users who have explicitly opted in. You can withdraw consent at any time using the unsubscribe link in our emails or by contacting our support team directly.

4 Data Sharing and Third Parties

We maintain strict control over your data and limit sharing to essential service providers who help us deliver our platform effectively. Every third-party relationship is governed by comprehensive data processing agreements.

Service Providers We Work With:

  • Cloud infrastructure providers for secure data storage and platform hosting
  • Payment processors for handling subscription billing and transaction security
  • Email service providers for sending notifications and communications
  • Analytics tools that help us understand platform performance and user experience
  • Customer support platforms that enable efficient issue resolution

We never sell your personal information to third parties. Data sharing occurs only when required by law, such as responding to valid legal processes or protecting against fraud and security threats.

If kyrenolavus undergoes a business transition like a merger or acquisition, we'll notify affected users at least 30 days before any ownership change affects your personal data handling.

5 Your Privacy Rights Under Australian Law

As an Australian-based company, we're committed to upholding your rights under the Privacy Act 1988. Here's what you can do regarding your personal information:

Access Your Data

Request a copy of all personal information we hold about you. We'll provide this within 30 days in a commonly used electronic format.

Correct Information

Ask us to fix any inaccurate or incomplete personal data. We'll update our records and notify relevant third parties when necessary.

Delete Your Account

Request complete deletion of your account and associated data. Some information may be retained for legal compliance purposes.

Restrict Processing

Limit how we use your data while we investigate concerns about accuracy or our processing activities.

Data Portability

Receive your data in a structured format that you can transfer to another service provider if you choose to leave our platform.

Lodge Complaints

Contact the Office of the Australian Information Commissioner (OAIC) if you're unsatisfied with how we handle your privacy concerns.

To exercise these rights, send a detailed request to our privacy team. We'll verify your identity and respond within the timeframes required by Australian privacy legislation.

6 Data Security and Protection Measures

Protecting your financial data is our highest priority. We implement multiple layers of security controls designed to prevent unauthorized access, data breaches, and information misuse.

Technical Safeguards:

  • 256-bit SSL encryption for all data transmission between your device and our servers
  • Advanced firewall systems and intrusion detection monitoring 24/7
  • Regular security audits conducted by independent cybersecurity professionals
  • Automated backup systems with encrypted storage across geographically distributed locations
  • Multi-factor authentication requirements for administrative access

Organizational Measures:

  • Strict employee background checks and confidentiality agreements
  • Role-based access controls ensuring staff only access data necessary for their responsibilities
  • Regular privacy and security training for all team members
  • Incident response procedures with clear escalation paths
  • Annual third-party security assessments and penetration testing
Breach Notification: In the unlikely event of a data breach affecting your personal information, we'll notify you within 72 hours of discovery and provide clear information about what happened and what steps we're taking to address the situation.

7 Data Retention and Deletion

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by Australian law. Our retention periods are based on the nature of the data and how it's used.

Data Type Retention Period Reason
Account Information Duration of active account + 2 years Service provision and dispute resolution
Financial Analysis Data 7 years after account closure Australian Corporations Act compliance
Communications Records 3 years Customer service quality and legal protection
Marketing Preferences Until consent withdrawn + 1 year Consent management and compliance tracking
Usage Analytics 2 years Platform improvement and performance optimization

When retention periods expire, we securely delete or anonymize your data using industry-standard methods. Some aggregated, non-identifiable data may be retained indefinitely for statistical analysis and platform improvement purposes.

8 International Data Transfers

While our primary operations are based in Australia, some of our service providers operate internationally. When your data is transferred outside Australia, we ensure adequate protection through approved transfer mechanisms.

We only use service providers in countries with adequate privacy protections as recognized by the OAIC, or we implement additional contractual safeguards such as Standard Contractual Clauses or binding corporate rules.

Currently, your data may be processed in:

  • New Zealand (adequate privacy protection jurisdiction)
  • United States (specific vendors with Privacy Shield or equivalent protections)
  • European Union member countries (GDPR compliance ensures adequate protection)

You have the right to obtain information about these transfers and request that your data remains within Australia where technically feasible, though this may limit some platform features.

9 Cookies and Tracking Technologies

Our platform uses cookies and similar tracking technologies to enhance your user experience and provide personalized service. We believe in giving you control over these technologies.

Types of Cookies We Use:

  • Essential Cookies: Required for basic platform functionality and security features
  • Performance Cookies: Help us understand how you interact with our platform to improve user experience
  • Preference Cookies: Remember your settings and customization choices
  • Analytics Cookies: Provide insights into usage patterns and feature effectiveness

You can manage cookie preferences through your browser settings or our cookie preference center. Disabling certain cookies may impact platform functionality, but we'll clearly communicate any limitations.

We don't use third-party advertising cookies or participate in cross-site tracking networks. Our analytics are focused solely on improving our own platform and services.

Privacy Questions or Concerns?

Privacy Officer: kyrenolavus Privacy Team

Address: 1080B High Street, Armadale VIC 3143 Australia

Phone: +61417900545

Email: privacy@kyrenolavus.com

We're committed to addressing your privacy concerns promptly and thoroughly. Most inquiries receive a response within 48 hours.

10 Policy Updates and Changes

We review and update this privacy policy annually or when significant changes occur to our data processing activities. Material changes will be communicated through multiple channels to ensure you stay informed.

How We Notify You of Changes:

  • Email notification to all active users at least 30 days before changes take effect
  • Prominent notice on our platform homepage and within your account dashboard
  • In-app notifications highlighting key changes when you next log in
  • Updated version date and changelog available on this privacy policy page

Continued use of our platform after the effective date of updates indicates your acceptance of the revised privacy policy. If you disagree with changes, you can close your account and request data deletion at any time.

For significant changes that materially affect your rights, we may require explicit consent before implementing new practices.