Information We Collect

When you use our cost management services, we gather different types of information to help you track and manage your finances better.

Information You Give Us Directly

Most of what we collect comes from you filling out forms, connecting accounts, or using our features. You're in control of how much you share.

Information We Collect Automatically

Some data gets collected just by you using the service – like when you access the platform or which pages you visit. We use cookies and similar technologies for this. You can adjust your browser settings if you'd rather not have cookies, though some features might not work as smoothly.

How We Use Your Information

We're not in the business of selling your data. Here's what we actually do with the information we collect:

• Provide our cost management services and maintain your account
• Process transactions and send you important notifications about your finances
• Analyze spending patterns to give you useful insights and recommendations
• Improve our platform based on how people actually use it
• Detect and prevent fraud or unauthorized account access
• Respond to your support requests and answer questions
• Send service updates, though you can opt out of marketing communications
• Comply with legal requirements and protect our legitimate business interests

Sharing and Disclosure

We keep your information pretty close. But there are specific situations where we share it:

Service Providers

We work with companies that help us run the platform – cloud hosting providers, payment processors, customer support tools. They only get access to what they need to do their job, and they're contractually obligated to protect your data.

Financial Institutions

When you connect your bank accounts, we work with secure financial data aggregators. These connections use bank-level encryption and you can disconnect them anytime from your account settings.

Legal Requirements

Sometimes we're legally required to share information – court orders, government requests, or situations where we need to protect someone's safety. We'll always verify the legitimacy of such requests.

Business Transfers

If fynalithe gets acquired or merges with another company, your information would transfer as part of that transaction. You'd be notified beforehand, and the same privacy protections would continue to apply.

Your Rights and Choices

Australian privacy law gives you specific rights over your personal information. Here's what you can do:

To exercise any of these rights, email us at support@fynalithe.com or send a written request to our Hobart office. We'll verify your identity and respond within the timeframes required by Australian law.

Data Security

Protecting your financial information is something we take seriously. Here's what we do:

• Industry-standard encryption for data in transit and at rest
• Secure Australian-based servers with regular security audits
• Multi-factor authentication available for all accounts
• Regular employee training on data protection practices
• Automated monitoring for suspicious activity or unauthorized access attempts
• Strict access controls – only authorized personnel can access customer data, and only when necessary

That said, no system is completely foolproof. We do our best to protect your information, but we can't guarantee absolute security. Use a strong password, enable two-factor authentication, and let us know immediately if you notice anything suspicious.

Data Retention

We don't keep your information longer than we need to. Here's our general approach:

After these periods, we either delete or anonymize your data so it can't be traced back to you. Some aggregated, non-personal data might be retained for analytical purposes.

International Data Transfers

Your data is primarily stored on Australian servers. Occasionally, some service providers we use might have servers overseas. When that happens, we ensure:

• The receiving country has adequate privacy protections
• Contractual safeguards are in place requiring the same level of protection
• Data is encrypted during transfer
• You're informed if significant overseas processing occurs

We prefer keeping data in Australia where possible, but modern cloud infrastructure sometimes means data passes through international networks. Rest assured it's always protected.

Children's Privacy

Our services aren't designed for anyone under 18. We don't knowingly collect information from children. If you're a parent and believe your child has given us information, contact us and we'll delete it promptly.

Changes to This Policy

We update this policy occasionally as our services evolve or laws change. When we make significant changes, we'll notify you by email or through a prominent notice on the platform.

The "Effective Date" at the top tells you when this version came into effect. Previous versions are archived and available on request if you want to see what changed.

Australian Privacy Commissioner

If you have concerns about how we handle your information and our responses don't satisfy you, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Visit their website at oaic.gov.au or call 1300 363 992. But please contact us first – we'd like the chance to address your concerns directly.