Privacy Policy

Information We Collect

We collect different types of information depending on how you interact with our platform. Most of it you give us directly, some we gather automatically as you use our services.

Personal Details You Provide

When you create an account or contact us, you'll share basic information like your name, email address, and phone number. If you're using our budget reporting tools, you might also provide financial data, bank account details, and transaction information. We only ask for what we actually need to deliver our services.

Usage Information

Like most online services, we automatically collect some technical information. This includes your IP address, browser type, device information, and how you interact with our platform. We use this to improve our services and fix problems when they arise.

How We Use Your Information

We're not in the business of selling your data. Everything we collect serves a specific purpose related to providing and improving our budget reporting services.

• Deliver the core services you signed up for, including budget analysis and financial reporting
• Send you important updates about your account, service changes, or security matters
• Improve our platform based on how people actually use it
• Prevent fraud and maintain the security of our systems
• Comply with Australian financial regulations and tax requirements
• Respond to your support requests and general inquiries

Sharing and Disclosure

We keep your information within our organization. However, there are some limited situations where we need to share data with others.

Service Providers

We work with trusted third-party companies that help us run our platform. This includes cloud hosting providers, payment processors, and email services. These companies can only use your information to perform specific tasks on our behalf, and they're contractually required to protect it.

Legal Requirements

Sometimes Australian law requires us to disclose information. This might happen if we receive a valid court order, subpoena, or request from law enforcement. We'll always verify the legitimacy of such requests and only share what's legally required.

Business Transfers

If krenovastia is acquired or merges with another company, your information would transfer to the new entity. We'd notify you before this happens and explain any changes to how your data is handled.

Your Rights and Choices

Under Australian privacy law, you have significant control over your personal information. Here's what you can do and how to do it.

To exercise any of these rights, send us an email at help@krenovastia.com with your request. We'll verify your identity and respond within the timeframes required by Australian law.

Data Security

Protecting your financial information is our top priority. We use industry-standard security measures, though no system can be 100% secure.

Technical Safeguards

All data transmission happens over encrypted connections using TLS 1.3 protocol. Your financial information is encrypted at rest using AES-256 encryption. We maintain regular security audits and penetration testing to identify potential vulnerabilities.

Access Controls

Only authorized krenovastia employees can access user data, and only when necessary for their job functions. We maintain detailed access logs and use multi-factor authentication for all internal systems.

Data Storage

Your information is stored on secure servers located in Australia. We use reputable cloud infrastructure providers who maintain their own rigorous security standards and comply with Australian data protection requirements.

Data Retention

We don't keep your information longer than necessary. Different types of data have different retention requirements, mostly driven by Australian financial regulations.

Financial records and budget data are retained for seven years after account closure to comply with Australian Taxation Office requirements. This includes transaction histories, budget reports, and related financial documentation.

Account information and communication records are typically kept for three years after your last interaction with us. Usage logs and technical data are deleted after twelve months unless needed for security investigations.

When data reaches the end of its retention period, we securely delete it from our systems. This includes removing backups and archived copies.

Cookies and Tracking

Our website uses cookies and similar technologies. Most are essential for the platform to function, while others help us understand how people use our services.

Essential Cookies

These are necessary for our platform to work. They handle things like keeping you logged in, remembering your preferences, and maintaining security. You can't disable these without making the service unusable.

Analytics Cookies

We use these to understand how people interact with our platform. This helps us identify confusing features and improve the overall experience. You can opt out of analytics tracking through your account settings.

We don't use advertising cookies or share cookie data with advertising networks. Your browsing behavior on our platform stays private.

Children's Privacy

Our services aren't designed for children under 18. We don't knowingly collect information from minors. If you're a parent and believe your child has provided us with personal information, contact us immediately and we'll delete it.

Changes to This Policy

We occasionally update this privacy policy to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email and display a notice on our platform.

The updated policy becomes effective 30 days after we notify you. If you continue using our services after that period, you're accepting the new terms. You can always review the current version of this policy on our website.

Complaints and Disputes

If you're concerned about how we've handled your personal information, please contact us first. We'll investigate and respond within 30 days.

If you're not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner. You can reach them at 1300 363 992 or through their website at oaic.gov.au.