Information We Collect

When you use calystronaveo's financial modeling platform, we collect information that helps us provide accurate scenario analysis and improve our services. We're transparent about what we gather and why we need it.

We only collect information that's necessary for providing our services or that you voluntarily share. We never access more data than required, and we don't collect personal information from third-party sources without your knowledge.

How We Use Your Information

Your information helps us deliver personalized financial modeling experiences and maintain platform security. Here's exactly how we use the data you provide:

Service Delivery: We use your financial data to generate accurate scenario models, create customized reports, and provide relevant insights based on your industry and business size. Your usage patterns help us recommend features that might benefit your specific needs.

Platform Improvement: Aggregated, anonymized data helps us understand which modeling features are most valuable and where we can enhance functionality. We analyze common scenario types to develop better templates and tools.

Communication: We use your contact information to send important updates about your account, new features that match your usage patterns, and educational content about financial modeling best practices. You control these communications through your account settings.

Security and Compliance: We monitor usage patterns to detect unusual activity, maintain data integrity, and ensure compliance with Australian financial privacy regulations. This includes logging access times and maintaining audit trails.

We never use your specific financial data for marketing purposes or share detailed business information with other users. All modeling calculations happen within secure, isolated environments dedicated to your account.

Information Sharing and Disclosure

We maintain strict controls over who can access your information. calystronaveo does not sell personal data to third parties or share your specific financial information for marketing purposes.

Service Providers: We work with trusted partners who help us operate our platform, including cloud hosting providers, payment processors, and security services. These partners are bound by confidentiality agreements and can only use your data for specific, authorized purposes.

Legal Requirements: We may disclose information when required by Australian law, court orders, or government regulations. This includes compliance with tax authorities, financial regulators, or law enforcement when legally mandated.

Business Transfers: If calystronaveo is acquired or merges with another company, your information would transfer as part of that transaction. We would notify you beforehand and ensure the new entity honors these privacy commitments.

Anonymized Research: We may use aggregated, anonymized data for industry research or benchmarking studies. This data cannot be traced back to individual users or specific businesses.

We require explicit consent before sharing identifiable information for any purpose not covered in this policy. You always have the right to decline optional data sharing arrangements.

Your Privacy Rights Under Australian Law

As an Australian business, calystronaveo complies with the Privacy Act 1988 and Australian Privacy Principles. You have specific rights regarding your personal information that we actively support.

To exercise these rights, contact our privacy team using the details below. We'll respond within 30 days and provide clear steps for any requested actions. There's no charge for most privacy requests, though we may apply reasonable fees for excessive or repetitive requests.

Data Security and Protection

Financial data requires the highest security standards. We've implemented multiple layers of protection to safeguard your information against unauthorized access, theft, and misuse.

Encryption: All data transfers use TLS 1.3 encryption, and sensitive information is encrypted at rest using AES-256 standards. Your financial models and personal data are protected both in transit and storage.

Access Controls: Our team follows strict access protocols. Only authorized personnel can view your data, and all access is logged and monitored. We use multi-factor authentication and regular access reviews.

Infrastructure Security: We host data in Australian-based facilities with 24/7 monitoring, redundant systems, and regular security audits. Our cloud providers maintain SOC 2 Type II certifications.

Regular Testing: We conduct quarterly penetration testing, vulnerability assessments, and security reviews. Our incident response procedures are tested regularly to ensure rapid response to any potential threats.

While we maintain robust security measures, no system is completely immune to risks. We promptly notify users of any security incidents that might affect their personal information, following Australian breach notification requirements.

Data Retention and Deletion

We retain your information only as long as necessary for providing services or meeting legal requirements. Our retention practices balance your privacy rights with practical business needs.

Active Account Data: Personal and financial information remains accessible while your account is active. You can delete specific scenarios or financial data anytime through your account dashboard.

Account Closure: When you close your account, we begin a 90-day deletion process. This grace period allows you to reactivate if needed or export data you want to keep.

Legal Retention: Some information must be retained for tax, accounting, or regulatory purposes under Australian law. This typically includes transaction records and audit trails for seven years.

Backup Systems: Deleted data may persist in backup systems for up to 12 months as part of our disaster recovery procedures. These backups are encrypted and access-controlled.

You can request immediate deletion of specific data categories or your entire account. We'll confirm completion of deletion requests and provide documentation when required for your records.

Cookies and Tracking Technologies

Our platform uses cookies and similar technologies to enhance functionality and analyze usage patterns. We're transparent about what we track and give you control over these technologies.

Essential Cookies: These maintain your login sessions, remember your preferences, and ensure platform security. These cookies are necessary for basic functionality and cannot be disabled.

Analytics Cookies: We track how users navigate our platform to identify popular features and potential improvements. This data is aggregated and anonymized before analysis.

Functional Cookies: These remember your dashboard layouts, recent scenarios, and display preferences. They make your experience more personalized and efficient.

You can control cookie settings through your browser or account preferences. Disabling certain cookies may limit platform functionality, but core modeling features remain available. We don't use third-party advertising cookies or social media tracking pixels.

Updates to This Privacy Policy

We review and update this privacy policy regularly to reflect changes in our practices, technology, or legal requirements. We believe in transparency about how these updates affect your privacy rights.

Notification Process: We'll email you about significant policy changes at least 30 days before they take effect. Minor updates or clarifications may be posted on our platform with shorter notice periods.

Your Choices: If policy changes substantially affect how we use your data, we'll seek your consent or provide options to opt out. You can always export your data or close your account if you disagree with new terms.

Version History: Previous policy versions are available upon request. This helps you understand what changed and when, particularly for compliance or audit purposes.

We encourage you to review privacy updates when notified. Understanding our data practices helps you make informed decisions about using our platform and managing your personal information.