Privacy Policy

Last Updated: February 15, 2025

At xyltheraquos, we take your privacy seriously. This comprehensive privacy policy explains how we collect, use, protect, and manage your personal information when you use our financial scenario modeling services. We're committed to transparency and giving you control over your data.

1

Information We Collect

We collect various types of information to provide you with our financial modeling services and improve your experience on our platform.

Personal Information You Provide

  • Contact details including name, email address, phone number, and business address
  • Account credentials and authentication information
  • Financial data you input for scenario modeling purposes
  • Business information including company size, industry, and financial goals
  • Communication preferences and feedback you provide
  • Payment information processed through secure third-party providers

Automatically Collected Information

  • Device information including IP address, browser type, and operating system
  • Usage analytics such as pages visited, time spent, and feature utilization
  • Session data including login times and user interactions
  • Technical performance data to optimize our service delivery
  • Location data based on IP address for regulatory compliance
Data Type Collection Method Purpose
Financial Models User Input Scenario Analysis & Reporting
Usage Analytics Automatic Service Improvement
Contact Information Registration Form Account Management
2

How We Use Your Information

Your information helps us deliver personalized financial modeling services and maintain the security of our platform. Here's how we use different types of data:

Primary Service Delivery

We process your financial data to generate scenario models, create reports, and provide analytical insights that support your business decision-making processes.

Account Management

Your contact information allows us to maintain your account, process payments, provide customer support, and communicate important service updates. We also use this data to verify your identity and prevent unauthorized access.

Service Improvement

Analytics help us understand how users interact with our platform, identify areas for improvement, and develop new features that better serve your financial modeling needs. This includes optimizing loading times, enhancing user interfaces, and refining our algorithms.

Communication

We use your contact details to send service-related notifications, security alerts, and occasionally, updates about new features that might benefit your financial planning. You can control communication preferences in your account settings.

We never use your financial data for purposes beyond providing our modeling services unless you explicitly consent to additional uses.

3

Data Sharing and Third Parties

We maintain strict controls over data sharing and only work with trusted partners who meet our security standards.

Service Providers

We share limited data with carefully selected third-party providers who help us deliver our services:

  • Cloud hosting providers for secure data storage and processing
  • Payment processors for handling subscription and transaction payments
  • Email service providers for delivering account notifications
  • Analytics providers for understanding platform performance
  • Security services for fraud prevention and threat detection

All third-party providers sign comprehensive data processing agreements and are prohibited from using your data for their own purposes.

Legal Requirements

We may disclose information when required by Australian law, court orders, or regulatory requests. This includes compliance with financial services regulations, tax reporting requirements, and law enforcement investigations.

What We Don't Share

We never sell your personal or financial data to marketers, advertisers, or data brokers. Your scenario models and business information remain confidential and are not shared with competitors or unauthorized parties.

4

Your Rights and Control

Under Australian privacy law, you have significant rights regarding your personal information. We've made it easy to exercise these rights through your account dashboard or by contacting our privacy team.

Access Your Data

Request a complete copy of all personal information we hold about you, including financial models and usage history.

Correct Information

Update or correct any inaccurate personal information directly through your account or by contacting support.

Delete Your Data

Request complete deletion of your account and associated data, subject to legal retention requirements.

Data Portability

Export your financial models and data in standard formats for use with other services or personal records.

Restrict Processing

Limit how we use your data while maintaining basic account functionality and legal compliance.

Withdraw Consent

Opt out of non-essential data processing activities and marketing communications at any time.

How to Exercise Your Rights

Most privacy controls are available directly in your account settings. For more complex requests, email our privacy team at info@xyltheraquos.com with your specific requirements. We'll respond within 30 days and may need to verify your identity before processing certain requests.

5

Data Security and Protection

We implement comprehensive security measures to protect your financial data and personal information from unauthorized access, alteration, or disclosure.

Technical Safeguards

  • 256-bit SSL encryption for all data transmission
  • AES-256 encryption for data storage
  • Multi-factor authentication requirements
  • Regular security audits and penetration testing
  • Automated threat detection and response systems
  • Secure coding practices and regular security updates

Physical Security

Our servers are housed in certified data centres with 24/7 monitoring, biometric access controls, and redundant power systems. These facilities meet international security standards including SOC 2 Type II and ISO 27001.

Access Controls

We maintain strict internal access controls with role-based permissions, regular access reviews, and comprehensive audit logs. Only authorized personnel can access customer data, and all access is monitored and recorded.

Incident Response

In the unlikely event of a security incident affecting your data, we'll notify you within 72 hours and provide detailed information about what happened, what data was involved, and what steps we're taking to address the issue.

6

Data Retention and Deletion

We retain your information only as long as necessary to provide our services and comply with legal requirements.

Data Type Retention Period Reason
Account Information Duration of account + 7 years Tax and regulatory compliance
Financial Models Duration of account + 2 years Support and audit purposes
Usage Analytics 3 years Service improvement
Communication Records 5 years Legal protection

Automated Deletion

Our systems automatically delete data that exceeds retention periods. You'll receive notifications before any data deletion occurs, giving you the opportunity to export important information.

Account Closure

When you close your account, we immediately stop processing your data for service delivery. Personal information is deleted according to our retention schedule, while some records may be maintained longer for legal compliance.

7

International Data Transfers

While xyltheraquos is based in Australia and primarily stores data locally, some of our service providers operate internationally. We ensure all international transfers meet Australian privacy standards.

Transfer Safeguards

  • Standard contractual clauses for data protection
  • Adequacy decisions where applicable
  • Regular compliance monitoring
  • Data localization where technically feasible

Your Options

If you prefer your data to remain within Australia, contact our support team to discuss data residency options. Some features may be limited, but we'll work to accommodate your preferences where possible.

8

Updates to This Policy

We review and update this privacy policy regularly to reflect changes in our practices, technology, and legal requirements. Significant changes will be communicated through multiple channels.

Notification Process

  • Email notification to all active users
  • Prominent notice on our website and platform
  • 30-day advance notice for material changes
  • Option to review changes before they take effect

Your Response Options

When we update our privacy policy, you can continue using our services under the new terms, modify your privacy settings, or close your account if you disagree with the changes. We'll always respect your choice to discontinue service.

Privacy Questions and Contact

Have questions about this privacy policy or how we handle your data? Our privacy team is here to help with any concerns or requests.

Email
info@xyltheraquos.com
Phone
+61 2 8021 5475
Address
122 Ryrie St
Geelong VIC 3220
Australia