Information We Collect

When you use thalionexaro's expense tracking platform, we collect various types of information to provide you with our services. This includes personal details you provide during registration, such as your name, email address, and contact information.

We also gather financial data you input into our system—transaction records, expense categories, receipts, and budget information. Additionally, our systems automatically collect technical information like your IP address, browser type, device information, and usage patterns within our application.

How We Use Your Information

Your personal information serves several important purposes within our platform. We use it to create and maintain your account, process your expense data, generate reports and insights, and provide customer support when you need assistance.

• Account creation and authentication
• Processing and categorizing your expense data
• Generating financial reports and analytics
• Sending important service notifications
• Improving our platform based on usage patterns
• Providing customer support and technical assistance

We never use your personal financial information for marketing purposes or share it with third parties for their commercial benefit. Our use is strictly limited to providing you with the expense tracking services you've signed up for.

Information Sharing and Disclosure

thalionexaro takes a strict approach to information sharing. We don't sell, rent, or trade your personal information to third parties. However, there are specific circumstances where we may need to share limited information.

We work with trusted service providers who help us operate our platform—cloud hosting services, payment processors, and security providers. These partners are contractually bound to protect your information and can only use it for the specific services they provide to us.

In rare cases, we may disclose information if required by Australian law, court orders, or to protect the rights and safety of our users. We'll always notify you of such requests unless legally prohibited from doing so.

Your Rights Under Australian Privacy Law

Under the Privacy Act 1988 and Australian Privacy Principles, you have several important rights regarding your personal information. You can request access to the personal information we hold about you, ask us to correct any inaccurate or outdated information, and in certain circumstances, request deletion of your data.

• Access your personal information within 30 days of request
• Correct inaccurate or incomplete information
• Request deletion of your account and associated data
• Receive a copy of your data in a portable format
• Withdraw consent for optional data processing
• Lodge a complaint with the Office of the Australian Information Commissioner

To exercise any of these rights, contact our privacy team using the details provided at the bottom of this policy. We'll respond to your request within 30 days and provide clear information about any actions we've taken.

Data Security and Protection

Protecting your financial information is our highest priority. We employ industry-standard security measures including 256-bit SSL encryption for data transmission, encrypted storage systems, and regular security audits of our infrastructure.

Our platform uses multi-factor authentication options, automated logout features, and secure password requirements. We maintain strict access controls—only authorized personnel can access user data, and all access is logged and monitored.

We regularly update our security protocols and conduct penetration testing to identify and address potential vulnerabilities before they can be exploited.

Data Retention and Deletion

We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Active account data is maintained while your account remains open and for up to 7 years after account closure for tax and legal compliance purposes.

When you delete your account, we immediately stop processing your data for service provision. Personal identifiers are removed within 90 days, though some anonymized usage statistics may be retained for product improvement purposes.

Financial records may be retained longer where required by Australian tax law or if there are outstanding legal matters. We'll always inform you of any extended retention requirements and the specific reasons for them.

International Data Transfers

thalionexaro primarily stores and processes data within Australia using local cloud infrastructure providers. However, some of our service providers may have infrastructure located overseas, particularly in regions with strong data protection laws like the European Union and Canada.

When international transfers occur, we ensure appropriate safeguards are in place through binding corporate rules, standard contractual clauses, or adequacy decisions recognized under Australian privacy law. We never transfer data to countries without adequate privacy protections.

Cookies and Tracking Technologies

Our platform uses cookies and similar technologies to enhance your user experience. Essential cookies are necessary for basic functionality like keeping you logged in and remembering your preferences. We also use analytics cookies to understand how users interact with our platform and identify areas for improvement.

You can control cookie settings through your browser, though disabling essential cookies may impact platform functionality. We don't use cookies for advertising purposes or share cookie data with third-party advertisers.

Changes to This Privacy Policy

We review and update this privacy policy regularly to reflect changes in our practices, technology, or legal requirements. When we make material changes, we'll notify you via email and display a prominent notice in your account dashboard.

You'll have at least 30 days to review changes before they take effect. If you don't agree with updated terms, you can close your account and request data deletion before the changes become effective.