Information We Collect

When you use our budget surplus management platform, we collect information that helps us provide better financial insights and services. This includes details you provide directly through account registration, budget data you input, and transaction information you choose to share with our system.

How We Use Your Information

Your data powers the core functionality of fenystravia's surplus management tools. We use aggregated spending patterns to calculate your potential surplus and suggest allocation strategies that align with your financial goals.

• Generate personalized budget surplus recommendations based on your spending patterns
• Send monthly reports about your financial progress and potential improvements
• Provide customer support when you need assistance with your account
• Improve our algorithms by analyzing anonymized user behavior across the platform
• Comply with Australian financial regulations and reporting requirements

Data Security and Protection

Security isn't just a feature—it's fundamental to everything we do. Our infrastructure uses bank-level encryption protocols, with all data transmitted through TLS 1.3 connections and stored using AES-256 encryption standards.

We employ multi-layered security measures including regular penetration testing, continuous monitoring for suspicious activity, and strict access controls that limit employee access to customer data. Only authorized personnel can access your information, and all access is logged and audited.

Your Privacy Rights

Under Australian privacy law, you have significant control over your personal information. You can request access to all data we hold about you, ask us to correct inaccurate information, or request deletion of your account and associated data.

• Access your personal information and understand how it's being used
• Request corrections to inaccurate or outdated information in your profile
• Ask for your data to be deleted, subject to legal retention requirements
• Opt out of non-essential communications while maintaining your account
• Request a copy of your data in a portable format
• Lodge complaints about privacy breaches with the Office of the Australian Information Commissioner

To exercise any of these rights, contact our privacy team using the details provided below. We'll respond to your request within 30 days and won't charge fees for reasonable requests.

Data Retention and Deletion

We keep your personal information only as long as necessary to provide our services and comply with legal obligations. Account information is retained while your account remains active, plus seven years after closure to meet Australian financial record-keeping requirements.

Financial transaction data is automatically purged after three years, while anonymized usage statistics may be retained longer for product improvement purposes. When you delete your account, we begin the deletion process immediately, though some data may remain in backups for up to 90 days before permanent removal.

Third-Party Services

fenystravia integrates with several trusted third-party services to provide comprehensive budget management features. These include secure banking APIs for account connections, cloud infrastructure providers for data processing, and analytics tools for service improvement.

All third-party partnerships are governed by strict data processing agreements that require the same level of privacy protection we provide directly. We regularly audit these relationships and can provide a complete list of our data processors upon request.

International Data Transfers

While fenystravia is based in Australia, some of our technology infrastructure may process data in other countries with adequate privacy protections. When international transfers occur, we ensure appropriate safeguards are in place through standard contractual clauses or adequacy decisions.

Your financial data remains primarily within Australian borders, with limited exceptions for backup and disaster recovery purposes. We maintain detailed records of all international data movements and can provide information about data locations upon request.

Changes to This Policy

Privacy regulations and our services evolve over time, so we may update this policy periodically. Significant changes will be communicated through email notification and prominent website notices at least 30 days before they take effect.

We encourage you to review this policy regularly to stay informed about how we protect your information. The current version is always available on our website, with clear indication of when it was last updated.