Privacy Policy

This policy explains how we handle personal information under Australia's Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where we handle Tax File Numbers (TFNs), we also comply with the Privacy (Tax File Number) Rule 2015 ("TFN Rule").

1. What we collect

We only collect information you knowingly give us when you create an account, enter data, upload documents, or contact support. This may include:

• Identity and contact details (name, email, phone).
• Financial and tax information you input (e.g., income, expenses, entities, super details).
• Tax File Numbers (TFNs) where you provide them for tax-related features.
• Technical basics needed for the service to work (e.g., IP address and device date/time) — we do not use cookies or tracking pixels.

We do not collect sensitive information beyond what you provide for tax purposes.

2. Why we collect it (uses)

We use your information to:

• Provide, secure and support the app and its features you request.
• Enable calculations, records and outputs you direct us to create (e.g., tax and accounting artefacts).
• Communicate about your account, security, law-required notices and any notifications you explicitly opt into.
• Comply with Australian law and respond to lawful requests.

TFNs are collected, used and disclosed only for purposes permitted by taxation, superannuation or assistance agency laws (for example, preparing or storing tax information you ask us to process). We will not use TFNs as a system identifier.

We do not use your data for advertising or unrelated analytics.

3. Legal bases (APPs and TFN Rule)

We rely on your consent and your direction to process account data, and on legal obligations where applicable (e.g., record-keeping, responding to regulators). Handling of TFNs strictly follows the TFN Rule.

4. Disclosures

We may disclose information to:

• Our Australian service providers (e.g., secure hosting, backup, support) under confidentiality and security obligations.
• Government bodies or regulators where the law requires.
• Anyone you authorise us to disclose to (e.g., your accountant), if you direct us.

We do not sell personal information. We do not make routine overseas disclosures. If an overseas disclosure becomes necessary, we will update this policy and take reasonable steps to ensure APP-compliant protections.

5. Storage, security and retention

We use administrative, technical and physical safeguards appropriate to the sensitivity of the information we hold (including encryption at rest/in transit where supported, access controls and logging).

• Backups: When you delete data or close your account, production records are removed or de-identified. Backup copies may persist for a limited period within our standard backup rotation before being overwritten.
• TFNs: We take additional measures required by the TFN Rule and destroy or permanently de-identify TFNs when no longer required for permitted purposes.

6. Access, correction and deletion

You can access and update most information in your account. To request:

• Access or correction, or
• Deletion of your information (subject to lawful record-keeping requirements),

contact us at support@selfmanaged.com. For deletion, we will remove production data promptly and confirm the backup-cycle timing.

7. Emails and notifications (Spam Act)

We send:

• Service/required communications (e.g., security or legal notices) without opt-in where permitted.
• Notifications only if you opt in (you can opt out at any time in settings or via the message).

Marketing messages are not sent unless you have expressly consented; every commercial message includes an unsubscribe.

8. Children

Our services are designed for adults. If you believe a child has provided personal information without appropriate authority, contact us to remove it.

9. Notifiable data breaches

If a data breach is likely to result in serious harm, we will notify you and the OAIC in accordance with the Notifiable Data Breaches scheme.

10. Complaints

If you have privacy concerns, contact support@selfmanaged.com. We'll respond in writing. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC).

11. Changes to this policy

We may update this policy to reflect changes to our practices or the law. We'll post the new version here and update the effective date.