Privacy Policy

Information We Collect

Running a cost management platform means we need certain information to help you track expenses and manage your finances effectively. Here's what we collect and why.

Information You Provide Directly

When you create an account or use our services, you share information with us voluntarily. This includes your name, email address, phone number, and payment details. We also collect any financial data you input into our platform — transaction records, budget categories, expense notes.

Information We Collect Automatically

Like most online services, we gather technical information when you visit our site. This includes your IP address, browser type, device information, and how you interact with our platform. We use cookies and similar tracking technologies to understand usage patterns and improve your experience.

• Device identifiers and operating system details
• Pages visited and features used within our platform
• Time spent on different sections of the site
• Links clicked and actions taken
• Location data (with your permission)

Information From Third Parties

If you connect bank accounts or other financial services to luminarytos, we receive transaction data from those institutions. This helps us provide accurate expense tracking and financial insights. We only access what you authorize through secure connections.

How We Use Your Information

Your data serves specific purposes. We don't collect information just for the sake of it — everything we gather helps us deliver better cost management tools.

• Creating and maintaining your account
• Processing your financial transactions and tracking expenses
• Generating personalized budget insights and recommendations
• Sending important notifications about your account
• Responding to your support requests and inquiries
• Improving our platform based on usage patterns
• Detecting and preventing fraudulent activity
• Complying with legal obligations under Australian law

We occasionally send promotional emails about new features or helpful resources. You can opt out of these anytime, though we'll still send essential account-related messages.

How We Share Your Information

We don't sell your personal data. Period. But we do share information in limited circumstances to operate our business and protect your interests.

Service Providers

We work with trusted third-party companies that help us run luminarytos — hosting providers, payment processors, analytics services, customer support tools. These partners only access information necessary for their specific role and are contractually bound to protect it.

Financial Institutions

When you connect bank accounts or payment cards, we share authentication tokens (never your passwords) with those institutions to retrieve your transaction data. This happens through secure, encrypted connections.

Legal Requirements

We may disclose information if required by Australian law, court order, or government request. We'll notify you when possible, unless legally prohibited from doing so.

Business Transfers

If luminarytos merges with another company or gets acquired, your information would transfer as part of that transaction. We'd notify you before your data becomes subject to a different privacy policy.

Your Rights and Choices

Under the Australian Privacy Act 1988, you have specific rights regarding your personal information. Here's what you can do and how to exercise these rights.

To exercise any of these rights, contact us at help@luminarytos.com. We'll respond within 30 days. There's no fee for reasonable requests, though we may charge for excessive or repetitive inquiries.

Data Security

Protecting your financial information is our top priority. We implement multiple layers of security to keep your data safe from unauthorized access, alteration, or disclosure.

Technical Safeguards

• 256-bit SSL encryption for all data transmission
• Encrypted storage for sensitive financial information
• Regular security audits and penetration testing
• Multi-factor authentication options for your account
• Automated monitoring for suspicious activity
• Secure backup systems with geographic redundancy

Organizational Measures

Our team follows strict security protocols. Access to personal information is limited to employees who need it for their work. We conduct regular training on data protection and privacy practices.

That said, no online service is 100% secure. While we do everything possible to protect your information, we can't guarantee absolute security. Use a strong password and enable two-factor authentication for additional protection.

Data Retention

We keep your information only as long as necessary to provide services and meet legal obligations.

Active account data stays accessible while you use luminarytos. If you close your account, we delete most personal information within 90 days. Some records — like transaction histories — must be retained longer for tax and regulatory compliance. We keep these for seven years as required under Australian financial legislation.

After retention periods expire, we permanently delete or anonymize your information. Anonymized data (which can't identify you) may be kept indefinitely for research and platform improvement.

Cookies and Tracking

We use cookies and similar technologies to make luminarytos work properly and understand how people use our platform.

Essential Cookies

These are necessary for basic functions — keeping you logged in, remembering your preferences, securing your connection. You can't disable these without breaking the site.

Analytics Cookies

We track which features get used most, where people encounter issues, and how long tasks take. This helps us improve the platform. You can opt out through your browser settings or our cookie preferences panel.

Managing Cookies

Most browsers let you control cookies through their settings. Keep in mind that blocking certain cookies may affect platform functionality. Check your browser's help section for specific instructions.

International Data Transfers

Your information is primarily stored on servers located in Australia. However, some service providers we work with operate globally, which means your data might be processed in other countries.

When we transfer data internationally, we ensure adequate protections are in place — standard contractual clauses, adequacy determinations, or other approved mechanisms under Australian privacy law.

Children's Privacy

luminarytos isn't designed for people under 18. We don't knowingly collect information from children. If you're a parent and believe your child has provided us with personal information, contact us immediately and we'll delete it.

Changes to This Policy

We update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email or through a prominent notice on our platform.

The "Last Updated" date at the top shows when we last revised this policy. Continuing to use luminarytos after changes means you accept the updated terms.

Australian Privacy Law Compliance

luminarytos complies with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988. This means we handle your personal information according to strict standards established by Australian law.

If you have concerns about how we handle your information, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC). We prefer to resolve issues directly, so please contact us first.