Account Information

When you create a dorivalenox account, we collect basic information needed to provide our budgeting services. This includes your name, email address, phone number, and the password you create. We also collect your preferred currency and time zone to personalize your experience.

Financial Data

To help you budget effectively, we collect information about your income, expenses, and financial goals. This may include:

• Income sources and amounts you manually enter
• Expense categories and spending amounts
• Budget targets and financial goals you set
• Transaction descriptions and notes you add
• Account balances you choose to track

Important: We never store your banking passwords or direct account access credentials. All financial data is manually entered by you or imported through secure, read-only connections.

Usage Information

We collect information about how you use our service to improve functionality and user experience. This includes pages visited, features used, time spent in the app, and general usage patterns. We also collect technical information like your IP address, browser type, and device information.

Service Delivery

Your financial data allows us to calculate budget summaries, track spending patterns, and provide personalized insights. We use your account information to maintain your profile and ensure you can access your data securely across devices.

Communication

We may send you service-related notifications, budget alerts you've requested, and important updates about your account. You can control these communications through your account settings. We'll never send promotional emails without your explicit consent.

Improvement and Analysis

We analyze usage patterns to understand which features are most helpful and identify areas for improvement. This analysis uses aggregated, anonymized data that cannot identify individual users. For example, we might study general spending categories to improve our budgeting recommendations.

Service Providers

We work with trusted third-party companies to provide specific services like cloud hosting, email delivery, and payment processing. These providers only access the minimum information needed to perform their services and are contractually required to protect your data according to our standards.

Current service providers include cloud storage providers for data backup, email service providers for account notifications, and analytics services for app performance monitoring. Each provider has been vetted for security and privacy compliance.

Legal Requirements

In rare circumstances, we may be required to disclose information to comply with Australian law, legal processes, or government requests. This might include responding to court orders, regulatory investigations, or law enforcement requests where legally required.

We will always review such requests carefully and only provide the minimum information required by law. Where legally possible, we'll notify affected users about such disclosures.

Business Transfers

If dorivalenox is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We would notify you via email and prominent notice on our website before any such transfer, giving you the opportunity to delete your account if desired.

How to Exercise Your Rights

Most privacy rights can be exercised directly through your account settings. For more complex requests or if you need assistance, contact our privacy team at support@dorivalenox.com. We typically respond to privacy requests within 5 business days.

If you're not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Encryption and Storage

All sensitive data is encrypted both in transit and at rest using industry-standard AES-256 encryption. Your passwords are hashed using bcrypt with salt, making them unreadable even to our staff. Data is stored in secure facilities with 24/7 monitoring and restricted physical access.

Access Controls

Access to your data is strictly limited to authorized personnel who need it to provide support or maintain our services. All access is logged and monitored. Our staff undergo regular security training and background checks.

Regular Security Audits

We conduct regular security assessments and penetration testing to identify and address potential vulnerabilities. Our systems are monitored 24/7 for suspicious activity, and we maintain an incident response plan for any security events.

Active Accounts

While your account is active, we retain all your financial data and account information to provide continuous budgeting services. You can delete specific transactions, categories, or data points anytime through your account settings.

Inactive Accounts

If you don't access your account for 24 months, we'll send email notifications before considering the account inactive. Inactive accounts are eventually deleted, but you'll receive multiple warnings and opportunities to reactivate before any data is removed.

Deleted Accounts

When you delete your account, we permanently remove your personal and financial data within 30 days. Some information may be retained longer for legal compliance, such as records of financial transactions for tax purposes, but this data is anonymized where possible.

Backup Systems

Our backup systems may retain deleted data for up to 90 days for disaster recovery purposes. These backups are encrypted and accessed only in emergency situations to restore service availability.