Privacy Policy
Last Updated: March 15, 2025
At nuvextara, we understand that managing budget approval workflows involves handling sensitive financial and business information. This privacy policy explains how we collect, use, protect, and manage your personal and business data when you use our services.
We're committed to transparency about our data practices and ensuring you understand your rights regarding your personal information under Australian privacy laws.
Information We Collect
We collect different types of information to provide and improve our budget approval workflow services. The information we gather helps us understand your business needs and deliver personalized solutions.
Account Information
Name, email address, phone number, job title, company name, and billing information when you register for our services or create an account.
Business Data
Budget information, approval workflows, financial data, project details, and organizational structure that you input into our platform.
Usage Information
How you interact with our platform, features used, time spent, login frequency, and system preferences to improve user experience.
Technical Data
IP address, browser type, device information, operating system, and cookies to ensure platform security and functionality.
How We Collect Information
- Directly from you when you register, use our services, or contact support
- Automatically through your use of our platform and services
- From third-party integrations you authorize, such as accounting software
- Through cookies and similar tracking technologies on our website
- When you participate in surveys, webinars, or other research activities
How We Use Your Information
We use your information to provide, maintain, and improve our budget approval workflow services. Your data helps us create a more effective and personalized experience.
- Provide and maintain our budget approval workflow platform
- Process transactions and send related information including confirmations and invoices
- Send technical notices, updates, security alerts, and administrative messages
- Respond to comments, questions, and customer service requests
- Monitor and analyze trends, usage, and activities to improve our services
- Personalize and improve user experience and content
- Detect, investigate, and prevent fraudulent transactions and security incidents
- Comply with legal obligations and enforce our terms of service
- Conduct research and development to enhance our platform capabilities
Legal Basis for Processing
Under Australian privacy laws, we process your personal information based on:
- Your consent when you sign up for our services
- Contract performance to deliver the services you've requested
- Legitimate business interests in improving our platform and preventing fraud
- Legal compliance requirements under Australian and international laws
Information Sharing and Disclosure
We don't sell your personal information to third parties. We may share your information only in specific circumstances that are necessary for our business operations or required by law.
When We May Share Information
- With service providers who assist in platform operations, such as cloud hosting and payment processing
- With your consent or at your direction, such as authorized integrations
- For legal compliance, including responding to lawful requests from authorities
- To protect rights, property, or safety of nuvextara, our users, or the public
- In connection with business transfers, such as mergers or acquisitions
- With professional advisors, including lawyers, accountants, and auditors
Third-Party Service Providers
We work with carefully selected service providers who help us operate our platform. These providers are contractually bound to protect your information and can only use it for the specific services they provide to us.
Your Privacy Rights
Under Australian privacy laws, you have several rights regarding your personal information. We're committed to helping you exercise these rights and maintaining control over your data.
- Access: Request copies of your personal information we hold
- Correction: Ask us to correct inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to legal requirements
- Portability: Receive your data in a structured, machine-readable format
- Restrict Processing: Limit how we use your information in certain circumstances
- Object: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent for processing where consent is the legal basis
To exercise these rights, contact our privacy team using the information provided at the end of this policy. We'll respond to your request within 30 days and may need to verify your identity before processing certain requests.
Data Security and Protection
We implement comprehensive security measures to protect your personal and business information. Our security practices include both technical and organizational safeguards.
Technical Safeguards
- Encryption of data in transit and at rest using industry-standard protocols
- Multi-factor authentication for account access
- Regular security audits and vulnerability assessments
- Secure cloud infrastructure with access controls and monitoring
- Automated backup systems with secure storage
Organizational Measures
- Staff training on data protection and privacy requirements
- Access controls limiting employee access to personal information
- Incident response procedures for potential data breaches
- Regular review and updating of security policies
- Third-party security certifications and compliance audits
While we implement strong security measures, no system is completely secure. We encourage you to use strong passwords and keep your account information confidential.
Data Retention
We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Retention periods vary depending on the type of information and how it's used.
Retention Periods
Account Information
Retained while your account is active and for 7 years after closure for legal compliance
Business Data
Retained according to your data retention settings, with option for immediate deletion
Usage Logs
Retained for 2 years for security and service improvement purposes
Marketing Data
Retained until you unsubscribe or request deletion, then removed within 30 days
When we no longer need your information, we securely delete or anonymize it. Some information may be retained in anonymized form for statistical analysis and service improvement.
International Data Transfers
Your information may be transferred to and processed in countries other than Australia, including the United States and European Union, where our service providers operate data centers.
When we transfer your information internationally, we ensure adequate protection through:
- Standard contractual clauses approved by relevant data protection authorities
- Adequacy decisions recognizing equivalent privacy protection
- Certification schemes and codes of conduct
- Specific safeguards and security measures for data protection
Cookies and Tracking
We use cookies and similar technologies to improve your experience on our website and platform. These technologies help us understand how you use our services and provide personalized features.
Types of Cookies We Use
- Essential cookies required for platform functionality and security
- Performance cookies to analyze usage and improve our services
- Functionality cookies to remember your preferences and settings
- Marketing cookies to provide relevant content and advertisements
You can control cookie settings through your browser preferences. However, disabling certain cookies may affect platform functionality and your user experience.
Children's Privacy
Our services are designed for business use and are not intended for individuals under 18 years of age. We don't knowingly collect personal information from children under 18.
If we learn that we've collected personal information from a child under 18, we'll take steps to delete that information as quickly as possible. Parents or guardians who believe their child has provided personal information should contact us immediately.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. We'll notify you of significant changes through your registered email address or prominent notices on our platform.
The "Last Updated" date at the top of this policy indicates when the most recent changes were made. We encourage you to review this policy periodically to stay informed about how we protect your information.
Continued use of our services after policy changes constitutes acceptance of the updated terms. If you don't agree with changes, you may discontinue using our services and request deletion of your information.
Contact Information
If you have questions, concerns, or requests regarding this privacy policy or how we handle your personal information, please don't hesitate to contact us.
Privacy Officer
Email: privacy@nuvextara.com
Phone: +61 3 6327 4418
General Support
Email: support@nuvextara.com
Response within 48 hours
Postal Address
nuvextara Privacy Team
1A Station St
West Ryde NSW 2114
Australia
We're committed to addressing your privacy concerns promptly and transparently. Our privacy team will work with you to resolve any issues and ensure your rights are respected.