Privacy Policy

What Information We Collect

We only collect what we actually need to provide you with secure digital banking services. Nothing more. Here's what that looks like in practice:

We collect this information when you create an account, use our services, or contact our support team. Some data comes directly from you, while other information gets recorded automatically as you interact with our platform.

How We Use Your Information

Every piece of data we collect has a specific purpose. We don't believe in gathering information "just in case" we might need it later. Here's exactly what we do with your data:

We won't use your information for marketing purposes unless you explicitly opt in. And even then, you can change your mind anytime.

Sharing Your Information

We're protective of your data. Sharing it with third parties happens only when absolutely necessary, and we maintain strict controls over who can access what.

When We Share Data

• With service providers who help us operate the platform—like cloud hosting companies or security firms. They're bound by contracts that restrict how they can use your data.
• When required by Australian law or court orders. We'll notify you if legally permitted to do so.
• With your explicit consent for specific purposes you've approved.
• In the event of a business sale or merger, though your rights under this policy would continue.

Third-Party Services

Some features connect to external services. For example, if you use our transaction categorization tool, we might work with financial data aggregators. You'll always know when this happens, and you can choose whether to use these features.

Your Privacy Rights Under Australian Law

The Australian Privacy Principles give you substantial control over your personal information. Here's what you can do:

How to Exercise Your Rights

Send your request to contact@cyralithen.com with "Privacy Request" in the subject line. We'll need to verify your identity—usually by confirming details from your account—before we can proceed. Most requests get handled within two weeks, though complex ones might take up to 30 days.

If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

How We Protect Your Information

Security isn't just about technology—it's about culture and processes too. Here's our approach:

1. Encryption: All data gets encrypted in transit using TLS 1.3 and at rest using AES-256. Your information is scrambled into unreadable code unless someone has the proper decryption keys.
2. Access Controls: Only authorized team members can access personal data, and only when there's a legitimate business need. Every access gets logged and monitored.
3. Regular Audits: Independent security firms review our systems quarterly. We also conduct internal audits monthly to catch potential vulnerabilities.
4. Staff Training: Every team member completes privacy and security training annually. They understand their responsibility to protect your information.
5. Incident Response: We maintain detailed plans for responding to data breaches. If your information is compromised, we'll notify you within 72 hours.
6. Physical Security: Our servers are housed in certified data centers with 24/7 monitoring, biometric access controls, and redundant power systems.

No system is completely invulnerable, but we invest heavily in maintaining security standards that exceed industry requirements.

Data Retention and Deletion

We don't keep your information forever. Here's our retention schedule:

Active Accounts

While your account is active, we maintain all necessary information to provide services and comply with financial regulations. Transaction records typically need to be kept for seven years under Australian law.

Closed Accounts

When you close your account, we'll delete or anonymize your personal information within 90 days, except for data we're legally required to retain. Financial transaction records stay for the legally mandated period, then get permanently deleted.

Marketing Data

If you've opted into marketing communications, we'll keep that preference data until you unsubscribe. Once you opt out, we remove your details from marketing lists within 48 hours.

Cookies and Tracking Technologies

Like most websites, we use cookies and similar technologies. But we keep it minimal and purposeful.

Essential Cookies

These keep you logged in and remember your security preferences. They're necessary for the platform to function, so they're not optional.

Analytics Cookies

We use these to understand how people use our platform—which features are popular, where users get stuck, that sort of thing. The data gets anonymized before we analyze it.

Your Cookie Choices

You can manage cookie preferences through your browser settings. Blocking all cookies might affect how well the platform works, but you're in control of that trade-off.

International Data Transfers

Our primary servers are located in Australia, but some of our service providers operate internationally. When we transfer data overseas, we ensure it receives equivalent protection through:

• Standard contractual clauses approved by the Australian Information Commissioner
• Verification that the receiving country has adequate privacy protections
• Additional security measures like encryption during transfer
• Regular audits of international partners' security practices

Countries we currently work with include the United States and Singapore, both recognized for their data protection frameworks. If this changes, we'll update this policy and notify affected users.

Children's Privacy

Our services aren't designed for anyone under 18. We don't knowingly collect information from children. If we discover that a minor has provided personal information, we'll delete it immediately.

Parents or guardians who believe their child has shared information with us should contact us right away at contact@cyralithen.com so we can remove it from our systems.

Changes to This Policy

Privacy regulations and our practices evolve. When we update this policy, we'll post the new version here with an updated date at the top. Significant changes—like expanding how we use data or who we share it with—will trigger email notifications to all active users.

We recommend reviewing this policy periodically, especially if you're concerned about recent changes in data protection laws or industry practices.

Australian Privacy Principles Compliance

We've structured our practices around the 13 Australian Privacy Principles. Here's how we address each: