Privacy Policy

Who is responsible

The WattleFolio software service is operated by . Privacy questions, access/correction requests and complaints can be sent to .

Information we collect

• Account information, including email address, family/account name, partner invitation details and authentication records.
• Subscription and billing-status information such as Stripe customer/subscription identifiers, subscriber email, subscription status and billing-period dates. WattleFolio does not need to store your full card number.
• Budgeting and household-planning information such as income, expenses, assets, properties, loans, offsets, shares, tax assumptions and goals.
• Property income/expense records and limited information derived from supported PropertyMe statements or supplier invoices. A business issuer name may be retained for an invoice; property manager agency email/phone is retained only for a statement when present and necessary for the user's record.
• Technical and security records needed to operate, protect and troubleshoot the service.

How we use the information

We use it to authenticate the account, save user-entered household data, calculate user-directed scenarios, provide requested imports/exports, maintain security, respond to privacy requests and comply with legal obligations. The reviewed version does not use advertising or behavioural analytics.

Service providers and overseas processing

Supabase provides authentication and database services; the configured database region is . Stripe processes subscription checkout, billing and cancellation information. Microsoft processes Outlook connection and Mail.Read requests only when the user activates that feature. Cloudflare provides hosting and edge delivery for this deployment. jsDelivr delivers pinned browser libraries for Supabase authentication/data access and, only when the relevant feature is used, Microsoft sign-in, PDF parsing and Excel export. These global providers may process technical or account information outside Australia in accordance with their service configuration and contracts.

Security

The portal uses HTTPS, mandatory multi-factor authentication, household row-level database controls, session timeouts and account deletion. If you choose “Remember this private device”, the browser retains the verified Supabase session and a device-expiry record for up to 30 days; no MFA code or authenticator secret is stored. You can forget the device in Settings or by signing out. Supported property PDF parsing occurs in the browser; the source PDF and full extracted text are not retained. Supplier contact details and bank details are not uploaded or retained. No internet service is risk-free; see the security page for reporting instructions.

Retention and deletion

• Active planner data is retained while the account remains open and needed to provide the service.
• Unapproved statement or invoice drafts expire after days.
• Document approval/decline history expires after months; approved financial transaction records remain until the user deletes them or the account.
• Inactive accounts are reviewed after 24 months, with notice before deletion where contact is possible.
• Account deletion removes the authentication account, household and saved plan from active systems. Provider backup expiry is managed under the applicable provider schedule.

Access, correction and complaints

Users can view and correct planner data, export a JSON copy and delete their account in Settings. For information not accessible in the portal, contact . We will verify identity, record the request and respond within applicable Australian privacy timeframes. Unresolved privacy complaints may be taken to the Office of the Australian Information Commissioner.

Data breaches

Suspected breaches are handled under the operator's incident and Notifiable Data Breaches response plan, including containment, assessment and notification where required.

Changes

Material changes will be versioned on this page. A new notice or acknowledgement will be presented where a change materially affects collection or use.

Collection notice

The public demonstration uses fictional figures and does not require an account. Changes made in the demo are temporary, are not sent to Supabase or Outlook, and are discarded when the visitor exits or reloads it.

collects the account and financial information described above to create, secure and operate your household budgeting and planning workspace. If you do not provide required account information, an account cannot be created; optional financial fields may be left blank but related calculations will be incomplete.

Information is usually disclosed to Supabase, Cloudflare and Stripe as needed to provide the account, hosting and subscription service. If you activate Outlook, Microsoft receives authentication and Mail.Read requests. Metadata for recent messages with attachments is checked, and only eligible property statement or invoice PDFs are processed in your browser. Global providers may process information overseas. Contact for access, correction or complaints.