Privacy Policy
Effective Date: 15 January 2025
At Glowly Ignite, we take your privacy seriously. This isn't just another copy-paste policy — we actually care about how your information gets handled. Running financial analysis software means we work with sensitive data, and that responsibility doesn't escape us.
This policy explains what we collect, why we need it, and what happens to it. We've written it in plain English because nobody has time to decode legal jargon. If something's unclear, reach out. We're real people on the other end.
Our operations are based in Australia, which means we follow Australian privacy laws — specifically the Privacy Act 1988 and the Australian Privacy Principles (APPs). But our commitment to your privacy goes beyond just ticking compliance boxes.
Privacy Officer Contact:
228 Keira St, Wollongong NSW 2500, Australia
Phone: +61 3 9579 2322
Email: contact@glowly-ignite.com
What Information We Collect
Look, we only grab what we actually need. Here's the breakdown of what that includes:
Personal Information You Give Us
When you sign up or use our services, we collect:
- Your name and contact details (email, phone number if you provide it)
- Business information if you're using our tools for company purposes
- Payment details when you subscribe to our services (processed securely through third-party providers)
- Communication history when you contact our support team
Financial Data You Upload
Our software analyzes financial information. Depending on how you use the platform, this might include:
- Transaction records and financial statements
- Budget data and expense reports
- Revenue projections and financial forecasts
- Custom data sets you upload for analysis
Important bit: We never sell this data. Ever. It stays with us and gets used solely for providing you the analysis you requested.
Technical Information
Like most websites, we automatically collect some technical stuff:
- IP address and browser type
- Device information and operating system
- How you navigate through our platform
- Login timestamps and feature usage patterns
This helps us fix bugs, improve performance, and honestly just make the software work better.
How We Use Your Information
We're not in the business of hoarding data for the sake of it. Everything we collect serves a specific purpose:
Primary Use: To provide the financial analysis tools and services you signed up for. That's the core reason we have your information.
Service Delivery
- Processing your financial data through our analysis algorithms
- Generating reports and insights based on your uploaded information
- Managing your account and subscription
- Providing customer support when you need help
Platform Improvement
We analyze usage patterns (in aggregate, not individual behavior) to understand what features work well and what needs fixing. This might involve looking at which tools get used most, where people get stuck, or what causes errors.
Communication
We'll email you about:
- Service updates or changes to your account
- Security alerts if something looks off
- Responses to your support requests
- Occasional product updates (you can opt out of these)
We don't spam. Our team gets enough email as it is — we're not about to add to anyone else's inbox chaos unless it matters.
Legal Obligations
Sometimes we're required by law to use or disclose information. This happens rarely, but when it does, it's typically in response to valid legal processes or to protect our rights and the safety of our users.
How We Protect Your Data
Security isn't just a checkbox for us. Financial data requires serious protection, and we've built multiple layers of security into our systems.
Technical Security Measures
- End-to-end encryption for data transmission using TLS 1.3 protocol
- AES-256 encryption for data at rest in our databases
- Regular security audits and penetration testing by third-party experts
- Multi-factor authentication options for user accounts
- Automated backup systems with encrypted storage
- Firewalls and intrusion detection systems monitoring 24/7
Organizational Security Measures
- Strict access controls — only authorized personnel can access user data
- Regular security training for all team members
- Confidentiality agreements with all staff and contractors
- Incident response protocols ready to deploy if needed
- Regular review and updates of security policies
That said, no system is 100% impenetrable. We do everything reasonably possible to protect your data, but we also recommend using strong passwords and enabling two-factor authentication on your end.
Your Rights Under Australian Privacy Law
The Australian Privacy Principles give you specific rights regarding your personal information. Here's what you can do:
Access Your Data
You can request a copy of the personal information we hold about you. We'll provide it within 30 days, usually sooner.
Correct Inaccuracies
Found something wrong? Let us know and we'll fix it. You can update most information directly in your account settings.
Delete Your Data
Want to close your account and remove your data? You can request deletion at any time. We'll wipe it within 30 days, except what we're legally required to keep.
Restrict Processing
You can ask us to limit how we use your information in certain circumstances, like if you're disputing the accuracy of data.
Data Portability
Need to move your data elsewhere? We can provide your information in a commonly used, machine-readable format.
Lodge a Complaint
If you're not happy with how we've handled your privacy, you can complain to us or to the Office of the Australian Information Commissioner.
How to Exercise These Rights
Email us at contact@glowly-ignite.com with your request. We'll need to verify your identity first (for obvious security reasons), then we'll action your request. Most things can be sorted within a couple of weeks.
Data Retention and Deletion
We don't keep your data forever. Here's our retention approach:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active Account Data | Duration of account | Required to provide ongoing service |
| Financial Analysis Data | Duration of account + 90 days | Allow for report access and account recovery |
| Payment Information | 7 years | Australian tax law requirements |
| Support Communications | 3 years | Service improvement and dispute resolution |
| Marketing Preferences | Until you opt out | Respect your communication choices |
| System Logs | 12 months | Security monitoring and troubleshooting |
When data reaches the end of its retention period, we securely delete it. That means proper data wiping, not just moving it to a trash folder.
Account Closure: If you close your account, we'll delete your financial data within 90 days. Some information (like payment records) needs to stick around longer for legal reasons, but we'll remove everything else.
Sharing Your Information
We're not in the business of selling user data. But there are specific situations where we share information with third parties:
Service Providers
Some functions require third-party services:
- Payment Processors: Stripe handles our payment processing. They receive payment information but not your financial analysis data.
- Cloud Infrastructure: We use AWS servers in Australia for hosting. They provide infrastructure but can't access your data.
- Email Services: For sending account notifications and support responses.
- Analytics Tools: To understand how the platform performs (using anonymized data).
All these providers are bound by strict confidentiality agreements and can only use data for the specific services they provide to us.
Legal Requirements
We'll disclose information if required by law, such as in response to:
- Court orders or subpoenas
- Government agency requests with proper legal authority
- Situations where disclosure might prevent serious harm
If we receive such a request, we'll notify you unless legally prohibited from doing so.
Business Transfers
If Glowly Ignite is acquired or merges with another company, your information would likely be part of that transfer. We'd notify you beforehand and ensure the new entity honors this privacy policy.
International Data Transfers
Our servers are located in Australia, and we store data locally. However, some of our service providers operate internationally, which means your data might be processed in other countries.
When this happens, we ensure:
- Adequate data protection measures are in place
- Transfer mechanisms comply with Australian privacy law
- Service providers maintain security standards equivalent to ours
- Contractual protections govern how data can be used
Countries where data might be processed include the United States (for cloud infrastructure services). We've verified these providers comply with recognized privacy frameworks.
Cookies and Tracking Technologies
Yes, we use cookies. But let's be specific about what that means:
Essential Cookies
These keep the platform working. They remember you're logged in, maintain your session, and handle security. You can't disable these without breaking the service.
Analytics Cookies
These help us understand how people use the platform. We see things like which features get used most, where errors occur, and how long people spend on different pages. This data is anonymized.
Managing Cookies
Your browser settings let you control cookies. You can block or delete them, though this might affect how the platform works. Most browsers have instructions for cookie management in their help sections.
Children's Privacy
Our services aren't designed for anyone under 18. We don't knowingly collect information from children. If we discover we've accidentally collected data from someone under 18, we'll delete it immediately.
Parents or guardians who believe we might have information about a child should contact us straight away.
Changes to This Policy
We'll update this policy occasionally as our practices evolve or laws change. When we make significant changes, we'll notify you via email and update the effective date at the top.
Minor tweaks (like clarifying wording) won't trigger notifications, but the updated version will always be available on this page. We recommend checking back periodically, especially if you haven't looked in a while.
Continuing to use our services after changes take effect means you accept the updated policy.
Security Incidents
Despite our best efforts, security incidents can happen. If a breach occurs that's likely to result in serious harm to you, we'll notify you within 72 hours of becoming aware of it.
We'll also notify the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme under Australian privacy law.
Our notification will explain what happened, what information was affected, and what steps we're taking to address the situation. We'll also provide guidance on what you can do to protect yourself.