How we handle your information.

Who we are and how to contact us

We are based in Sydney, New South Wales. For any privacy question, to access or correct your information or to make a complaint, contact us at support@allhere.au.

What All Here is

All Here is a private record-keeping and visualisation tool. You enter your own information about what you own, owe and hold, and the Platform organises it, tracks it over time and lets you share it with people you choose. It does not move money and it does not pull data from your bank: every figure in your record is entered by you or calculated from what you enter. Where you enter an amount in a foreign currency, we convert it to Australian dollars using a published exchange rate recorded at the time you save, and we show you that rate.

Future features. If we introduce optional features that source information from third parties, such as bank balance syncing, property value data or listed share prices, we will update this Policy to describe them before they are released and we will notify you before the change takes effect. Until then, all financial information in your record is entered by you or calculated from what you enter.

The information we collect

• Account information: your name and email address.
• Authentication information: sign-in is handled by our authentication provider. Two-factor sign-in is required. We do not store your password or your two-factor secrets. Your password is held only by our authentication provider in hashed form, and your two-factor secret is held only by that provider.
• The information you enter (your record): your assets, liabilities, entities, ownership, contact details and property details, including addresses and capital improvements. This can include sensitive financial information about you and your household. We store structured data only. We do not store uploaded property documents such as title deeds or contracts.
• Technical and usage information: your IP address, device and browser information, log data and usage data. We use this for security, to prevent abuse and to keep the Platform running well.
• Payment information: your billing details are handled by our payment provider, Stripe. We do not store your full card details.

How we collect your information

We collect information directly from you when you sign up and when you enter information into the Platform. We collect technical information automatically when you use the Platform. We may also receive information when another member invites you to see their record, or you invite someone to see yours, and from the service providers who help us run the Platform.

Why we use your information

We use your information to provide and operate the Platform, to authenticate and secure your account, to save month-end snapshots and show you trends, to run the Ask All Here feature and the modelling tools on your own information at your request, to support you, to send you essential account and service messages, to send product updates and marketing where you have consented, to detect and prevent fraud and misuse and to meet our legal obligations. We do not sell your personal information, and we do not use it for automated decisions that significantly affect you without human involvement.

Ask All Here, the modelling tools and automated processing

All Here uses some automated processing. Ask All Here and the modelling tools use the information you have entered to answer your factual questions and to work out calculations and projections, at your request. We also use automated systems for sign-in, security and to keep the Platform running.

The personal information these systems use is the information in your own record, such as your assets, liabilities, entities, ownership and property details, together with your account and technical information. To answer a question, relevant information from your record and the recent conversation is sent to our AI provider, which is located outside Australia and is listed in the table below. Your questions and answers are not stored by All Here. Our AI provider does not use them to train its models and retains them only for a limited period for safety monitoring in accordance with its terms.

These systems do not make decisions about you. They explain and calculate using your own figures. We do not use automated processing, including the AI feature, to make any decision that produces a legal or similarly significant effect on you, and there is no solely automated decision-making in All Here. You can ask us how the AI feature or the modelling works, ask us to explain or check a result or ask for a person to review any concern.

Sharing your record with people you choose

Your record is private by default. If you choose to share it, sharing is consent-based and two-sided: you invite or nominate a person, and they consent when they accept. You can ask us to remove access at any time. Household sharing is available now. Adviser sharing and an executor or nominee access mode are planned and not yet available. When you share your record, the person you choose can see the information you have shared, so please only share with people you trust. Anyone given access must keep your information confidential and use it only for the purpose for which it was shared.

Information about people who are not members. A member may enter personal information about people who are not members, for example the name and contact details of their accountant, solicitor or property manager, or details of household and family members. We hold that information only so it appears in the member's own record, we do not use it for marketing and we do not disclose it except as set out in this Policy. If your details have been entered by a member, you can contact us at support@allhere.au to ask what is held, or to have it corrected or deleted, and this Policy serves as our notice to you of that collection.

Our service providers, and information that goes overseas

We use the service providers below to run the Platform. Your core record is hosted in Australia, in Sydney. Some providers operate outside Australia, so some information is disclosed overseas. Where we disclose personal information to an overseas recipient, we take reasonable steps under Australian Privacy Principle 8 to ensure it is handled consistently with Australian privacy law.

We also share information when:

• the law requires it, or to protect our rights, your safety or the safety of others;
• we engage professional advisers, or providers who help with fraud prevention, analytics or security, under confidentiality and data protection arrangements; or
• you have given us your consent.

Marketing and your choices

Essential account and service messages are part of your subscription and will continue while you have an account. We send product updates and marketing only where you have consented, and you can opt out at any time using the unsubscribe link in the message or by contacting us. Our marketing complies with the Spam Act 2003 (Cth). Member emails are sent through our email provider, Resend.

Cookies and tracking

The Platform uses cookies and similar technologies for sign-in, session security and two-factor device trust. We also collect aggregate page-performance measurements. We do not use advertising or cross-site tracking cookies. You can manage or block cookies in your browser settings, though some features may not work as well if you do.

How we keep your information secure

We take the security of your information seriously and maintain reasonable physical, electronic and procedural safeguards. These include data hosted in Australia, encryption in transit and at rest, row-level isolation so each person can read only their own data and data shared with them, mandatory two-factor sign-in, writes that pass through a controlled server boundary rather than the browser and error monitoring with personal data scrubbed before it leaves the Platform. We do not store your password or two-factor secrets, and we do not store your full card details. No system is completely secure, so we cannot promise your information will be secure in all circumstances. If an eligible data breach occurs, we will notify you and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

Accessing and correcting your information

You can ask us what personal information we hold about you and to have it corrected. We will respond within 30 days, unless doing so would affect another person's rights, and we will tell you if we cannot comply and why.

Deleting your data and closing your account

• You can delete individual records at any time, and you can ask us to delete your account and the information associated with it.
• When you close your account, we remove access to your record for you and anyone you shared it with. We keep your information only for as long as we need it for the purposes described in this Policy or as the law requires, and then we delete or de-identify it. If your subscription ends without you closing your account, your record stays as it is so you can continue if you subscribe again, and you can close your account at any time.
• We keep the financial and transaction records connected with your subscription, such as your billing details, invoices and payment records, for 7 years. This is to meet our obligations under the Corporations Act 2001 (Cth) and tax law. We hold that information only for those purposes, and then we destroy or de-identify it.
• We keep an append-only audit log of changes to your record for security and integrity. Where an audit entry forms part of our financial records, we keep it for 7 years; otherwise we keep it only for as long as we reasonably need it for security and legal compliance.

Children

The Platform is intended for adults. It is not directed at, and should not be used by, anyone under 18, and we do not knowingly collect personal information from children. Where the Children's Online Privacy Code applies, we will comply with it.

Making a complaint

If you have a concern about how we handle your information, please contact us at support@allhere.au so we can try to resolve it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au. Australian privacy law also allows individuals to take court action for serious invasions of privacy in certain circumstances.

Changes to this Policy

We may update this Policy from time to time to reflect changes to our practices or the law. The current effective date is shown at the top, so you always know you are reading the latest version.