Privacy Policy

ALANNA — PRIVACY POLICY

Aumré Financial Group (ABN 96 530 234 923)

Effective date: 4 July 2026 · Version 1.0

1. Who we are

Aumré Financial Group (ABN 96 530 234 923) (“Aumré”, “we”, “us”) operates Alanna, an AI assistant that answers general Australian tax questions, available on our website. This Privacy Policy explains how we collect, hold, use and disclose personal information in connection with Alanna and our website, and how you can contact us about it. We are committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What we collect

• Account information: your name and email address from Google sign-in, and an account identifier.

• Your questions and Alanna’s answers: the text of questions you submit and the answers generated, kept as your conversation history.

• Payment information: your plan, purchase history and billing status. Card details are collected and held by our payment provider, Stripe — we do not see or store full card numbers.

• Usage and technical data: question counts, feature usage, device/browser type, IP address and logs used for security, fraud prevention and service improvement.

• Support communications: emails and messages you send us.

Please do not enter sensitive information. Alanna answers general questions and does not need your tax file number (TFN), bank account details, or another person’s personal information. Do not enter them. If TFNs are inadvertently submitted, we treat them under the Privacy (Tax File Number) Rule 2015 and delete them from stored history as soon as practicable.

3. Why we collect it (purposes)

• To provide Alanna — generating answers to your questions and maintaining your conversation history;

• To manage your account, subscription, billing, credits and renewals (including sending renewal reminders and receipts);

• To keep the service secure — detecting abuse, fraud and misuse, and enforcing fair use;

• To improve the service — analysing aggregated, de-identified usage patterns and testing answer quality;

• To meet our legal obligations, including tax, consumer-law and professional record-keeping obligations; and

• With your consent, to send you service updates or marketing (you can opt out at any time; we comply with the Spam Act 2003 (Cth)).

We do not use your questions or personal information to train AI models, and we do not sell personal information.

4. Who we disclose it to

We disclose personal information only as needed to operate Alanna, to the following categories of recipients:

Overseas disclosure (APP 8). Some providers above process data outside Australia (principally the United States). Before disclosing personal information overseas we take reasonable steps — including contractual safeguards — to ensure it is handled consistently with the APPs.

5. How we hold and protect it

Personal information is held in access-controlled cloud systems with encryption in transit and at rest, multi-factor access controls for administrators, logging and monitoring, and regular security patching, as set out in our Data Security & Incident Response Policy. We retain personal information only as long as needed for the purposes above and our legal record-keeping obligations, then delete or de-identify it. Conversation history is retained while your account is active and deleted or de-identified within 90 days of account closure, except where law requires longer retention.

6. Data breaches

We maintain a data breach response plan under the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act). If a data breach involving your personal information is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required.

7. Cookies and analytics

Our website uses strictly necessary cookies (sign-in and security) and, if enabled, privacy-respecting analytics to understand aggregate usage. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling necessary cookies may prevent sign-in.

8. Automated processing and AI (automated decision-making transparency)

What is automated: Alanna uses a computer program (an AI language model with retrieval from our curated knowledge base) to generate answers to the questions you type. The kinds of personal information used in this program are: the text of your question (and any personal information you choose to include in it) and your conversation context. Automated systems are also used to count your question usage against your plan, to detect abusive or automated traffic, and to route questions to an appropriate AI model.

What is not automated: No decision that produces a legal or similarly significant effect on you — such as refusing you a refund, terminating your account, or giving you personal tax advice — is made solely by a computer program. Account suspension, complaint outcomes and refunds are decided by a person. Alanna’s answers are general information, not decisions about you.

You can ask us to review anything an automated system has done — for example, a fair-use throttle — by contacting us (section 10).

9. Access, correction and your choices

• You may request access to, or correction of, the personal information we hold about you. We will respond within 30 days and will not charge for making a request.

• You may download or delete your conversation history from your account settings, and may close your account at any time.

• You may opt out of marketing at any time using the unsubscribe link or by contacting us.

10. Complaints and contact

Privacy questions and complaints: Aumré Financial Group — accountant@aumregroup.com.au — +61 480 162 221 — 14 Molesworth Crescent, Donnybrook VIC 3064. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

11. Changes to this policy

We may update this policy from time to time. The current version is always available on our website; material changes will be notified by email or in-app before they take effect.