Privacy Policy

Last updated: 2026-09-15

DRAFT — pending owner review and legal sign-off before this is presented as final to registering users (see issue #20/#33). Bracketed items below still need a decision or a real value.

This Privacy Policy explains how Yieldtally (ABN 24 551 248 991) ("we", "us", "our") collects, uses, and stores personal information when you use Yieldtally (the "Service").

1. What we collect

Account information

• Name
• Email address
• Password (stored using industry-standard one-way hashing — we never see or store your plaintext password)

Financial data you enter

• Holdings, transactions, dividends, splits, and mergers you record in the Service. This is data about your own investments that you choose to enter — we don't pull it from a broker or bank.

Automatically collected

• Standard server logs (IP address, timestamps, request metadata) for security and debugging purposes.

We don't collect payment information — Yieldtally doesn't currently process payments.

2. How we use it

• To provide the Service: authenticate you, store and display your portfolio data, and perform calculations (returns, franking estimates, cost basis, etc.) on your behalf.
• To send transactional emails: account verification, password reset, notice of material updates to the Terms of Service or this Privacy Policy, and similar account-related notices.
• To maintain security and diagnose issues.

We don't use your data for advertising, and we don't sell it to third parties.

3. Who we share it with

• A market data provider — used to source prices, dividends, splits, and delisting status for the tickers you track. We send ticker/exchange identifiers to this provider to fetch data; we don't send your personal account information or holdings quantities.
• An email delivery provider — used to send verification and password-reset emails. Your email address is shared with this provider for that purpose only.
• An infrastructure hosting provider — where all data is stored.

We don't share your data with any other third party except where required by law.

4. Where your data is stored

Data is stored on servers located in [region — confirm hosting region]. By using the Service, you consent to this.

5. How long we keep it

We keep your account and financial data for as long as your account is active. If you delete your account, we delete your personal information and financial data within [X days], except where we're required to retain records for legal or security purposes (e.g. server logs kept for a limited period).

6. Your rights

Under the Privacy Act 1988 (Cth), you can:

• ask what personal information we hold about you;
• ask us to correct inaccurate information;
• ask us to delete your account and associated data.

To exercise any of these, contact us at [privacy contact email].

7. Security

We take reasonable steps to protect your information, including storing passwords using industry-standard one-way hashing and restricting access to production data. No online service can guarantee absolute security, and you're responsible for keeping your login credentials confidential.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, which becomes the recorded version accepted by new registrations, and notified to you by email.

9. Contact

Questions about this policy, or to make a privacy request: privacy@yieldtally.com.au

Back to registration