Privacy Policy
DT Corp Pty Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal information when you use Report Craft ("the Service"). We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Information We Collect
We collect the following types of information:
- Account information — name, email address, and password (stored as a one-way hash) when you register.
- Firm information — your accounting firm name and any branding assets (e.g. logo) you upload.
- OAuth tokens — access and refresh tokens issued by QuickBooks Online or Xero when you connect a client. We never receive or store your clients' accounting package passwords.
- Financial data — account names, account codes, and period balances fetched from connected accounting packages and cached locally to generate reports.
- Usage data — log data such as IP addresses, browser type, pages visited, and actions taken within the Service, used for security and performance monitoring.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Service.
- Generate financial reports on your behalf.
- Authenticate users and maintain account security, including two-factor authentication.
- Send transactional emails (e.g. password resets, account notifications).
- Respond to support requests.
- Comply with legal obligations.
We do not use your clients' financial data for any purpose other than generating reports for you.
3. Disclosure of Information
We do not sell, rent, or trade your personal information. We may disclose information to:
- Service providers — third parties who assist us in operating the Service (e.g. hosting, email delivery), bound by confidentiality obligations.
- Third-party accounting platforms — QuickBooks Online and Xero, to the extent necessary to fetch data on your behalf via OAuth.
- Law enforcement or regulators — where required by law or to protect the rights, property, or safety of DT Corp Pty Ltd, our users, or others.
4. Data Storage and Security
Your data is stored on servers located in Australia. We use industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews to protect your information from unauthorised access, disclosure, alteration, or destruction.
Despite these measures, no method of transmission or storage is completely secure. We cannot guarantee absolute security.
5. Data Retention
We retain your account and financial data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete your personal information within 90 days, except where we are required to retain it for legal or compliance purposes.
6. Your Rights
Under the Australian Privacy Principles you have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or out-of-date information.
- Request deletion of your personal information, subject to legal obligations.
- Complain about a breach of the APPs.
To exercise any of these rights, contact us at support@reportcraft.com.au.
7. Cookies
The Service uses session cookies necessary for authentication and secure operation. We do not use third-party tracking or advertising cookies.
8. Third-Party Links
The Service may contain links to third-party websites (e.g. QuickBooks, Xero). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
9. Children's Privacy
The Service is intended for use by accounting professionals and is not directed at children under 18. We do not knowingly collect personal information from children.
10. Changes to this Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via the Service. The effective date at the top of this page will be updated accordingly.
11. Complaints
If you believe we have breached the Australian Privacy Principles, please contact us first at support@reportcraft.com.au. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
12. Contact
Privacy enquiries can be directed to:
DT Corp Pty Ltd
support@reportcraft.com.au