Privacy Policy

Introduction

xapport Pty Ltd ("xapport", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our loan documentation platform.

Information We Collect

Account Information

• Name, email address, and company details
• Billing and payment information
• Login credentials

Financial Data

• Loan agreements and related documents
• Shareholder and director information
• Company structure and ownership data
• Financial data retrieved from Xero (with your authorization)

Usage Information

• Log data and analytics
• Device and browser information
• IP addresses and location data

How We Use Your Information

• Provide and maintain our services
• Generate loan documentation
• Sync with your Xero account
• Process payments and billing
• Send service updates and support communications
• Improve our platform and develop new features
• Ensure security and prevent fraud

Data Storage and Security

We store your data in secure, Australian-based data centers. We implement industry-standard security measures including:

• AES-256 encryption at rest
• TLS encryption in transit
• Regular security audits and penetration testing
• Multi-factor authentication
• Role-based access controls

Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who help us operate our platform (hosting, payment processing)
• Xero: When you authorize the integration, we access and sync data from your Xero account
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Your Rights

Under Australian Privacy Principles (APPs), you have the right to:

• Access your personal information
• Correct inaccurate or incomplete information
• Request deletion of your data (subject to legal retention requirements)
• Export your data in a portable format
• Withdraw consent for data processing
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

Data Retention

We retain your data for as long as your account is active. After account cancellation:

• Data is retained for 90 days to allow for account recovery
• After 90 days, data is permanently deleted unless required for legal or accounting purposes
• Financial records may be retained for 7 years to comply with Australian tax law

Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Understand how you use our platform
• Improve performance and user experience

You can control cookies through your browser settings.

International Data Transfers

Your data is stored in Australian data centers. If international transfer is necessary, we ensure appropriate safeguards are in place.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification.

Contact Us

If you have questions about this Privacy Policy or your data: