Privacy Policy
toralithyra Fundraising Platform
Last Updated: March 15, 2025
Introduction and Our Commitment
At toralithyra, we understand that when startups share their fundraising journey with us, they're trusting us with sensitive business information. This isn't something we take lightly. Our team has worked with hundreds of Australian startups over the years, and we've learned that transparency about data handling builds stronger relationships.
This privacy policy explains exactly how we collect, use, and protect your personal and business information. We comply with the Australian Privacy Principles under the Privacy Act 1988, and we've structured our practices around what startup founders have told us matters most to them.
Information We Collect
Personal Information
When you create an account or use our fundraising platform, we collect:
- Your name, email address, and phone number
- Company details including business registration numbers
- Professional background and experience
- Financial information related to fundraising activities
- Communication preferences and platform settings
Business and Financial Data
To provide effective fundraising support, we collect business-related information such as:
- Business plans and pitch deck materials
- Financial statements and projections
- Investor communications and meeting records
- Market research and competitive analysis
- Legal documents related to fundraising rounds
Technical Information
Our platform automatically collects certain technical data to improve functionality:
- IP addresses and device information
- Browser type and operating system
- Pages visited and time spent on platform
- Feature usage patterns and preferences
- Error logs and performance metrics
How We Use Your Information
We use your information to provide and improve our fundraising platform services. Here's what that looks like in practice:
| Purpose | Information Used | Legal Basis |
|---|---|---|
| Platform account management | Personal details, login credentials | Contract performance |
| Fundraising support services | Business data, financial information | Contract performance |
| Investor matching | Company profile, fundraising goals | Legitimate interest |
| Platform improvements | Usage analytics, feedback | Legitimate interest |
| Communications | Contact details, preferences | Consent/Contract |
Information Sharing and Disclosure
We don't sell your personal information. Period. However, there are specific situations where we share information as part of providing our services:
Investor Introductions
When you request introductions to potential investors, we share relevant business information with those investors. You always control which information gets shared and with whom.
Service Providers
We work with trusted third-party providers who help us deliver our services:
- Cloud hosting providers for secure data storage
- Payment processors for subscription and transaction handling
- Analytics providers to understand platform usage
- Communication tools for email and messaging services
- Legal and accounting firms for compliance support
All service providers sign strict data protection agreements and can only use your information for the specific services they provide to us.
Legal Requirements
We may disclose information when required by Australian law, including:
- Compliance with court orders or legal proceedings
- Cooperation with law enforcement investigations
- Meeting regulatory requirements for financial services
- Protecting against fraud or security threats
Your Rights and Controls
Under Australian privacy law, you have several rights regarding your personal information. We've made it straightforward to exercise these rights through your account dashboard or by contacting us directly.
Access and Correction
You can access and update most of your personal information directly through your account settings. For business data or information that requires verification, contact our support team. We'll provide access within 30 days of your request.
Data Portability
You can export your data from our platform at any time. This includes your business profiles, investor communications, and document uploads. We provide exports in standard formats that work with other business tools.
Deletion Requests
You can request deletion of your account and associated data. We'll delete your information within 60 days, though we may retain certain records as required by Australian business and tax laws. Active fundraising campaigns may require completion before full deletion.
Data Security and Protection
Security is fundamental to our platform design. We use multiple layers of protection because startup business information requires the highest level of security.
Technical Safeguards
- 256-bit SSL encryption for all data transmission
- AES-256 encryption for data storage
- Multi-factor authentication for account access
- Regular security audits and penetration testing
- Automated backup systems with geographic redundancy
- Access logging and monitoring for all system interactions
Operational Security
Our team follows strict security protocols:
- Background checks for all employees with data access
- Regular security training and awareness programs
- Principle of least privilege for system access
- Incident response procedures for security events
- Regular review and updates of security policies
Data Retention and Disposal
We keep your information only as long as necessary for providing services or as required by law. Here's our retention schedule:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account information | Active account + 2 years | Service provision, tax records |
| Business documents | Active account + 5 years | Legal compliance, audit requirements |
| Financial transactions | 7 years | Australian tax law requirements |
| Communication logs | 3 years | Dispute resolution, compliance |
| Technical logs | 12 months | Security monitoring, debugging |
When retention periods expire, we securely delete information using industry-standard data destruction methods. For physical storage media, we use certified destruction services that provide certificates of destruction.
International Data Transfers
While we primarily store data within Australia, some of our service providers may process information internationally. When this occurs, we ensure appropriate protections are in place:
Transfer Safeguards
- Standard contractual clauses for international transfers
- Adequacy decisions where available
- Additional security measures for sensitive business data
- Regular audits of international processing partners
We maintain a current list of countries where your data may be processed, available through your account dashboard or upon request.
Cookies and Tracking
We use cookies and similar technologies to improve your experience on our platform. You can control cookie settings through your browser, though some features may not work without certain cookies.
Cookie Categories
- Essential cookies: Required for basic platform functionality
- Performance cookies: Help us understand how you use the platform
- Functional cookies: Remember your preferences and settings
- Analytics cookies: Provide insights for platform improvements
Changes to This Policy
We review and update this privacy policy annually, or when significant changes occur to our services or legal requirements. When we make material changes, we'll notify you by email and through platform notifications at least 30 days before the changes take effect.
Notification Process
You'll receive updates about policy changes through your registered email address. Important changes will also appear in your account dashboard with clear explanations of what's changed and how it affects you.
Privacy Questions or Concerns?
Privacy Officer: toralithyra Privacy Team
Email: privacy@toralithyra.org
Phone: +61 7 4041 4896
Mail: Post Office Box 129, Toowoomba City QLD 4350, Australia
Response Time: We respond to privacy inquiries within 5 business days
This privacy policy was last reviewed and updated on March 15, 2025, to reflect current practices and legal requirements.