Introduction
This Privacy Policy explains how Cavari Pty Ltd ("Cavari", "we", "us") collects, uses, and discloses personal information through the Accreta platform.
We are committed to protecting your privacy and complying with the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles, and applicable data protection regulations including the EU GDPR.
Information we collect
We collect information directly from you when you create an account, use the platform, or contact us:
- Account details (name, work email, role, firm)
- Profile information (preferences, mandate criteria, notification settings)
- Workspace data (mandates, universes, outreach activity, documents, analytics)
- Communications (support requests, feedback, sales conversations)
- Technical information (IP address, browser, device, log data, cookies)
How we use your information
We use the information we collect to:
- Provide and operate the Accreta platform
- Authenticate users and prevent unauthorised access
- Improve product performance, reliability, and user experience
- Communicate with you about your account, support, and platform updates
- Comply with legal obligations and enforce our terms
Data retention
We retain personal information for as long as your account is active and as needed to provide the platform. Aggregated, anonymised data may be retained indefinitely. You can request deletion of your account at any time; some data may be retained for legal, audit, or operational reasons (typically up to 7 years).
Security
We apply institutional-grade security controls including:
- Encryption at rest (AES-256) and in transit (TLS 1.3)
- Role-based access controls and audit logs on every action
- Multi-factor authentication, SSO support, and session management
- Continuous security monitoring, vulnerability scanning, and incident response
See our Security page for full details.
Your rights
Depending on your jurisdiction, you may have rights to:
- Access, correct, or delete your personal information
- Object to or restrict processing
- Receive your data in a portable format
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
Email privacy@cavari.com.au to exercise any of these rights.
International transfers
Data may be processed in Australia, the United States, or other regions where our service providers operate. Appropriate safeguards (Standard Contractual Clauses, adequacy decisions where applicable) are in place for cross-border transfers.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via the platform or by email. Continued use after a change constitutes acceptance.
Contact
For privacy enquiries, contact privacy@cavari.com.au or write to Cavari Pty Ltd, Perth, Western Australia.