Skip to main content

Privacy Policy

Last updated: 13 May 2025

Grit 2 Gains Pty Ltd ABN 83 682 158 729 ("we", "us", "our") is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains how we collect, use, and safeguard your data.

1. Information We Collect

We collect the following types of information:

  • Personal information you provide directly — name, email address, and business details when you create an account.
  • Financial data accessed via your connected Xero account — invoices, bills, contacts, and financial reports — in read-only mode.
  • Device and usage information — IP address, browser type, and pages or features accessed, collected automatically for security and to improve the service.

2. How We Use Your Information

We use your information to provide the service, display financial insights, and improve the product. We do not sell your data to third parties.

We may also use your financial data in an anonymised and aggregated form to generate industry benchmarks that are displayed within the application. This processing removes all identifying information before any aggregation occurs — your individual business figures are never shared with or visible to other users.

3. Industry Benchmarking

Grit 2 Gains provides benchmarking features that compare your business metrics against industry averages. To produce these averages, we process financial data from consenting users in aggregate. The following protections apply:

  • Data is anonymised before aggregation — no individual business is identifiable in benchmark outputs.
  • Benchmark results reflect statistical averages across multiple businesses and are never sourced from a single user.
  • Your raw financial figures are never disclosed to other users or third parties.

4. Data Storage and Overseas Transfer

Your data is stored on secure cloud infrastructure. Our hosting provider may operate servers in various locations, including outside Australia (such as Singapore or other regions). By using the service, you consent to your personal information being transferred to and stored on servers that may be located overseas.

We take reasonable steps to ensure any overseas data processors protect your information in a manner consistent with the Australian Privacy Principles. Where we engage third-party infrastructure providers, we require them to maintain appropriate security standards.

We retain your personal information for a minimum of 7 years to comply with Australian tax and accounting record-keeping obligations, or longer if required by law. After this period, we will take reasonable steps to destroy or permanently de-identify your information.

5. Third-Party Services

We integrate with the following third-party services, each of which has its own privacy policy. We only share the minimum data necessary for each provider to perform their function, and we require them to maintain appropriate security and confidentiality standards:

  • Xero — accounting data integration (read-only)
  • Stripe — payment processing and subscription management
  • Railway — cloud hosting and infrastructure

We also disclose personal information where required by law or regulatory authorities.

6. Cookies

We use session cookies solely to keep you logged in during your session. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You may disable cookies in your browser settings, but some features of the app (including staying logged in) will not function without them.

7. Your Rights

Under the Australian Privacy Principles you have the right to access, correct, or request deletion of your personal information. To exercise any of these rights, contact us at tech@grit2gains.com.au.

We may require you to verify your identity before we release or correct your personal information. We may also charge a reasonable administrative fee to cover the cost of providing access to your information.

8. Complaints

If you believe we have not handled your personal information in accordance with this policy or the Australian Privacy Principles, please contact us in the first instance at tech@grit2gains.com.au. If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or via a notice in the application. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, please contact us at tech@grit2gains.com.au.

Grit 2 Gains Pty Ltd — ABN 83 682 158 729