Privacy Policy

1. About This Policy

This Privacy Policy describes how Krrisp Pty Ltd (ACN: 609 221 570), operator of Klaris ("we", "us", "our"), collects, uses, stores, and protects your information when you use our wealth-structure record platform ("Klaris" or the "Platform").

We are committed to protecting your privacy in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

By using our Platform, you agree to the collection, use, and storage of your information as described in this policy. If you do not agree, please do not use the Platform.

2. Information We Collect

Account Information

When you create an account, we collect:

• Full name
• Email address
• Account authentication information handled through secure authentication systems
• Account type (Client or Advisor)
• Payment or access-arrangement information where paid access applies

Financial Structure Data

When you use the Platform, you may enter:

• Entity information (trusts, companies, SMSFs, partnerships)
• Asset details and ownership structures
• Beneficiary and trustee information
• Financial relationships and connections between entities
• Notes and documents related to your structures

Usage Information

We automatically collect certain information about how you use the Platform:

• Pages visited and features used
• Time spent on the Platform
• Browser type and device information
• IP address (anonymised in analytics)
• Referring website

Cookies

We use essential cookies to maintain your session and preferences. We may also use analytics cookies to understand how the Platform is used. You can manage cookie preferences through your browser settings or our cookie consent tool.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Platform and its features.
• Process paid access arrangements where applicable.
• Send transactional emails such as account, support, and security notifications.
• Facilitate advisor-client collaboration when you grant access.
• Improve the Platform based on anonymous usage analytics.
• Respond to your support requests and communications.
• Comply with our legal obligations under Australian law.

Marketing Opt-Out

We may occasionally send product updates or newsletters to your registered email address. You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at info@klaris.com.au. Opting out of marketing does not affect transactional emails related to your account.

4. Data Storage and Security

Australian Client Focus

Security Measures

We implement comprehensive security measures to protect your data:

• Secure handling - We use recognised security practices to protect information as it moves through the Platform.
• Controlled access - Access is limited to authorised users and support purposes that are necessary to provide the service.
• Operational safeguards - We use internal controls and review processes to reduce the risk of unauthorised access or misuse.
• Account protection - Users are expected to keep account credentials secure and report any suspected unauthorised access promptly.

Access Controls

Klaris staff do not have routine access to user financial structure data. Administrative access is role-restricted and used for platform operations, support, security, and audit purposes. For full details, please see our Data Security Policy.

5. Data Sharing and Third Parties

Third-Party Services

We share limited data with the following service providers:

• Payment providers - Used where paid access applies. We do not store full card details on our own systems.
• Email providers - Used to send account, support, and security communications.
• Analytics providers - Used to understand website and product usage, subject to cookie consent settings where applicable. Financial structure data is not used for advertising.

No Data Selling

We do not sell, rent, or trade your personal information or financial structure data to any third party. We do not use your data for advertising purposes. We do not share your data with data brokers.

Advisor Access

If you grant an advisor access to your account, they will be able to view your financial structure data as permitted by the access level you set. You control advisor access and can revoke it at any time. Advisors are bound by their own professional obligations regarding client data confidentiality.

6. Data Retention and Deletion

Active Accounts

We retain your data for as long as your account is active and as needed to provide you with the Platform services. Account and financial structure data is maintained while your account remains active or as otherwise agreed.

After Account Closure

When you close your account:

• Your financial structure data will be deleted within 90 days of account closure.
• Basic account records may be retained as required by Australian tax and business law (up to 7 years for financial transaction records).
• Anonymised usage data may be retained for analytics purposes.

Account Deletion

You can request complete deletion of your account and data by contacting us at info@klaris.com.au. We will process deletion requests within 30 days and confirm completion via email.

7. Your Rights Under Australian Privacy Law

Under the Australian Privacy Act 1988, you have the right to:

• Access - Request a copy of the personal information we hold about you.
• Correct - Request correction of any inaccurate or incomplete personal information.
• Delete - Request deletion of your personal information (subject to legal retention requirements).
• Export - Request a copy of your financial structure data in a portable format.
• Withdraw Consent - Withdraw consent for marketing communications at any time.
• Lodge a Complaint - Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached your privacy.

8. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies - Required for the Platform to function (session management, authentication). These cannot be disabled.
• Analytics Cookies - Used to understand how the Platform is used. These can be disabled through your browser settings or our cookie consent tool.

We do not use advertising cookies or tracking pixels. We do not participate in ad networks or retargeting programs.

9. International Data Transfers

Klaris is operated for Australian families, advisers, and firms. Some account, payment, email, analytics, support, or operational metadata may be handled by trusted service providers under contractual and privacy safeguards.

10. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information as soon as possible. If you believe a child has provided us with personal information, please contact us at info@klaris.com.au.

11. Data Breach Notification

In the event of a data breach that is likely to result in serious harm, we will:

• Notify affected individuals as soon as practicable.
• Notify the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches (NDB) scheme.
• Provide information about the nature of the breach, the type of information involved, and recommended steps to protect yourself.
• Take reasonable steps to contain the breach and prevent future occurrences.

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date at the top of this policy.
• For material changes, we will notify you via email or in-app notification.
• Continued use of the Platform after changes constitutes acceptance of the updated policy.
• We encourage you to review this policy periodically.

13. Complaints and Disputes

If you believe we have breached your privacy or the Australian Privacy Principles, you can:

1. Contact us first - Email us at info@klaris.com.au with details of your complaint. We will investigate and respond within 30 days.
2. Escalate to the OAIC - If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner:

14. Contact Information

If you have questions about this Privacy Policy or how we handle your data, please contact us: