Privacy Policy

This Privacy Policy explains how Halyard Studios Pty Ltd, trading as Treldy (Treldy, we, us or our), handles personal information when you visit our websites, use our accounting platform, contact us or otherwise interact with us.

We are based in Sydney, New South Wales, Australia. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply.

1. The information we collect

The kinds of personal information we may collect include:

• Account and identity information, such as your name, email address, profile image, authentication identifiers, login activity and multi-factor authentication status.
• Business and financial information, such as business names, ABNs, contacts, invoices, bills, bank transactions, account balances, tax records and supporting documents.
• Payroll information, such as employee details, tax file numbers, pay, superannuation and leave information. Some of this may be sensitive or otherwise subject to additional legal protection.
• Payment information, such as subscription status and billing contact details. Payment card details are handled by our payment provider rather than stored directly by us.
• Connected-service information that you authorise us to obtain from services such as Xero, banks, Google or Microsoft.
• Communications and support information, including messages, feedback, emails and attachments you send to us or direct to an account-specific Treldy address.
• Technical and usage information, such as IP address, device and browser information, pages viewed, diagnostic events, cookie or similar identifiers and security logs.

If you provide us with personal information about another person, you must be authorised to do so and, where required, tell them about this Policy.

2. How we collect information

We collect personal information:

• directly from you when you create an account, use Treldy or contact us;
• from other people in your organisation who add you or enter information about you;
• from third-party services you choose to connect;
• automatically when you use our websites and services; and
• where permitted, from public records or service providers.

3. Google and Microsoft sign-in data

If you choose to sign in with Google or Microsoft, we receive the basic account information you approve, which may include your name, email address, profile image and a provider-specific account identifier. We use this information to create or link your Treldy account, authenticate you, protect the service and provide account support.

Signing in does not by itself give Treldy access to your Google Drive, Microsoft OneDrive, email, contacts or other files. If we offer a separate integration that requires additional information, we will show the permissions requested and ask you to authorise that connection. Our use of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

You can stop using social sign-in by contacting us, and you can revoke Treldy's access through your Google or Microsoft account settings. Revoking access does not automatically delete information already held in your Treldy account; see Your choices and rights below.

4. How we use personal information

We may use personal information to:

• provide, operate and improve Treldy;
• authenticate users, manage accounts and keep the service secure;
• process accounting, invoicing, payroll, reporting and connected-service requests;
• process subscriptions and send service communications;
• provide support and respond to enquiries or complaints;
• detect, investigate and prevent fraud, misuse and security incidents;
• monitor performance, diagnose faults and understand product usage;
• meet our legal, tax, regulatory and record-keeping obligations; and
• establish, exercise or defend legal claims.

Some Treldy features use artificial intelligence to analyse information and produce suggestions, classifications, forecasts, summaries or draft records. These outputs can be wrong and should be reviewed by an authorised user. We do not use your business content to advertise to you.

5. When we share information

We may disclose or make personal information available:

• to people you authorise and other users in your Treldy organisation;
• to providers that support hosting, authentication, payments, email, analytics, monitoring, customer support, document processing and artificial intelligence;
• to third-party services you connect or direct us to use;
• to professional advisers, insurers, auditors and potential transaction counterparties;
• where required or authorised by law, regulation, a court or government authority; or
• to protect the rights, safety and security of Treldy, our users or others.

We do not sell personal information.

6. Overseas disclosure and processing

Treldy's primary application infrastructure is configured in Australia. However, some providers and their subprocessors store or process personal information overseas, including in the United States and other countries in which they or their subprocessors operate. This may include identity, email, payment, monitoring and artificial-intelligence providers. Overseas privacy protections may differ from those in Australia.

7. Storage, security and retention

We use technical and organisational safeguards designed to protect personal information, including access controls, encryption where appropriate, authentication controls, logging and monitoring. No system is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as reasonably needed to provide the service, meet our legal and regulatory obligations, resolve disputes and enforce agreements. Retention periods vary by the type of information. When information is no longer required, we take reasonable steps to delete or de-identify it, subject to backups, legal holds and mandatory record-keeping requirements.

8. Cookies and analytics

We use cookies, local storage and similar technologies where needed for authentication, security, preferences and service operation. We also use analytics to understand website and product use. You can control cookies through your browser, but blocking essential storage may prevent parts of Treldy from working.

9. Your choices and rights

You may ask to access or correct personal information we hold about you, request deletion of your account information, or make a privacy complaint. You can also update certain information within Treldy and disconnect third-party integrations through the relevant account settings.

To make a request, email hello@treldy.com. We may need to verify your identity and authority before acting. We will respond within a reasonable period and, if we refuse a request, will explain why where required by law. Some information cannot be deleted immediately because of legal, security, backup or financial record-keeping obligations.

10. Privacy complaints

Please send privacy complaints to hello@treldy.com with enough detail for us to investigate. We will acknowledge and investigate your complaint and aim to respond within 30 days. If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner at oaic.gov.au.

11. Children

Treldy is a business service and is not directed to children under 18. If you believe a child has provided personal information to us without appropriate consent, please contact us.

12. Changes to this Policy

We may update this Policy to reflect changes to Treldy, our information practices or the law. We will publish the updated version here and change the date above. If a change is material, we will take reasonable steps to notify affected users.

13. Contact us

Halyard Studios Pty Ltd trading as Treldy
Sydney, New South Wales, Australia
hello@treldy.com