Privacy Policy

ALYRT Limited is committed to protecting your privacy and handling your personal information responsibly and in accordance with New Zealand privacy laws. This policy explains how we collect, use, store, share, and protect your personal information when you use the ALYRT platform (the "Service").

1 · Introduction

ALYRT Limited ("ALYRT," "we," "us," or "our") is committed to protecting your privacy and handling your personal information responsibly and in accordance with New Zealand privacy laws.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the ALYRT platform (the "Service").

By using the Service, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, you must not use the Service.

2 · Information We Collect

2.1 Information You Provide Directly

When you create an account or use the Service, you may provide us with:

• Account Information: Name, email address, phone number, job title, company name
• Authentication Information: Username, password, security questions, two-factor authentication details
• Business Information: Company registration details, director information, business structure, industry type
• Payment Information: Billing address, payment method details (processed through third-party payment processors)
• Support Communications: Messages, feedback, questions, or requests you send to us

2.2 Financial and Business Data

To provide the Service, we collect and process:

• Accounting Data: Financial statements, trial balances, general ledger data, invoices, receipts
• Bank Transaction Data: Bank account transactions, balances, cash flow information
• Tax and Compliance Data: GST returns, PAYE filings, tax obligations, IRD correspondence
• Business Registry Data: Companies Office records, PPSR registrations, directorship information
• Scenario and Planning Data: Business forecasts, cashflow projections, scenario models you create

2.3 Usage and Technical Information

We automatically collect information about how you use and interact with the Service:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages viewed, features used, time spent on platform, click patterns, navigation paths
• Log Data: Access times, error logs, system events, API calls
• Cookies and Tracking: See our Cookie Policy for details on cookies and similar technologies

3 · How We Use Your Information

3.1 To Provide and Improve the Service

• Create and manage your account
• Process and analyze your financial data to generate alerts and insights
• Generate AI-powered cash flow forecasts and risk assessments
• Monitor compliance obligations and generate compliance alerts
• Provide scenario planning and financial modelling tools
• Maintain, improve, and develop new features and functionality
• Troubleshoot technical issues and provide customer support

3.2 AI and Machine Learning

We use artificial intelligence and machine learning to analyze your data and provide intelligent insights. This includes:

• Training AI models to improve pattern recognition and predictive accuracy
• Generating automated alerts based on data patterns
• Creating cashflow forecasts and financial projections
• Identifying potential risks and compliance issues

Your specific business data is used to generate insights for you. We may use aggregated, anonymized data to improve our AI models, but we do not share your identifiable business data with other users.

3.3 Communications

• Send you service-related notifications (account changes, security alerts, system updates)
• Deliver alerts and warnings generated by the platform
• Respond to your inquiries and support requests
• Send you product updates, newsletters, and marketing communications (with your consent)

3.4 Legal and Compliance Purposes

• Comply with legal obligations and regulatory requirements
• Enforce our Terms of Service and other agreements
• Protect our rights, property, and safety, and that of our users
• Detect, prevent, and address fraud, security issues, or technical problems
• Respond to law enforcement requests and court orders

4 · How We Share Your Information

4.1 We DO NOT Sell Your Data

We do not sell, rent, or trade your personal information or business data to third parties for their marketing purposes.

4.2 Service Providers and Partners

We may share your information with trusted third-party service providers who help us operate the Service:

• Cloud Hosting Providers: To host and store your data securely
• Payment Processors: To process subscription payments and billing
• Data Integration Partners: To connect with accounting systems, banks, and business registries
• Analytics Providers: To analyze usage patterns and improve the Service
• Customer Support Tools: To provide technical support and customer service
• Email Service Providers: To send notifications and communications

All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Professional Advisors (With Your Consent)

ALYRT includes a directory of independent professional advisors (accountants, lawyers, insolvency practitioners). If you choose to share information with an advisor through the platform, we will facilitate that connection only with your explicit consent.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Court orders, subpoenas, or other legal processes
• Requests from government authorities or regulatory bodies
• Legal claims, disputes, or investigations
• Emergencies involving potential threats to safety or security

4.5 Business Transfers

If ALYRT is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have.

5 · Data Security

5.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Role-based access, multi-factor authentication, strong password requirements
• Network Security: Firewalls, intrusion detection, regular security monitoring
• Data Backups: Regular automated backups stored in secure, geographically distributed locations
• Security Testing: Regular vulnerability assessments and penetration testing
• Incident Response: Security incident monitoring and response procedures

5.2 Limitations

While we take security seriously, no system is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately of any unauthorized access.

6 · Your Rights and Choices

Under New Zealand privacy law (Privacy Act 2020), you have the following rights:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your information (subject to legal and operational requirements)
• Export: Request a copy of your data in a portable format
• Objection: Object to certain uses of your information
• Withdrawal of Consent: Withdraw consent for marketing communications or optional data processing

To exercise these rights, contact us at support@alyrt.ai.

7 · Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. When you close your account, we will delete or anonymize your data within 90 days, unless we are required to retain it for legal, regulatory, or legitimate business purposes.

Retention periods vary by data type:

• Account Information: Retained while your account is active, plus 90 days after closure
• Financial Data: Retained for 7 years to comply with New Zealand tax and accounting laws
• Support Communications: Retained for 3 years
• Log and Usage Data: Retained for 12 months

8 · International Data Transfers

Your information may be processed and stored on servers located outside New Zealand, including in Australia and the United States. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and New Zealand privacy laws.

9 · Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10 · Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy.

11 · Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:

ALYRT Limited
Privacy Officer
Email: support@alyrt.ai
Phone: 0800 ALYRT NZ

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Privacy Commissioner: www.privacy.org.nz