Privacy Policy

Effective Date / Last Updated: 14 July 2025

1. Scope and Purpose

This Privacy Policy explains how Chickenbudget Pty Ltd (ABN 00 000 000 000), a company incorporated in Western Australia (“ChickenBudget,” “we,” “us,” or “our”), collects, uses, discloses, and protects Personal Information when you (“you” or “User”) access or use the ChickenBudget software‑as‑a‑service platform, mobile applications, and related services (collectively, the “Service”).

2. Key Definitions

• Personal Information — information about an identified or reasonably identifiable individual (Australian Privacy Act 1988 (Cth)); includes “Personal Data” under the EU GDPR.
• Processing — any operation performed on Personal Information, such as collection, storage, use, disclosure, or deletion.
• Controller — the entity that determines the purposes and means of Processing Personal Information. For the Service, ChickenBudget is the Controller for account‑level data; farms may be Controllers for content they upload.

3. Information We Collect

3.1 Information You Provide

• Account Data — name, email address, phone number, business name, and password.
• Farm Content — flock records, sensor readings, invoices, images, videos, documents, and any other data you upload (“User Content”).
• Billing Details — payment‑card numbers, billing addresses, and tax identifiers (processed by PCI‑compliant providers).
• Support Communications — messages, attachments, and call recordings you exchange with our support team.

3.2 Information We Collect Automatically

• Log Data — IP address, browser type, referring pages, timestamps, and request metadata.
• Device Information — OS, device identifiers, mobile network, and localisation settings.
• Usage Analytics — feature interactions, click paths, and performance metrics captured via first‑party cookies and telemetry SDKs.

3.3 Information from Third Parties

We may receive data from payment processors, authentication providers (e.g., Google Workspace, Microsoft 365), sensor vendors, bookkeeping platforms, and government databases when you connect integrations.

4. Legal Bases for Processing

Where the GDPR applies, we rely on one or more of the following:

• Contractual Necessity — to create and maintain your account and deliver the Service.
• Legitimate Interests — to improve security, detect fraud, and develop new features.
• Consent — for optional marketing communications and non‑essential cookies (you may withdraw at any time).
• Legal Obligation — to comply with tax, accounting, and regulatory requirements.

5. How We Use Information

1. Provide, operate, and maintain the Service.
2. Process transactions and send billing notifications.
3. Respond to enquiries, troubleshoot issues, and provide customer support.
4. Analyse usage to enhance performance, develop new modules, and train machine‑learning models.
5. Send product updates, security alerts, and administrative messages.
6. Comply with legal obligations and enforce our Terms of Use.

6. How We Share Information

• Service Providers — cloud hosting, payment processing, email delivery, analytics, and customer‑support partners bound by confidentiality agreements.
• Legal Disclosures — when required by law, subpoena, or court order, or to protect rights, property, or safety.
• Business Transfers — in connection with a merger, acquisition, or sale of assets (we will provide notice before Personal Information becomes subject to a different privacy policy).
• Aggregated Data — de‑identified statistics used for benchmarking or research that cannot reasonably identify you.

7. Cookies & Similar Technologies

We use cookies, local storage, and pixel tags to:

• Authenticate sessions and maintain login states.
• Remember user preferences (e.g., language, time zone).
• Measure site traffic and feature adoption.

You can control cookie preferences via browser settings or in‑app banners; disabling certain cookies may impair functionality.

8. International Data Transfers

Data is primarily stored in AWS Asia‑Pacific (Sydney) Region. Where data is transferred outside Australia or the European Economic Area, we use legally recognised mechanisms such as Standard Contractual Clauses or ensure the recipient is subject to an adequacy decision.

9. Security Measures

We employ AES‑256 encryption at rest, TLS 1.3 in transit, role‑based access control, regular penetration testing, and 24 × 7 monitoring. No system is perfect; therefore, we urge you to keep credentials confidential and implement multifactor authentication.

10. Data Retention

We retain Personal Information for the duration of your Subscription Plan plus a maximum of sixty (60) days, unless a longer period is required by law or to resolve disputes. Back‑ups are purged on a rolling ninety‑day schedule.

11. Your Privacy Rights

11.1 Australian Privacy Act Rights

You may request access to, or correction of, Personal Information we hold about you by emailing privacy@chickenbudget.com.

11.2 GDPR Rights

If you are located in the European Economic Area or the United Kingdom, you have the right to:

• Access, rectify, or erase Personal Data;
• Restrict or object to Processing;
• Data portability; and
• Lodge a complaint with a supervisory authority.

11.3 California Consumer Rights

California residents may exercise CCPA rights to know, delete, or opt‑out of “sale” of Personal Information (ChickenBudget does not sell Personal Information in the conventional sense).

12. Children’s Privacy

The Service is intended for users aged 18 and older. We do not knowingly collect Personal Information from children under 13. If you believe a minor has provided data, contact us to delete it.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in technology, legislation, or our practices. Material changes will be announced via email or in‑app banner at least thirty (30) days before they take effect.

14. Contact Us

For privacy‑related enquiries or to exercise your rights, please write to:

Chickenbudget Pty Ltd — Privacy Officer
91 FarmTech Crescent
Perth WA 6000, Australia
Email: privacy@chickenbudget.com

— End of Privacy Policy —