Privacy Policy

Part One — What You Need to Know

This section is a plain-English summary of how Tiora handles your personal information. The full details follow in Part Two. Both parts form one complete Privacy Policy.

Who we are

Tiora Pty Ltd is an Australian company providing family archive and memory preservation services. We are based in Newport, NSW, Australia. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect and why

We collect the information needed to deliver your archive and run your account. This includes your name, email address, payment details and the family materials you upload. We do not collect more than we need.

How we store and protect it

Your data is stored on secure cloud infrastructure. We take reasonable technical and organisational steps to protect it from misuse, interference and unauthorised access. We do not store payment card details ourselves — payments are handled by a third party processor.

Who we share it with

We do not sell your information. We share it only with the service providers needed to deliver the platform, and only under confidentiality obligations. We will disclose information to authorities where required by law.

How long we keep it

We keep your information for as long as your account is active. On account closure your data is held for 90 days to allow export and is then permanently deleted.

Your rights

You may request access to the personal information we hold about you, ask us to correct anything that is inaccurate, and ask us to delete your information subject to our legal obligations.

Cookies and analytics

We use cookies to keep you logged in and to understand how the platform is used. We do not use advertising cookies or sell data to advertisers.

Children

The platform is not intended for use by children under 13. Founders are responsible for managing access granted to minors within their archive.

Contact

For any privacy questions or requests write to us at privacy@tiora.life.

Part Two — Full Policy

1. About this policy

This Privacy Policy explains how Tiora Pty Ltd collects, holds, uses and discloses personal information.
We are bound by the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles contained in that Act.
By using the platform you consent to the collection and handling of your personal information as described in this policy.
We may update this policy from time to time. We will notify you of material changes. Continued use of the platform following notification constitutes acceptance.

2. What personal information we collect

Account information: your name, email address, phone number and any identity verification documents provided during account setup or Co-Custodian appointment.
Payment information: billing name, address and transaction records. Payment card details are processed and stored by our payment processor and are not retained by Tiora.
Archive content: photographs, documents, audio and video files, metadata and notes that you upload or create within the platform.
Family structure information: names, relationships and access roles associated with members of your archive.
Usage information: log data, device type, browser type, IP address and interactions with the platform.
Communications: messages you send to Tiora including support requests and feedback.
We collect personal information directly from you when you create an account, complete a purchase, upload content or contact us.
We may also collect information about invited Users when a Founder adds them to an archive. Founders are responsible for ensuring invited Users are aware of this policy.

3. Why we collect it

Deliver and maintain the platform and archive services.
Process payments and manage your account.
Verify identity for roles requiring authorisation.
Communicate with you about your account and our services.
Respond to support requests.
Improve and develop the platform.
Comply with our legal obligations.
We will not use your personal information for any purpose unrelated to delivering the platform services without your consent.

4. How we store and protect your information

Personal information and archive content is stored on secure cloud infrastructure located in Australia or in jurisdictions with equivalent data protection standards.
We take reasonable technical and organisational steps to protect your information from misuse, interference, loss, unauthorised access, modification and disclosure. These measures include encrypted data transmission, access controls and regular security reviews.
Where personal information is stored or processed outside Australia, we take reasonable steps to ensure that the overseas recipient handles the information consistently with the Australian Privacy Principles.
No method of transmission or storage is completely secure. In the event of a data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

5. Third party disclosure

We do not sell, rent or trade your personal information.
We may share personal information with third party service providers who assist us in delivering the platform, including cloud storage providers, payment processors and communication tools. All third party providers are engaged under confidentiality obligations and may only use your information to deliver services to Tiora.
We may disclose personal information where required or authorised by law, including to law enforcement or regulatory authorities.
We will not otherwise disclose your personal information to any third party without your written consent.
If Tiora is acquired by or merged with another entity, your personal information may be transferred as part of that transaction. We will notify you before any such transfer and you will have the opportunity to close your account and export your data.

6. Data retention and deletion

We retain your personal information for as long as your account is active and for as long as necessary to comply with our legal obligations.
On account closure, your data is retained for 90 days to allow export. After that period it is permanently deleted from our systems unless we are required by law to retain it for longer.
You may request deletion of your personal information at any time by contacting privacy@tiora.life. We will action deletion requests within 30 days subject to any legal obligations that require us to retain certain records.
Backups may retain deleted data for a further period of up to 30 days. This residual data is not accessible to users and is purged on the standard backup cycle.

7. Access and correction rights

You have the right to request access to the personal information Tiora holds about you.
You have the right to request correction of any personal information that is inaccurate, out of date, incomplete or misleading.
To make an access or correction request write to privacy@tiora.life. We will respond within 30 days. We may need to verify your identity before providing access.
We will not charge a fee for access requests.
If we decline an access or correction request we will explain why in writing and advise you of your right to complain to the Office of the Australian Information Commissioner.

8. Cookies and analytics

We use cookies and similar technologies to operate the platform, keep you logged in and remember your preferences.
We use analytics tools to understand how the platform is used in aggregate. This information is used to improve the platform and is not linked to identifiable individuals where this can be avoided.
We do not use advertising cookies. We do not share cookie data with advertisers or data brokers.
You may disable cookies through your browser settings. Disabling certain cookies may affect platform functionality including the ability to stay logged in.

9. Children's privacy

The platform is not directed at children under the age of 13 and we do not knowingly collect personal information from children under 13 without parental consent.
Founders may grant archive access to minors within their family. In doing so the Founder takes responsibility for that access and for ensuring it is appropriate.
If we become aware that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete that information promptly.
Parents or guardians who believe their child's information has been collected without consent should contact us at privacy@tiora.life.

10. Complaints

If you have a concern about how we have handled your personal information, please contact us first at privacy@tiora.life. We will investigate and respond within 30 days.
If you are not satisfied with our response you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

11. Contact

For all privacy enquiries, access requests and complaints:

privacy@tiora.life
Tiora Pty Ltd
Newport, NSW, Australia
tiora.life