Who we are
Wealth MS is a product of IO Corp Pty Ltd, based in Sydney, New South Wales, Australia. In this policy, "we" and "us" mean IO Corp Pty Ltd.
This policy explains how we collect, use, store and disclose personal information, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It covers this website and the Wealth MS app.
What we collect
When you create an account, we collect your name, email address and sign-in details. If you sign in with Google, Google gives us your name and email address. If you use a password, we store only a secure hash of it, never the password itself.
We hold the information you or your funds give us about your household and investments: the people, trusts, companies and super funds in your household, and the funds, holdings, valuations, transactions and commitments recorded against them.
We receive the emails and attachments that funds send to your private Wealth MS addresses, and anything you forward to those addresses. These documents usually include personal information about you and others in your household, such as names, addresses and investor account numbers.
When you use the app, we record usage and device information, such as when you sign in, your IP address, your browser and device, and the changes you make. We use it to run the service, keep it secure and fix problems.
We use cookies only to sign you in and keep your session secure. We don't use advertising cookies or trackers.
How we collect it
We collect personal information from you, from the funds that email your private addresses, from Google if you choose to sign in with Google, and automatically when you use the app.
If you give us information about other people, such as members of your household, please make sure they know you have done so and that this policy applies to it.
Why we use it
We use personal information to:
- provide Wealth MS: process the documents your funds send, record the figures and show you your portfolio
- keep accounts secure and prevent misuse
- bill you for the service
- contact you about your account and about changes to the service
- meet our legal obligations.
We don't sell personal information, and we don't use it for advertising.
Where it is stored and who processes it
We store and process your data in the Amazon Web Services (AWS) Sydney region. It is encrypted in transit and at rest.
We use service providers to run Wealth MS, such as Amazon Web Services for hosting, storage and email, Google if you choose to sign in with Google, and a service that reports errors in the app to us. They may use personal information only to provide their services to us.
Who we disclose it to
We disclose personal information only:
- to the service providers described above
- to people you give access to your household's account
- when the law requires or authorises it
- with your consent.
Disclosure outside Australia
We store and process your data in Australia. If a service provider handles any personal information outside Australia, we take reasonable steps, as APP 8 requires, to make sure it handles that information consistently with the APPs.
If you sign in with Google, Google handles that sign-in under its own privacy policy, and may do so outside Australia.
How long we keep it
We keep your information while your account is open, so your history and documents stay available to you. If you ask us to close your account, we will delete or de-identify your information within a reasonable time, unless the law requires us to keep some of it, such as billing records. Copies held in backups are removed as those backups expire.
How we protect it
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, change or disclosure. In particular:
- your data is stored in AWS Sydney and encrypted in transit and at rest
- each fund sends to its own private address, which can't be guessed and which you can replace at any time
- every incoming email is scanned for viruses and spam
- repeated failed sign-ins lock the account for a short time, and you can see your sessions and sign out of the others
- Wealth MS is read-only and can't move money.
Access and correction
You can see and update most of your information in the app. You can also ask us for the personal information we hold about you, or ask us to correct it, by writing to hello@wealthms.com.au. We will respond within a reasonable time, usually within 30 days. If we refuse a request, we will tell you why in writing and how you can complain.
Using Wealth MS without identifying yourself
You can browse this website without telling us who you are. To use the app, you need to give us your name and email address, because we can't run an account or bill you otherwise.
Complaints
If you are concerned about how we have handled your personal information, write to us at hello@wealthms.com.au. We will acknowledge your complaint and aim to respond within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.
Data breaches
If a data breach is likely to cause you serious harm, we will notify you and the OAIC as the Notifiable Data Breaches scheme requires.
Changes to this policy
We may update this policy. We will post the new version on this page with a new date and, if the changes are significant, tell you by email.
Contact
IO Corp Pty Ltd
Sydney, NSW, Australia
hello@wealthms.com.au