Privacy Policy

Last updated: 12 April 2026

1. Who We Are

MyAndGo is operated by Fintech Development Pty Ltd (ABN 78 655 608 969), located at Level 1, 18-20 Knuckey Street, Darwin NT 0800, Australia. In this policy, "we", "us", and "our" refer to Fintech Development Pty Ltd.

2. Information We Collect

We collect the following personal information:

  • Account information: name, email address, phone number, company name, job title
  • Authentication data: Firebase Auth credentials, 2FA settings
  • Billing information: Stripe manages all payment data. We store your Stripe customer ID but never your credit card details.
  • Usage data: pages visited, features used, session duration (via Google Analytics and Microsoft Clarity)
  • Device information: browser type, operating system, IP address

3. How We Use Your Information

  • To provide and maintain the MyAndGo platform and connected products
  • To authenticate your identity across the MyAndGo ecosystem
  • To process subscriptions and billing
  • To send transactional notifications (billing, security alerts, account changes)
  • To send marketing communications (with your consent, and you can opt out at any time)
  • To improve our products and user experience
  • To comply with legal obligations

4. Australian Privacy Principles

We comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). We are committed to protecting the privacy of your personal information.

5. Data Storage and Residency

All personal data is stored in Google Cloud's australia-southeast1 (Sydney) region. This includes:

  • Firebase Authentication data
  • Cloud Firestore databases
  • Cloud Run compute services
  • Cloud Storage files

All your data is stored and hosted in Australia (the Sydney region), and data at rest never leaves Australia. Some AI-powered features (for example, content assistance and image generation) send your inputs to specialist AI providers that may process them overseas (currently the United States). This happens under contractual data-protection agreements consistent with Australian Privacy Principle 8 (cross-border disclosure); those providers process your inputs only to deliver the feature and do not use your data to train their models.

6. Data Sharing

We do not sell your personal information. We share data only with:

  • Stripe — for payment processing (Stripe's privacy policy applies to payment data)
  • Google Cloud — as our infrastructure provider (data remains in Sydney)
  • AI providers — where you use an AI-powered feature, your inputs are sent to providers such as Anthropic and Google (Vertex AI) to generate the result. They may process inputs overseas (currently the United States) under data-protection agreements and do not use your data to train their models.
  • MyAndGo ecosystem products — your account, subscription, and authentication data is shared across products you use (SignAndGo, ShareAndGo, etc.) to enable single sign-on and unified billing

7. Data Security

  • AES-256 encryption at rest
  • TLS 1.3 encryption in transit
  • Two-factor authentication (TOTP) available
  • Bank-style session timeouts (15 minutes)
  • Role-based access control
  • Regular security audits
  • Secrets managed via Google Secret Manager

8. Cookies and Analytics

We use:

  • Google Analytics (GA4) — to understand how our platform is used. GA4 collects anonymised usage data.
  • Microsoft Clarity — for session recording and heatmaps to improve UX. Sensitive form fields are masked.
  • Essential cookies — for authentication and session management. These are required for the platform to function.

9. Your Rights

Under the Privacy Act, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and personal data
  • Opt out of marketing communications
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

10. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, we retain data for 30 days (for recovery purposes) before permanent deletion. Billing records are retained for 7 years as required by Australian tax law.

11. Children's Privacy

MyAndGo is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or in-app notification. The "last updated" date at the top of this page reflects the most recent revision.

13. Contact Us

If you have questions about this privacy policy or your personal data, contact us at: