Privacy Policy

Last updated: 10 November 2026

1. Who We Are

MyAndGo is operated by Fintech Development Pty Ltd (ABN 78 655 608 969), located at Level 1, 18-20 Knuckey Street, Darwin NT 0800, Australia. In this policy, "we", "us", and "our" refer to Fintech Development Pty Ltd.

2. Information We Collect

We collect the following personal information:

Account information: name, email address, phone number, company name, job title
Authentication data: Firebase Auth credentials, 2FA settings
Billing information: Stripe manages all payment data. We store your Stripe customer ID but never your credit card details.
Usage data: pages visited, features used, session duration (via Google Analytics)
Device information: browser type, operating system, IP address

3. How We Use Your Information

To provide and maintain the MyAndGo platform and connected products
To authenticate your identity across the MyAndGo ecosystem
To process subscriptions and billing
To send transactional notifications (billing, security alerts, account changes)
To send marketing communications (with your consent, and you can opt out at any time)
To improve our products and user experience
To comply with legal obligations

4. Australian Privacy Principles

We comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). We are committed to protecting the privacy of your personal information.

5. Where your information is stored

Your content is stored in Australia. The information you keep in our products, such as documents, records, files and messages, is stored in Google Cloud's australia-southeast1 region in Sydney.

Some services that run your account are provided by specialist companies, and some of them operate outside Australia. Each works under a data-protection agreement and handles only what it needs to provide its service.

What it does	Provider	Where it runs	What it handles
Stores your content	Google Cloud	Sydney, Australia	Everything you keep in our products
Sign-in	Google Firebase Authentication	United States	Your name, email address and sign-in method
Sign-in with Google or Microsoft	Google, Microsoft	Their global services	The sign-in itself, under their own terms
Payments	Stripe	United States and other countries	Billing contact and payment details
Email	Amazon Web Services (SES)	Sydney, Australia	Email addresses and message content
Email	Twilio SendGrid	United States	Email addresses and message content
Text messages	Twilio	United States	Mobile numbers and message content
Phone calls	Twilio	United States	Phone numbers, and call audio while a call is in progress
Website analytics	Google Analytics	Google's global data centres	How our website is used
Website delivery and security	Cloudflare	Global network	Connection details such as your IP address

We don't sell your personal information.

6. Data Sharing

MyAndGo ecosystem products: your account, subscription, and authentication data is shared across products you use (SignAndGo, ShareAndGo, etc.) to enable single sign-on and unified billing

7. Data Security

AES-256 encryption at rest
Encryption in transit
Two-factor authentication (TOTP) available
Bank-style session timeouts (15 minutes)
Role-based access control
Automated tests and dependency checks in our build process
Secrets managed via Google Secret Manager

8. Cookies and Analytics

We use:

Google Analytics (GA4): to understand how our platform is used. GA4 collects anonymised usage data.
No session recording: we do not record your screen, your mouse movement or your keystrokes, and we do not use heatmap or replay tools anywhere on this platform.
Essential cookies: for authentication and session management. These are required for the platform to function.

9. Your Rights

Under the Privacy Act, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your account and personal data
Opt out of marketing communications
Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

10. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, we retain data for 30 days (for recovery purposes) before permanent deletion. Billing records are retained for 7 years as required by Australian tax law.

When your account closes, we keep a scrambled copy of your email address so that we can keep you off our marketing emails. When a Product asks us to, we keep a scrambled record (a one-way code made from your email address or business number, never the address or number itself) that you have had a free trial of that Product, so the same person or business can't start a second one.

11. Children's Privacy

MyAndGo is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or in-app notification. The "last updated" date at the top of this page reflects the most recent revision.

13. Contact Us

If you have questions about this privacy policy or your personal data, contact us at:

Email: privacy@support.myandgo.com.au
Address: Level 1, 18-20 Knuckey Street, Darwin NT 0800, Australia