Privacy Policy
Last updated: 2 October 2026
1. Who we are
Saia da Teoria is operated by GPF IT SOLUTIONS PTY LTD (ABN 57 638 578 140), an Australian private company. In this policy, “we”, “us” and “our” refer to that entity.
2. What the platform does
Saia da Teoria is a private budgeting and personal finance management platform. It helps invited users organise financial records, view factual summaries and track goals. It does not provide financial product advice.
3. Information we collect
Depending on the features you use, we may collect account details, contact information, profile preferences, financial records you enter, uploaded transaction files, product usage and support communications. If you use the contact form on our website, we collect the name, email address, subject and message you submit, plus the technical signals needed to check that the request is not automated. We do not currently collect CDR data through live bank connections. Our proposed approach is described in the CDR readiness statement.
4. Why we use it
We use personal information to provide and secure the platform, authenticate users, display their financial records, operate requested features, respond to support requests, maintain audit and security records, and comply with applicable law. We do not sell personal information.
5. Service providers and overseas processing
We use specialist service providers for hosting, authentication, database infrastructure, application deployment, communications and bank connectivity. These include Supabase, Vercel and Railway; Resend, which delivers contact-form messages to us; Cloudflare, which provides DNS, email routing and the Turnstile check that protects the contact form from automated abuse; and, for bank connectivity, Fiskil. Providers may process information in Australia or other jurisdictions under their contractual and security arrangements.
6. Security
We use role-based access controls, encrypted network connections, server-side secrets, tenant isolation, audit controls and data minimisation. No online service can guarantee absolute security, and users should protect their credentials and notify us of suspected unauthorised access.
7. Retention and deletion
We retain information only while it is needed to provide the service, meet legal obligations, resolve disputes and maintain security. Users may request access, correction or deletion. Some records may be retained where Australian law requires it. If live CDR access is enabled, its consent, retention and deletion requirements will be documented separately before launch.
8. Access, correction and complaints
To request access or correction, close an account, or make a privacy complaint, email contact@saiadateoria.com. We aim to acknowledge complaints promptly and provide a substantive response within 30 days. You may also contact the Office of the Australian Information Commissioner.
9. Website cookies and tracking
This website does not use advertising or analytics cookies, and we do not run analytics or tracking scripts on it. The contact form uses Cloudflare Turnstile to tell people from automated traffic; Turnstile may read limited browser signals and set a technical cookie for that purpose only. The signed-in application is separate and stores the session and preference data it needs to work.
10. Data breaches
If we become aware of a data breach that is likely to result in serious harm, we will assess it promptly and notify affected people and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme. Report suspected unauthorised access to contact@saiadateoria.com.
11. Changes
We may update this policy as the product or legal requirements change. Material changes will be communicated through the platform or by email where appropriate.