1. Introduction

CGT BRAIN is committed to protecting your privacy. This policy explains how we handle your personal and financial data when you use CGT BRAIN to assess Capital Gains Tax (CGT) exemptions in Australia.

2. The Types of Data We Collect

To provide accurate CGT assessments, we may collect the following:

• •Identity Data: Name, email address, and contact details when you create an account.
• •Financial & Asset Data: Purchase/sale dates, cost base amounts, asset types (e.g., type of real estate property/dwelling), and residency status.
• •Usage Data: IP addresses, device type, and how you interact with the tool.
• •Sensitive Information: We generally do not require your Tax File Number (TFN). Users are advised not to enter TFNs or bank account numbers into the App.

3. How We Use Your Data

We use your information strictly for the following purposes:

• •CGT Assessment: To process your inputs and determine potential tax exemptions.
• •App Improvement: To analyze de-identified, aggregated data to improve our calculation logic.
• •Compliance: To meet our legal and regulatory obligations within Australia.
• •Support: To respond to your inquiries or technical issues.

4. Data Storage and Sovereignty

• •Local vs. Cloud Storage: CGT BRAIN data is uploaded to a local host and cloud server for record storage purposes.
• •Australian Hosting: Where possible, we strive to host data on servers located within Australia to ensure it remains subject to Australian privacy protections.
• •Retention: We retain your data only as long as necessary to provide the service or as required by law.

5. Disclosure of Information

We do not sell your personal or financial data to third parties. We may only disclose your information:

• •With your explicit consent (e.g., if you choose to "Export to my Accountant").
• •To third-party service providers (e.g., cloud hosting) who are contractually bound to protect your data.
• •If required by law, such as a valid request from a law enforcement agency or a court order.

6. Data Security Measures

We implement industry-standard security to protect your financial inputs, including:

• •Encryption: Data is encrypted both in transit (SSL/TLS) and at rest.
• •Access Control: Strict internal policies to ensure only authorized personnel can access system back-ends.
• •Anonymization: Financial data used for analytics is stripped of all personally identifiable information.

7. Your Rights (Access and Correction)

Under the Privacy Act, you have the right to:

• •Access the personal information we hold about you.
• •Request that we correct any inaccurate information.
• •Request the deletion of your account and associated data (the "Right to be Forgotten").

8. Changes to this Policy

We may update this policy to reflect changes in Australian law or our data practices. We will notify you of significant changes via the App or email.

9. Contact Us / Complaints

If you have questions or wish to lodge a complaint about a privacy breach, please contact our Privacy Officer at CGT Brain.