At Avanzu, we are committed to protecting your privacy and handling your data with transparency and care. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our R&D tax incentive management platform.
When you create an account or use our services, we collect:
When you sign in using Google OAuth, we collect your Google account email address, full name, and avatar photo/profile picture.
When you connect your Xero account to Avanzu, we request read-only access to the following Xero data:
Important: We only request read-only access to Xero. Avanzu does not write to, modify, or update any data in your Xero account.
We automatically collect device information (browser type, operating system, IP address), usage data (features used, pages viewed, time spent), log data (access times, errors, performance metrics), and cookies and similar tracking technologies.
If you are located in the European Economic Area (EEA), we process your personal data based on:
We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:
We engage trusted service providers who assist in operating our platform, including cloud hosting providers, payment processors, email service providers, and analytics providers. These providers are bound by strict confidentiality agreements and may only use your data to perform services on our behalf.
Your Xero data is accessed through Xero's API with your explicit authorisation. We comply with Xero's Developer Platform Terms and data handling requirements.
We may disclose information when required by law, court order, or government request, or to protect our rights, property, or safety, prevent fraud or security threats, or enforce our Terms of Service.
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to this Privacy Policy.
We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL) and at rest, secure authentication and access controls, regular security audits, employee training on data protection, and secure cloud infrastructure with redundancy and backups. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
We retain your personal information for as long as necessary to provide our services and maintain your account, comply with legal, tax, and accounting obligations (typically 7 years for financial records), and resolve disputes and enforce our agreements. When you delete your account, we will delete or anonymise your personal data within 90 days, except where retention is required by law.
To exercise these rights, contact us at privacy@avanzu.com.
We use cookies and similar technologies to maintain your logged-in session, remember your preferences, analyse usage, and provide security. You can control cookies through your browser settings, but disabling certain cookies may affect platform functionality.
Our platform may contain links to third-party websites (e.g., Xero, Google). We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies.
Avanzu is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will delete it promptly.
Your data may be processed and stored in countries outside your residence, including Australia and the United States. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission and adequacy decisions recognising equivalent data protection standards.
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new "Last Updated" date, notify you of material changes via email or platform notification, and obtain your consent where required by law. Your continued use of Avanzu after changes constitutes acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at privacy@avanzu.com.
For Xero-related data inquiries, you may also contact Xero at xero.com/au/about/legal/privacy.
Avanzu