Privacy Policy

Part One — What You Need to Know

This section is a plain-English summary of how Tiora handles your personal information. The full details follow in Part Two. Both parts form one complete Privacy Policy.

Who we are

Tiora Pty Ltd is an Australian company providing family archive and memory preservation services. We are based in Newport, NSW, Australia. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect and why

We collect the information needed to deliver your archive and run your account. This includes your name, email address, payment details and the family materials you upload. We do not collect more than we need.

How we store and protect it

Tiora uses cloud and service providers in Australia and overseas. We use technical and organisational safeguards designed to reduce unauthorised access, loss and misuse. We do not store full payment card details ourselves — payments are handled by Stripe.

Who we share it with

We do not sell your information. We share it only with the service providers needed to deliver the platform, and only under confidentiality obligations. We will disclose information to authorities where required by law.

How long we keep it

We keep information while it is needed to provide the service and for applicable operational or legal purposes. You can request an export or account deletion. Scope and timing vary by system, backups and legal obligations, and will be confirmed when a request is made.

Your rights

You may request access to the personal information we hold about you, ask us to correct anything that is inaccurate, and ask us to delete your information subject to our legal obligations.

Cookies and analytics

We use essential, analytics, support and marketing technologies, including Google Analytics, Plausible, HubSpot and Meta. We do not sell archive content.

Children

The platform is not intended for use by children under 13. Founders are responsible for managing access granted to minors within their archive.

Contact

For any privacy questions or requests write to us at privacy@tiora.life.

Part Two — Full Policy

1. About this policy

This Privacy Policy explains how Tiora Pty Ltd collects, holds, uses and discloses personal information.
We are bound by the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles contained in that Act.
By using the platform you consent to the collection and handling of your personal information as described in this policy.
We may update this policy from time to time. We will notify you of material changes. Continued use of the platform following notification constitutes acceptance.

2. What personal information we collect

Account information: your name, email address, phone number and any identity verification documents provided during account setup or Co-Custodian appointment.
Payment information: billing name, address and transaction records. Stripe processes payment card details. Tiora does not receive or store full card details.
Archive content: photographs, documents, audio and video files, metadata and notes that you upload or create within the platform.
Family structure information: names, relationships and access roles associated with members of your archive.
Usage information: log data, device type, browser type, IP address and interactions with the platform.
Communications: messages you send to Tiora including support requests and feedback.
We collect personal information directly from you when you create an account, complete a purchase, upload content or contact us.
We may also collect information about invited Users when a Founder adds them to an archive. Founders are responsible for ensuring invited Users are aware of this policy.

3. Why we collect it

Deliver and maintain the platform and archive services.
Use automated tools and AI to prepare, classify and describe archive material as part of ScanOps and archive preparation.
Process payments and manage your account.
Verify identity for roles requiring authorisation.
Communicate with you about your account and our services.
Respond to support requests.
Improve and develop the platform.
Comply with our legal obligations.
We will not use your personal information for any purpose unrelated to delivering the platform services without your consent.

4. How we store and protect your information

Tiora uses cloud and service providers in Australia and overseas. Current service locations include Australia, India and the United States, with other locations possible where a provider operates a global network.
Archive material may be processed on Tiora-operated systems or through specialist AI service providers. General image analysis and within-Archive facial similarity processing are separate activities. AI-generated suggestions require human review before they are treated as confirmed archive information.
We use technical and organisational safeguards designed to reduce misuse, interference, loss, unauthorised access, modification and disclosure. Verified controls include encrypted connections on key service paths and role-based access controls. No system is completely secure.
Where personal information is stored or processed outside Australia, we take reasonable steps to ensure that the overseas recipient handles the information consistently with the Australian Privacy Principles.
No method of transmission or storage is completely secure. In the event of a data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

5. Third party disclosure

We do not sell, rent or trade your personal information.
We may share personal information with third party service providers who assist us in delivering the platform, including cloud storage, AI processing, payment, analytics and communication providers. Provider-specific purposes, locations, retention and use terms are documented where verified.
We may disclose personal information where required or authorised by law, including to law enforcement or regulatory authorities.
We disclose personal information to the service providers and recipients described in this policy, with consent where required or where otherwise authorised by law.
If Tiora is acquired by or merged with another entity, your personal information may be transferred as part of that transaction. We will notify you before any such transfer and you will have the opportunity to close your account and export your data.

6. Data retention and deletion

We retain your personal information for as long as your account is active and for as long as necessary to comply with our legal obligations.
You can request an archive export or account deletion. Available export scope, processing time, retention, backup expiry and legal exceptions depend on the systems involved and will be confirmed when your request is processed.
A complete account-data export is not currently available. Supported archive-media exports may have a different scope from account, billing, support or audit information.
Deletion and backup expiry timing varies by system and may be affected by legal or operational retention requirements.

7. Access and correction rights

You have the right to request access to the personal information Tiora holds about you.
You have the right to request correction of any personal information that is inaccurate, out of date, incomplete or misleading.
To make an access or correction request write to privacy@tiora.life. We will respond within 30 days. We may need to verify your identity before providing access.
We will not charge a fee for access requests.
If we decline an access or correction request we will explain why in writing and advise you of your right to complain to the Office of the Australian Information Commissioner.

8. Cookies and analytics

We use cookies and similar technologies to operate the platform, keep you logged in and remember your preferences.
We use analytics tools to understand how the platform is used in aggregate. This information is used to improve the platform and is not linked to identifiable individuals where this can be avoided.
Our public site currently uses Google Analytics, Plausible, HubSpot and Meta technologies.
You may disable cookies through your browser settings. Disabling certain cookies may affect platform functionality including the ability to stay logged in.

9. Children's privacy

The platform is not directed at children under the age of 13 and we do not knowingly collect personal information from children under 13 without parental consent.
Founders may grant Archive access to minors within their family. In doing so the Founder takes responsibility for that access and for ensuring it is appropriate.
If we become aware that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete that information promptly.
Parents or guardians who believe their child's information has been collected without consent should contact us at privacy@tiora.life.

10. Complaints

If you have a concern about how we have handled your personal information, please contact us first at privacy@tiora.life. We will investigate and respond within 30 days.
If you are not satisfied with our response you may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

11. Contact

For all privacy enquiries, access requests and complaints:

privacy@tiora.life
Tiora Pty Ltd
Newport, NSW, Australia
tiora.life