Privacy Policy

Compass · Last updated 31 May 2026

This Privacy Policy explains how Modern Classica Pty Ltd ("we", "us", "our"), operator of Compass (the "Service"), collects, uses, stores and discloses personal and business information. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who uses the Service

Compass is provided to accounting and bookkeeping firms (each a "Firm") and the small-business clients they advise (each a "Client"). A Firm connects a Client's accounting data (with authorisation) to produce cashflow forecasts, alerts and financial-ratio analysis.

2. Information we collect

• Account information — Firm and user details such as name, email address and branding settings.
• Accounting data accessed via Xero — when a Client's Xero organisation is connected, we access (on a read-only basis) organisation details, sales invoices and bills (amounts, due dates, contacts), bank account balances, and financial reports (Profit & Loss and Balance Sheet).
• Connection credentials — OAuth access and refresh tokens issued by Xero, used solely to maintain the authorised connection.
• Technical data — standard request logs (e.g. IP address, timestamps) for security and reliability.

3. How we use information

• To generate cashflow forecasts, runway alerts and financial-ratio analytics for the connected Client.
• To operate, secure, maintain and improve the Service.
• To communicate with the Firm about the Service.

4. Read-only access

We request read-only Xero scopes. We do not create, modify, approve or delete any records in your Xero organisation.

5. Disclosure

We do not sell personal information. We disclose information only to: the Firm that connected the Client organisation and its authorised users; our service providers who host and operate the Service (including Cloudflare, Inc. for hosting/storage and Xero Limited for accounting data); and where required by law.

6. Storage & security

Data is stored using Cloudflare infrastructure and transmitted over encrypted (TLS) connections. Access tokens are stored to maintain the authorised connection and are used only for that purpose. We apply reasonable technical and organisational measures to protect information; no method of transmission or storage is completely secure.

7. Retention & deletion

We retain data only as long as needed to provide the Service. You may disconnect a Xero organisation at any time from your Xero account (Connected apps) or by contacting us; on disconnection or request, we delete the stored tokens and associated cached financial data.

8. Your rights

Subject to applicable law, you may request access to or correction of your personal information, or make a privacy complaint, by contacting us at fhdigital@hotmail.com. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).

9. International transfers

Our hosting providers operate globally; information may be processed on servers located outside Australia. We take reasonable steps to ensure such providers protect information consistently with this Policy.

10. Changes

We may update this Policy from time to time. The current version is always available at this URL with its "last updated" date.

11. Contact

Modern Classica Pty Ltd
Email: fhdigital@hotmail.com

← Back to Compass