Cassora is committed to protecting your privacy and handling your data responsibly. This Privacy Policy explains how we collect, use, and safeguard personal information when you use our platform.

By accessing or using Cassora, you agree to the terms of this Privacy Policy.

‍

1. Who we are

Cassora is a software platform that helps organisations manage, publish, and report their climate and emissions data.

If you have questions about this policy or how your information is handled, please contact us at support@cassora.com.au.

‍

2. What information we collect

When you use Cassora, we may collect the following types of information:

• Account details: name, email address, role, organisation.
• Authentication data: login credentials, multi-factor authentication (MFA) details.
• Usage data: actions taken in the platform (for example, uploading data, publishing reports), IP addresses, device or browser information.
• Organisational data: climate and emissions data entered by your organisation.
• Support communications: messages or emails you send to our support team, and metadata required to troubleshoot issues.

‍

3. How we use your information

We use personal and organisational information to:

• Provide secure access to the Cassora platform.
• Manage user roles, permissions, and authentication.
• Support publishing, reporting, and auditing functions.
• Maintain an audit trail of user activity for accountability.
• Improve platform performance, reliability, and security.
• Communicate with users about updates, maintenance, and support.

‍

4. Disclosure of information

We will not sell or rent your information. We may share information only:

• With authorised users in your organisation, according to role permissions.
• With oversight users (for example, regional coordinators or partner organisations) where access has been approved by your organisation.

• With 100% Renewables (Platform Administrator) for technical support and compliance.
• With trusted service providers (such as hosting, authentication, and email providers) who are bound by confidentiality and security obligations.
• If required by law, or when necessary to protect the security and integrity of the platform.

‍

5. Data ownership

• Each organisation owns the data it enters into Cassora.
• Cassora does not claim ownership of organisational data.
• Cassora may use aggregated or anonymised data for benchmarking, research, or reporting, but will not disclose identifiable information without permission.

‍

6. Security

• Cassora requires multi-factor authentication (MFA) for all accounts.
• We take reasonable steps to protect data against loss, misuse, and unauthorised access.
• Users are responsible for keeping their login credentials secure.
•  If a security incident occurs that involves unauthorised access to personal or organisational data, Cassora will assess and, where required by law, notify affected parties and cooperate on appropriate remediation.

‍

7. Data storage and transfers

• Data is stored securely in Australia.
• If Cassora uses overseas service providers (for example, for hosting or email delivery), we ensure your information is handled in compliance with the Australian Privacy Principles (APPs) and protected to equivalent standards.

‍

8. Your rights

You can:

• Export your data at any time.
• Access and update your personal information via your Cassora account.
• Request confirmation of whether we hold personal information about you.
• Request correction or deletion of your personal information (subject to legal and contractual requirements).
• Opt out of non-essential communications.

We will respond to requests within a reasonable period.

‍

9. Data retention

• Personal and organisational data are retained as long as your organisation maintains an active Cassora subscription.
• Audit logs may be retained for compliance, accountability, and security purposes.
• On termination, organisations may export their data before access is closed. After that, data may be archived or deleted in line with our retention policy, unless required by law.

‍

10. Cookies & analytics

Cassora uses essential cookies for login and session management. We may also use analytics tools to improve platform performance and usability.

• You can control non-essential cookies through your browser settings.
• Essential cookies are required for secure platform operation and cannot be disabled.

‍

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify users of significant changes, and continued use of Cassora will mean you accept the updated policy.

‍

12. Contact us

If you have any questions about this Privacy Policy or how we handle your information, please contact: support@cassora.com.au