Account information: When you register, we collect your name, email address, company name, phone number, and password. We also create a Stripe customer record for billing purposes.

Policy documents: You may upload insurance policy documents (PDS, schedules, endorsements) for AI analysis. These documents may contain personal information about your clients including names, addresses, and policy details.

Usage data: We collect information about how you use the platform, including analyses performed, features accessed, and session data.

Payment information: Payment processing is handled by Stripe. We do not store credit card numbers on our servers. We retain your Stripe customer ID and subscription status.

Technical data: IP addresses, browser type, device information, and access logs for security and performance monitoring.

We use personal information to provide and improve our platform services, including AI-powered policy analysis, coverage gap detection, and compliance documentation. Specifically, we use your information to:

Operate and maintain your account; process policy documents through our AI analysis engine; generate coverage analysis, gap reports, and compliance documentation; process subscription payments and manage billing; communicate with you about your account and our services; comply with legal obligations including ASIC record-keeping requirements; improve our platform and develop new features; and ensure platform security and prevent fraud.

Our platform uses Anthropic's Claude AI to analyse policy documents. When you upload a document, the content is sent to the AI engine for processing. The AI extracts coverages, exclusions, conditions, and sub-limits, and generates structured analysis outputs.

Important: AI-generated outputs are decision-support tools for licensed insurance professionals. They do not constitute financial product advice. All outputs include confidence scores and source citations so you can verify findings independently. The professional judgement and final advice to clients always remains yours.

Your documents are not used to train AI models. The Anthropic Claude API's commercial terms prohibit the use of customer data for model training.

Australian data residency: All data is stored on servers located in Sydney, Australia, in compliance with Australian Privacy Principles.

Encryption: We use AES-256 encryption for data at rest and TLS 1.2+ encryption for data in transit.

Multi-tenant isolation: Each account's data is completely separated at the database level. Other users cannot access, view, or query your data under any circumstances.

Audit logging: Every action on the platform is logged with timestamps for security and compliance purposes.

Access controls: Role-based access controls (RBAC) ensure that users can only access data appropriate to their role within their organisation.

We do not sell, rent, or trade your personal information. We may disclose information to:

Service providers: Stripe (payment processing), Anthropic (AI processing) — all bound by contractual data protection obligations.

Legal requirements: Where required by law, regulation, or legal process, including ASIC and APRA regulatory requirements.

Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice provided.

We do not disclose your information to overseas recipients except as necessary for AI processing, and we take reasonable steps to ensure overseas recipients comply with the APPs.

We retain your account information and analysis records for the duration of your subscription and for a period of 7 years thereafter to comply with ASIC record-keeping requirements under the Corporations Act 2001.

You may request deletion of your account and associated data at any time by contacting us. Deletion requests will be processed subject to our legal retention obligations.

Under the Australian Privacy Principles, you have the right to:

Access the personal information we hold about you (APP 12); correct any inaccurate, out-of-date, or incomplete information (APP 13); complain about a breach of the APPs; and request information about how your data is processed, including by automated systems.

To exercise any of these rights, contact us at hello@insuranceadvice.app. We will respond to access and correction requests within 30 days.

We use essential cookies to maintain your session and authentication state. We may use analytics tools to understand how the platform is used and to improve our services. We do not use cookies for advertising or tracking purposes.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or by posting a notice on the platform. Your continued use of the platform after any changes constitutes acceptance of the updated policy.

If you believe we have breached the Australian Privacy Principles, you may lodge a complaint by emailing hello@insuranceadvice.app. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.