Privacy Policy

Last updated: March 2026

AWSME Pty Ltd ("Company", "we", "us") operates DataP.ai ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. By using the Service, you consent to the practices described herein.

1. Information We Collect

1.1 Account Information

When you register, we collect: email address and encrypted password (PBKDF2 hashed — we never store plaintext passwords).

1.2 Investor Profile

If you complete the onboarding wizard, we collect: risk tolerance, investment horizon, preferred strategies, preferred exchanges, preferred sectors, portfolio size range, analysis preferences, and response style. This data is used solely to personalise your experience.

1.3 Usage Data

We collect information about how you use the Service, including: pages visited, stocks analysed, chat messages with the AI copilot, watchlist selections, and feature usage. Chat conversations are stored to provide conversation history and improve our AI models.

1.4 Device & Technical Data

We automatically collect: browser type, operating system, IP address, referring URLs, and session duration through standard web server logs and analytics tools.

1.5 Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers, bank account details, or other sensitive financial information on our servers. We only store your Stripe customer ID and subscription status.

2. How We Use Your Information

• Provide and personalise the Service (AI-generated analysis tailored to your profile)
• Process payments and manage subscriptions
• Send service-related communications (account verification, security alerts, subscription updates)
• Improve our AI models and analysis quality
• Monitor and prevent fraud, abuse, and security threats
• Comply with legal obligations

3. AI & Chat Data

Your conversations with the AI copilot are stored in our database to provide conversation history and to extract preferences that improve future responses (e.g., remembering your risk tolerance). We may use anonymised and aggregated chat data to improve our AI models. We do not share your individual chat content with third parties except as described in Section 5.

4. Data Sharing with AI Providers

To generate AI responses, we send your queries and relevant context to third-party AI providers including: Google (Gemini), OpenAI (GPT), and Anthropic (Claude). These providers process your data according to their respective privacy policies and data processing agreements. We do not send your email address, password, or payment information to AI providers.

5. Data Sharing & Disclosure

We may share your information with:

• Service providers: Stripe (payments), Google Cloud (hosting), AI model providers (as described above)
• Legal compliance: When required by law, court order, or government regulation
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you explicitly authorise sharing

We do not sell your personal information to third parties for marketing purposes.

6. Data Security

We implement industry-standard security measures including: encrypted passwords (PBKDF2), HTTPS encryption in transit, secure session management, and access controls. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your account data for as long as your account is active. Chat history is retained indefinitely to provide conversation continuity. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at info@datap.ai.

9. Cookies

We use essential cookies for authentication (session token) and language preference. We do not use advertising or tracking cookies. Third-party analytics tools may set their own cookies subject to their privacy policies.

10. International Data Transfers

Our servers are hosted in Australia (AWS Sydney region). Your data may be processed by AI providers in the United States and other jurisdictions. By using the Service, you consent to the transfer of your data to these jurisdictions, which may have different data protection standards than your country of residence.

11. Children

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notice. Continued use of the Service constitutes acceptance of the updated policy.

13. Contact

For privacy-related inquiries:
AWSME Pty Ltd
Suite 2/200 Mona Vale Rd, St Ives NSW 2075
Email: info@datap.ai
Phone: 0431 525 939