CreditPolicy.ai privacy & data

We handle it on your behalf. Section 10 sets out how responsibility is split.

Name, business email address, phone number, password (stored hashed), brokerage name, job role, your photo if you add one

Names, contact details, dates of birth, addresses, employment and income, assets, liabilities, living expenses, credit history as you describe it

IP address, browser type and version, operating system, device type, language settings, app version

Features used, tools called, questions asked, pages viewed, session times, referring pages, credits used, which onboarding version you saw

Emails, live chat messages, support tickets, feature requests, survey responses

create and administer your account, authenticate you, answer your policy questions with citations, run scenario and serviceability assessments

process your queries, documents and client-file context through our retrieval systems and third-party large language models (section 7).

manage subscriptions, trials, promo codes, referral rewards, credits, invoices, renewals, failed payments and refunds.

understand which features are used, diagnose faults, measure performance, test variations of pages such as onboarding, and develop new features.

detect and prevent fraud, abuse, unauthorised access and breaches of our Terms

Billing and tax records 7 years, as required by Australian tax and corporations law

Database backups are kept on a rolling cycle of no more than 30 days and are not edited on demand

Kept while your account is open. Deleted when you delete your account (below)

a signed referral cookie if you arrived through another broker's referral link (kept for 30 days so the referral can be attributed

Our core application data (authentication, your account, your client files and uploaded documents) is hosted in Australia (Sydney).

principally in the United States (AI model processing, address lookup, billing, app-store subscription syncing, analytics and live chat)

Ireland (transactional email and email-in)

Before disclosing personal information to an overseas recipient, we take reasonable steps under APP 8.1 to ensure the recipient does not breach the APPs, including by contracting on terms that restrict use and require protection of the information.

We require our service providers to protect personal information consistently with the Privacy Act and to use it only for the purposes we engage them for.

You can delete your account from Account in the mobile app or at creditpolicy.ai/delete-account.

You have a right under APP 12 and APP 13 to ask for access to the personal information we hold about you, and to ask us to correct it

You can ask us to permanently delete an individual client file or document sooner at privacy@creditpolicy.ai

You can also opt out at any time by emailing privacy@creditpolicy.ai .

We do not sell personal information.