Draft, under legal review. This policy describes how the service handles personal information today.

Privacy Policy

Last updated 1 November 2026

What we collect

• Account details: your email address, your name if you give it, and a scrambled (hashed) form of your password. We never store your password itself.
• Google sign-in: if you use it, your Google account identifier, email address and name.
• Use of the service: which company reports you ask us to create, and when; the companies you follow; and whether you want alert emails.
• Technical data: standard server logs, such as request times and errors, kept for security and troubleshooting.

We don't ask for your holdings, your financial situation or payment details.

Why we collect it

To run your account, apply report allowances, email you about companies you follow, keep the service secure, fix problems and understand how the product is used. We don't sell personal information or use it for advertising.

Cookies

We use one cookie to keep you signed in, and a short-lived cookie during Google sign-in. We don't use advertising or tracking cookies.

Where it is kept and who sees it

• Your account data is stored with Amazon Web Services in Sydney, Australia.
• Google receives your sign-in request if you choose Google sign-in.
• Alert emails are sent through Amazon Web Services (Amazon Simple Email Service), which receives your email address to deliver them.
• To write reports, AI model providers (some in the United States) receive company tickers and public market data. They don't receive your personal information.

How long we keep it

While your account is open. Sign-in sessions expire after 30 days. When you ask us to delete your account, we delete your account details. Reports you asked us to create stay in the shared library, without your details attached.

Your choices

You can turn alert emails off on the Monitor page or with the link in any alert email. You can ask to see, correct or delete the personal information we hold about you by contacting admin@investlens.co. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Security

Connections are encrypted (HTTPS), passwords and sign-in tokens are stored only in hashed form, and access to our systems is restricted.

Changes

We'll update this page when our practices change, and show the date of the latest version above.