Privacy Policy

Last updated: 7 April 2026

1. Overview

Valio Pty Ltd (ABN pending) ("we", "us", "our") is committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use our platform.

2. Information We Collect

Account information

Name, email address, and hashed password (or Google OAuth profile) provided at registration.

Payment information

Payment processing is handled by Stripe. We do not store your credit card details. We retain your Stripe customer ID to manage subscriptions and billing history.

Usage data

Valuation history (tickers analysed, dates, results), subscription tier, monthly usage counts, and AI token consumption. This data is used to enforce usage limits and improve the Service.

Technical data

IP addresses (for rate limiting and security), browser type, and access timestamps. We do not use third-party tracking or analytics cookies.

3. How We Use Your Information

  • To provide and maintain the Service, including running valuations and managing your account
  • To process payments and manage subscriptions via Stripe
  • To enforce usage limits and prevent abuse
  • To communicate with you about your account, billing, or service updates
  • To respond to support requests submitted through our contact form
  • To comply with legal obligations

4. Third-Party Service Providers

We share information with the following third parties as necessary to operate the Service:

Supabase (Database & Authentication)

Stores your account data, valuation history, and manages authentication sessions. Data is hosted on Supabase's infrastructure. See supabase.com/privacy for their privacy policy.

Stripe (Payments)

Processes subscription payments and one-time purchases. Stripe receives your payment card details directly — we never see or store them. See stripe.com/privacy for their privacy policy.

AI Processing

Valuation requests are processed using third-party AI models. The data sent includes the company ticker, exchange, and publicly available financial data gathered during analysis. No personal user data (name, email, payment info) is sent to the AI provider. AI providers may process data outside Australia.

5. Cookies

We use essential cookies only, for authentication session management (provided by Supabase Auth). These cookies are strictly necessary for the Service to function and cannot be disabled. We do not use advertising, tracking, or analytics cookies.

6. Data Retention

Your account data and valuation history are retained for as long as your account is active. If you delete your account, personal data will be removed within 30 days. Anonymised, aggregated usage statistics may be retained indefinitely for service improvement purposes. Payment records are retained as required by Australian tax law (generally 5 years).

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including encrypted connections (HTTPS/TLS), secure password hashing, environment-variable-based secret management, and access controls. However, no method of electronic transmission or storage is 100% secure.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or outdated information
  • Request deletion of your personal information
  • Withdraw consent where processing is based on consent

To exercise these rights, contact us via our contact page or email privacy@valuedai.com.au.

9. International Data Transfers

Some of our third-party providers may process data outside Australia (including the United States). Where this occurs, we ensure that appropriate safeguards are in place consistent with the requirements of APP 8.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top indicates when the policy was last revised.

11. Complaints

If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us at privacy@valuedai.com.au. We will respond within 30 days. If you are unsatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.