Privacy Policy

SDA Signals (“we”, “us”, “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

SDA Signals is an Australian business operating under ABN 13 137 862 710.

1. Personal Information We Collect

We may collect the following types of personal information:

• Account information: your name, email address, and password when you create an account.
• Subscription status: your current subscription plan and billing period.
• Usage data: pages visited, features used, time spent on the platform, device type, browser type, and IP address.
• Communication data: any information you provide when you contact us by email.
• AI interaction data: questions you submit to the AI Investment Advisor feature. These are processed in real time and are not permanently stored.

2. Payment Information

We receive only a confirmation of payment, your Stripe customer ID, and subscription status from Stripe.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Process subscription payments and manage your account;
• Communicate with you about your account, service updates, and data releases;
• Improve the platform, including understanding how users interact with our features;
• Respond to enquiries and support requests;
• Comply with legal obligations.

4. Analytics and Cookies

We may use analytics tools such as Vercel Analytics to collect anonymised usage data including pages visited, time on site, and referral sources. This data is used solely to improve the Service and does not personally identify you.

We may use essential cookies to maintain your login session. We do not use third-party advertising or tracking cookies.

You may opt out of analytics tracking via your browser settings or by using a browser extension that blocks analytics scripts.

5. AI-Powered Features and Third-Party Processing

The Service includes an AI Investment Advisor that uses third-party artificial intelligence service providers to generate responses. When you use this feature:

• Your question and relevant SDA market data context are sent to a third-party AI service provider for processing.
• We do not send your name, email address, or other personal account details to the AI provider.
• AI-generated responses are returned to you in real time and are not permanently stored by us.
• We do not use your questions or AI interactions to train artificial intelligence models.

6. Disclosure of Information

We may disclose your information to:

• Stripe: for payment processing, as described above.
• AI service providers: third-party artificial intelligence providers that process AI Advisor queries, as described in Section 5 above.
• Service providers: hosting providers (Vercel, Railway), database providers (Supabase), and email service providers, solely to the extent necessary to operate the Service.
• Authorities: where required by law, regulation, legal process, or enforceable government request.

7. Data Security

We take reasonable steps to protect your personal information from unauthorised access, modification, disclosure, or destruction. These measures include encryption of data in transit (HTTPS), secure password hashing, and access controls on our systems.

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

8. Access, Correction and Deletion

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you;
• Request correction of any information that is inaccurate, incomplete, or out of date;
• Request deletion of your personal information and account.

To exercise any of these rights, please contact us at hello@sdasignals.com.au. We will respond to your request within a reasonable timeframe, and in any event within 30 days.

9. Overseas Disclosure

Some of our service providers (including hosting and payment processors) may store or process data outside of Australia, including in the United States. Where this occurs, we take reasonable steps to ensure that your personal information is handled in accordance with the Australian Privacy Principles.

10. Email Communications

We may send you service-related emails, including account confirmations, subscription receipts, and notifications about quarterly data updates. These communications are necessary for the operation of the Service.

You can unsubscribe from non-essential communications at any time by clicking the unsubscribe link in any email or by contacting us. We comply with the Spam Act 2003 (Cth).

11. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us at hello@sdasignals.com.au. We will investigate your complaint and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.