AlphaIQ Wealth ← Back to home

Privacy Policy

Effective date: 22 March 2026 · Last updated: 25 March 2026

This Privacy Policy explains how J&A Marsh Investments Pty Ltd (ACN: 646 953 906) ("we", "us", "our", "AlphaIQ") collects, uses, stores, and protects your personal information when you use the AlphaIQ platform ("the Platform"), accessible at alphaiq.pro and app.alphaiq.pro.

We are committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We are based in Perth, Western Australia.

Our core commitment: We will never sell, rent, lease, or trade your personal or financial data to any third party. Ever. Your data exists solely to power your AlphaIQ experience. This is non-negotiable.

1. Information We Collect

Account information: When you create an account via Google OAuth, we receive your name, email address, and Google profile identifier. We do not receive or store your Google password.

Financial information you provide: To deliver personalised wealth intelligence, you may choose to provide information including but not limited to:

  • Income details, employment information, and salary data
  • Investment property details (addresses, purchase prices, rental income, mortgage details, depreciation schedules)
  • Superannuation fund details, balances, and contribution history
  • Share portfolio holdings, purchase prices, and transaction history
  • Financial goals, retirement plans, and risk preferences
  • Tax-related information (marginal tax rate, CGT events, deductions)

Uploaded documents: You may upload financial documents such as super statements, rental agent statements, depreciation schedules, and mortgage documents. These are stored securely and processed by AI to extract relevant financial data.

AI interaction data: Questions you ask the AI Advisor, Growth Scanner queries, Thesis Interrogator sessions, and What-If scenario configurations are stored to provide you with continuity and historical context.

Usage data: We collect standard technical information including IP address, browser type, device information, pages visited, and session duration. This is used to maintain platform stability and improve the user experience.

Payment information: Subscription payments are processed by Stripe. We do not store your credit card number, CVV, or full card details on our servers. Stripe's handling of payment data is governed by their own privacy policy and PCI DSS compliance.

2. How We Use Your Information

We use your information exclusively to:

  • Provide and personalise the AlphaIQ platform and its features
  • Generate personalised intelligence feeds based on your holdings
  • Run AI-powered analyses including Growth Scanner, Thesis Interrogator, Portfolio Health, and What-If projections
  • Calculate Australian tax obligations, negative gearing, CGT, and superannuation projections
  • Process your subscription payments
  • Send essential service communications (account security, billing, critical platform updates)
  • Maintain platform security and prevent fraud
  • Improve the platform based on aggregated, anonymised usage patterns

3. What We Will Never Do

We will never:
  • Sell your personal or financial data to any third party
  • Share your individual financial data with advertisers
  • Use your financial data for purposes other than providing the AlphaIQ service to you
  • Allow third-party advertising within the platform
  • Provide your data to data brokers, aggregators, or marketing companies
  • Use your data to build profiles for sale to external parties
  • Share your information with other users of the platform

4. AI Processing and Third-Party AI Services

AlphaIQ uses artificial intelligence to power features including the Growth Scanner, Thesis Interrogator, AI Advisor, Intelligence Feed, and document extraction. These features may involve sending relevant portions of your data to third-party AI service providers (such as Anthropic's Claude API) for processing.

Important safeguards:

  • Only the minimum data necessary to generate a response is sent to AI providers
  • We use API-level access to AI providers. Under the applicable terms of service for the APIs we use (including Anthropic's Claude API), data submitted via API is not used to train AI models
  • AI providers do not retain your data beyond the processing session
  • We use API-level access (not consumer-facing products), which provides stronger data handling guarantees
  • AI-generated outputs are informational only and do not constitute financial advice

5. Data Storage and Security

Your data is stored in cloud infrastructure provided by Supabase (PostgreSQL database with Row Level Security) and Railway (application hosting). All data is encrypted in transit (TLS 1.2+) and at rest.

Security measures include:

  • Row Level Security (RLS) on all database tables — users can only access their own data
  • Authentication via Google OAuth with secure session management
  • HTTPS encryption on all connections
  • Secure, time-limited, token-authenticated document sharing links
  • Regular security reviews of application code and infrastructure

While we implement reasonable security measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Data Sharing

We share your data only in the following limited circumstances:

  • Service providers: Supabase (database), Railway (hosting), Stripe (payments), and AI API providers — solely to operate the platform. These providers are bound by their own privacy policies and data processing agreements.
  • Your explicit direction: When you generate a shareable document link for your accountant, broker, or other professional, you are choosing to share specific data with that recipient.
  • Legal requirements: If required by Australian law, court order, or government authority, we may disclose information as legally compelled. We will notify you where legally permitted.

7. Data Retention

We retain your account and financial data for as long as your account is active. If you close your account, we will delete your personal and financial data within 30 days, except where retention is required by Australian law (such as tax records or financial transaction records).

Uploaded documents (such as super statements, rental statements, and depreciation schedules) stored in our document storage system will be deleted within 30 days of account closure. You may request deletion of individual documents at any time from within the Platform.

You may request deletion of all your data at any time by contacting us at [email protected]. We will process deletion requests within 30 days, except where retention is required by law.

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal retention requirements)
  • Complaint: Lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached

To exercise any of these rights, contact us at the details below.

9. Cookies and Tracking

We use essential cookies and local storage to maintain your authenticated session and platform preferences. We do not use third-party advertising cookies or tracking pixels. We may use privacy-focused analytics tools to understand how the Platform is used in aggregate — these tools do not track your behaviour across other websites and do not share data with advertisers. You can disable cookies in your browser settings, but this may affect Platform functionality.

10. Marketing Communications

We may send you product updates, new feature announcements, and educational content related to Australian investing. You can opt out of marketing communications at any time by:

  • Clicking the unsubscribe link in any marketing email
  • Contacting us at [email protected]

We will continue to send essential service communications (such as billing receipts, security alerts, and important platform notices) regardless of marketing preferences.

11. Children's Privacy

AlphaIQ is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

12. International Data Transfers

Our service providers may store or process data in locations outside Australia (including the United States). Where data is transferred overseas, we take reasonable steps to ensure that overseas recipients handle your information in a manner consistent with the Australian Privacy Principles, including through contractual data processing agreements. By using AlphaIQ, you acknowledge that your data may be processed outside Australia.

12. Notifiable Data Breaches

Under the Privacy Act 1988 (Cth) — Notifiable Data Breaches scheme, we are required to notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in the event of an "eligible data breach" — that is, a breach likely to result in serious harm to any individuals whose information is involved.

In the event of a data breach, we will:

  • Assess the breach as quickly as possible (within 30 days of becoming aware)
  • Notify the OAIC and affected individuals if the breach meets the threshold for notification
  • Provide affected individuals with recommendations about steps they can take to protect themselves
  • Take immediate steps to contain the breach and prevent further unauthorised access

If you believe your data has been compromised, please contact us immediately at [email protected].

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the platform. Your continued use of AlphaIQ after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights:

J&A Marsh Investments Pty Ltd
Perth, Western Australia
Email: [email protected]

You may also contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au if you wish to lodge a formal complaint.

← Home Privacy Terms Disclaimer

© 2026 J&A Marsh Investments Pty Ltd. All rights reserved.