Privacy Policy

This policy explains how Dividend Guardian, trading as Dividend Guardian, handles personal information. We are responsible for that handling. We apply the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) where they apply to us.

• Account information: your email address and the identifiers needed to link your account to Supabase’s passwordless sign-in service. Dividend Guardian does not ask you to create a password.
• Free Guardian Check information: the ASX tickers and approximate share counts you type into the free check, together with the result we compute from them. We store this so that you can unlock the full breakdown and return to it later. It is deleted automatically after 30 days. If you give us an email address to unlock the result, that address is stored with it.
• Monitored portfolio information: if you subscribe, the tickers and share counts we monitor for you. We do not ask for and do not store your purchase prices or cost base.
• Billing information: your subscription status and the Stripe customer and subscription identifiers needed to manage billing. Full card numbers are collected and stored by Stripe, never by us.
• Usage and technical data: pages viewed, features used, approximate location derived from IP address, browser and device type, and error diagnostics. This includes a first-party record of which steps of sign-up you reached: for example that a check was run, that a result was unlocked, or that a checkout was started. It records how many holdings were involved and which ticker was highlighted. It never records your share counts or your income figures. On public marketing pages, Vercel Web Analytics also records anonymised page views, referrers, country, browser and device category without cookies. We exclude saved-check, dashboard, authentication and API routes from that page-view collection.
• Communications: support messages you send us and delivery records for transactional email.

What we deliberately do not collect: we do not ask for and cannot access your broker credentials, bank accounts, tax file number, or identity documents. We do not collect sensitive information as defined in the Privacy Act.

We use personal information only for the following purposes:

• to compute your Guardian Check, assess dividend health, and calculate your estimated income and exposure;
• to send you a link back to the Guardian Check you asked for, and the alerts and summaries you subscribed to receive;
• if you separately opt in, to send occasional product updates and dividend-income education; this consent is optional and can be withdrawn;
• to understand how many people complete each step of sign-up, so we can tell whether the product is working;
• to take payment, issue receipts and manage your subscription;
• to keep the Service secure, diagnose faults and prevent abuse; and
• to comply with our legal and tax obligations.

We do not sell personal information, we do not trade it, and we do not use your portfolio data for advertising or for our own trading.

Your portfolio information is never sent to an AI provider. Income and payday estimates are ordinary arithmetic. Dividend-health status and ranking are produced by published application rules.

If an announcement source is connected, we may use an automated model to analyse public company announcement text. That optional company-level process extracts a quote-backed development which the published rules may include in a company’s status. It runs separately from your portfolio. We send the ticker and public text, not your email address, share counts or any information that identifies you. The result is stored against the company, not against you.

We disclose personal information only to the service providers we need to run the Service, and only for that purpose:

• Stripe: payment processing (United States, Australia).
• Vercel: application hosting and content delivery (United States, with edge locations worldwide).
• Supabase: database storage and passwordless authentication (service region selected by us).
• OpenAI: optional analysis of public company announcement text, when that feature is connected (United States).
• Resend: transactional and alert email delivery (United States).
• Market data providers: for prices, dividends and corporate actions. We send them ticker symbols, never your identity.

Some of these providers are located overseas, principally in the United States. By using the Service you consent to that disclosure. We take reasonable steps to ensure overseas recipients handle your information consistently with the APPs, but you acknowledge that we may not be able to enforce Australian privacy law against them (APP 8.2).

We may also disclose information where required by law, a court order, or a regulator such as ASIC or the OAIC, or to a purchaser as part of a sale of the business, in which case this policy will continue to apply to that information.

We hold data in encrypted form in transit (TLS) and at rest. Access is limited to those who need it to operate the Service. No system is perfectly secure, and we cannot guarantee absolute security.

We keep your account and portfolio data while your account is active. If you close your account we delete or de-identify it within 90 days, except where we must keep records longer, for example billing records, which Australian tax law requires us to retain for five years.

If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

We use strictly necessary cookies to keep you signed in and to secure forms. These cannot be turned off without breaking the Service.

We use Vercel Web Analytics on public marketing pages to understand page views and referral sources. It uses anonymised, aggregated data and no cookies. We do not use advertising cookies, run advertising trackers or build advertising profiles. We also keep first-party funnel events in our own database without recording share counts or income amounts.

Under the Privacy Act and the APPs you may:

• Access the personal information we hold about you (APP 12);
• Correct anything inaccurate or out of date (APP 13);
• Delete your account and the data associated with it;
• Request a copy of your portfolio data; and
• Unsubscribe from non-essential email at any time via the link in any message.

To exercise any of these, email privacy@dividendguardian.com.au. We will respond within 30 days.

If you think we have mishandled your personal information, contact us first at privacy@dividendguardian.com.au. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

The Service is not directed at anyone under 18 and we do not knowingly collect their personal information. If you believe a minor has given us information, contact us and we will delete it.

We may update this policy. If a change materially affects how we handle your personal information, we will notify you by email before it takes effect. The effective date at the top of this page always reflects the current version.