Privacy Policy

High Impact Group Pty Ltd (ABN 40 682 923 128), trading as myAIstrategy, respects your privacy and is committed to protecting your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

This Privacy Policy explains what information we collect, how we use it, where it is stored, and your rights regarding your data.

Information You Provide

• Email address (provided at sign-in)
• Organisation URL (provided when starting a scan)
• Entity type selection (Business, Government, Education, Small Business, or NFP)
• AI Strategy Interview responses (if completed)
• Uploaded documents (if provided — paid tier only)
• Corrected or validated operational estimates (if provided)
• Advisor chat messages
• Payment information (processed by Stripe — we do not store card details)

Information We Gather From Public Sources

During the scan phase, we gather publicly available information about your organisation from website content, ABN data, public financial filings, news articles, and job postings. This research is conducted via the Brave Search API and direct website analysis.

What We Don’t Collect

• We do not collect personal information about individuals within the organisation being scanned
• We do not store payment card details (Stripe handles this entirely)
• No third-party analytics, tracking, or advertising tools are installed on the platform

• All data is stored in Australia (Sydney, AWS ap-southeast-2) via Supabase
• The platform is hosted on Vercel (global edge network, with data at rest in Australia)
• Payment processing is handled by Stripe (PCI DSS Level 1 compliant)

• Encryption at rest (AES-256) and in transit (TLS/HTTPS)
• Row-level security enforces data isolation between users
• API keys and secrets are stored as environment variables, never in client code
• Access to production infrastructure is restricted to authorised personnel

We use the Anthropic Claude API to analyse your organisation and power advisor conversations. We also use the Brave Search API for company research.

• Data sent to Claude via the API is not used to train AI models(per Anthropic’s commercial API terms of service)
• Brave Search queries are not linked to your identity
• Your assessment data is never shared with other myAIstrategy users
• No third-party analytics, tracking, or advertising tools are installed on the platform

Document Uploads

When you upload documents, the content is processed to extract text, which is then analysed by AI to identify structured insights. Before any AI processing occurs, personal and sensitive information — including Tax File Numbers (TFN), Australian Business Numbers (ABN), Medicare numbers, BSB and account numbers, and other identifiable data — is automatically detected and stripped. The raw extracted text is retained for up to 90 days, after which it is automatically deleted. Only structured insights are retained long-term.

We do not sell, share, or provide your data to any third party for their own purposes. The only external services that process your data are:

• Anthropic — AI analysis (does not retain data after processing)
• Brave Search — Public web research (searches not linked to your identity)
• Stripe — Payment processing
• Supabase — Database and authentication (Sydney, Australia)
• Vercel — Hosting and deployment
• Resend — Transactional email delivery
• Google — OAuth authentication (if you sign in with Google)

We may disclose data to legal authorities when required to comply with applicable Australian laws.

Email communications

Transactional emails — confirming a scan is complete, your purchase is fulfilled, or your password has been reset — are sent as part of the service and do not require separate consent. Commercial follow-up emails (for example, a short series of emails explaining your scan results and the paid strategy engagement) are only sent to users who have explicitly opted in via the checkbox at account creation. You can withdraw that consent at any time by clicking the one-click unsubscribe link in any of those emails; your request is honoured immediately. Withdrawal does not affect transactional messages.

• Free scan data: Retained for 90 days, then automatically deleted.
• Paid assessment data: Retained while your access is active, plus 90 days after expiry.
• Uploaded document text: Raw text retained for 90 days, then automatically deleted. Structured insights are retained for the lifetime of the scan.
• API usage records: Retained for 90 days for monitoring, then deleted.

You can delete your data at any time from your assessment page. Deletion is immediate and permanent.

• Access: You can view all data we hold about your organisation in the assessment dashboard.
• Correction: You can correct inferred data through the Validate Estimates feature and advisor conversations.
• Deletion: You can delete all your data at any time from your assessment page. Deletion is processed immediately.
• Complaint: You can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Australian Privacy Principles.

We use essential cookies only. No tracking, advertising, or third-party analytics cookies are used on this platform:

• sb-*-auth-token— Supabase authentication session cookie
• site_access— Site access gate cookie
• cookie_consent— Records your acknowledgement of this cookie notice (stored in localStorage)

Your data is stored in Australia. However, the following providers process data outside Australia as part of delivering the service:

• Anthropic (United States) — AI processing
• Stripe (United States) — Payment processing
• Brave Search (United States) — Web research queries
• Google (United States) — OAuth authentication

We ensure appropriate safeguards are in place for international data transfers in accordance with the Privacy Act 1988 (Cth).

The Service is not designed for users under the age of 16. We do not knowingly collect personal data from children.

We may update this policy periodically to reflect platform or regulatory changes. Any updates will be posted here with a new effective date.

For privacy-related enquiries, contact us.

High Impact Group Pty Ltd
ABN 40 682 923 128
Australia

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) — Phone: 1300 363 992.