Privacy Policy

1. Who We Are

agriIQ is operated by High Impact Group Pty Ltd (ABN 40 682 923 128). We provide agricultural conditions intelligence for Australian agri-lenders and financial advisers at agriiq.com.au.

2. Information We Collect

We collect the following personal information:

• Account data: name, email address, company, role (provided at signup)
• Authentication data: email/password or Google OAuth profile (name, email, avatar)
• Billing data: payment processing is handled entirely by Stripe. We do not store credit card numbers.
• Usage data: IP addresses (for rate limiting), page views (via Vercel Analytics), Dale chatbot queries
• Lead capture data: email, name, company, and role submitted via the lending access form
• Feedback data: name, email, and message submitted via the contact form
• Email subscriptions: email address and name for the weekly digest

3. How We Use Your Information

• Provide and personalise the agriIQ platform
• Process billing and manage subscriptions
• Send weekly digest emails and proactive portfolio alerts
• Rate-limit API usage and prevent abuse
• Generate AI-powered analysis via Dale chatbot
• Improve the platform based on feedback and usage patterns

4. Third-Party Services

We share data with the following third-party processors:

• Anthropic (USA) — Dale chatbot conversations are sent to Anthropic's API for AI processing. Do not include sensitive personal information in Dale conversations.
• Stripe (USA) — payment processing. Your email, name, and payment details are shared with Stripe when you subscribe.
• Resend (USA) — email delivery for digest emails, alerts, and authentication emails.
• Supabase (AWS Singapore, ap-southeast-1) — database hosting and authentication services.
• Vercel (USA) — application hosting and privacy-focused analytics (no cookies, GDPR-compliant).
• Google — OAuth authentication (if you sign in with Google).
• Sentry (USA) — error tracking and performance monitoring. Captures error data including request metadata (sensitive data is scrubbed before transmission).

5. Cookies & Local Storage

• Authentication cookies: Supabase session cookies (essential, httpOnly)
• Lending access cookie: agri_access_token (90-day, httpOnly)
• Local storage: agriiq-banner-dismissed (UI state)
• Analytics: Vercel Analytics does not use cookies

6. Data Retention

• Account data is retained while your account is active and deleted upon account deletion request
• IP addresses in usage tracking are retained for up to 90 days
• Lead capture data is retained for 12 months unless you request earlier deletion
• Email subscription data is retained until you unsubscribe
• Dale chatbot conversations are not stored on our servers for standard users. For Enterprise users, conversations are stored in the Dale Audit Trail as a compliance feature and are subject to user access under APP 12.

7. Your Rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Unsubscribe from marketing emails at any time
• Lodge a complaint with the OAIC if you believe we have breached your privacy

To exercise these rights, contact us at support@highimpactgroup.com.au.

8. Account Deletion

You can delete your account from the Account page. This will permanently remove your profile, portfolios, risk briefs, alert history, and subscription data. This action cannot be undone.

9. Dale AI Chatbot

Conversations with Dale are processed by Anthropic's AI service (Claude). Your messages are sent to Anthropic's API for real-time analysis. We recommend not including personally identifiable information in your questions. For standard users, Dale conversations are processed in real-time and not stored on agriIQ servers. For Enterprise users, conversations are stored in the Dale Audit Trail as a compliance feature and are subject to user access under APP 12.

10. Cross-Border Data Transfers

Your data may be processed overseas by our third-party service providers. Database hosting is in Singapore (AWS ap-southeast-1) via Supabase. AI processing (Anthropic), payments (Stripe), email (Resend), error tracking (Sentry), and hosting (Vercel) involve data processing in the United States. These providers maintain appropriate data protection measures consistent with the Australian Privacy Principles.

11. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (TLS), httpOnly cookies, server-side token verification, and bot protection via Cloudflare Turnstile. No system is completely secure, so we encourage users to use strong passwords and exercise care when sharing information.

12. Third-Party Links

Our platform may include links to third-party websites or services, including government data sources. We are not responsible for the privacy practices of these providers. Please review their policies before use.

13. Children

agriIQ is a professional platform designed for agri-lenders and financial advisers. It is not designed for users under the age of 16. We do not knowingly collect personal data from children.

14. Changes

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice.

15. Contact

For privacy enquiries or complaints, contact us at support@highimpactgroup.com.au.

Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au