Privacy Policy

PortLens (ABN 59 498 934 467) handles your personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This policy explains what we collect, why and how, who we share it with, and your choices. Your use of PortLens is also governed by our Terms of Service. Contact us at connect@portlens.com.au.

We collect personal information where it is reasonably necessary to operate PortLens, communicate with you, process subscriptions, comply with our legal obligations, keep the Service secure, and improve our features. We only collect what we need for these purposes.

• Account details — your name and email address. Passwords are stored only as cryptographic hashes, never in plain text.
• Portfolio data you enter — the ASX tickers, quantities and costs you add (your holdings).
• Payment information — handled by Stripe. We don't see or store your full card number; we receive subscription status.
• Usage & analytics data — an anonymous visitor ID, pages viewed, and behavioural analytics including session replays and heatmaps via Microsoft Clarity (see section 6).
• Technical data — device and browser information, and an approximate geographic location inferred from your IP address.

We collect information:

• directly from you — when you create an account, enter portfolio information, contact us or submit feedback;
• automatically — through cookies, local storage and analytics technologies as you use the site; and
• from our payment provider (Stripe) — in connection with your subscription status.

Portfolio information you enter remains your information. It is used solely to provide analysis, reporting and related features within PortLens, and we do not sell it or use it for unrelated purposes.

• To provide, secure and improve PortLens.
• To send the emails you opt into (such as the Morning Brief and Weekly Wrap).
• To process subscriptions and payments.
• To understand how the product is used so we can make it better.

We partner with Microsoft Clarity to capture how you use our site through behavioural metrics, heatmaps and session replay, which helps us improve the product. Site-usage data is captured using cookies and similar technologies, and Clarity automatically masks sensitive input fields. Microsoft may process this analytics information in accordance with its own privacy practices — see the Microsoft Privacy Statement. We only load Clarity after you accept cookies via our consent banner.

We use:

• Essential / authentication cookies and local storage — to keep you signed in and remember your preferences (including your cookie choice);
• Session cookies — which expire when you close your browser; and
• Analytics cookies — set by Microsoft Clarity once you accept (see section 7).

You can block or clear cookies in your browser, though some features may not work properly.

We don't sell your personal information. We share limited data with service providers who help us run PortLens:

• Stripe — payment processing.
• Resend — sending the emails you opt into.
• Microsoft Clarity — analytics and session replay.
• Market-data providers — where possible we send only ticker symbols or identifiers to retrieve prices and news; no personal identifying information accompanies those requests.
• Hosting & infrastructure — to run and secure the app.

Some of our service providers may process information in countries including the United States and member states of the European Union. We take reasonable steps to ensure these providers handle your information consistently with applicable privacy obligations, including through their contractual and security commitments.

We take reasonable steps to protect your information, including:

• encryption in transit (HTTPS);
• passwords stored only as cryptographic hashes;
• restricted staff and system access on a need-to-know basis;
• reputable cloud-provider security controls; and
• monitoring and logging.

No method of transmission or storage is completely secure, but we work to protect your information and review our practices.

We retain personal information only for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, enforce our agreements and maintain business records. When it's no longer needed, we delete or de-identify it.

We only send marketing or product emails you've opted into. You can unsubscribe at any time using the unsubscribe link in any such email, or by contacting us at connect@portlens.com.au. You'll still receive essential service messages (for example about your account or billing).

You can ask us to access or correct the personal information we hold about you by emailing connect@portlens.com.au. We may need to verify your identity before acting on a request (for example by confirming details associated with your account). We aim to respond within a reasonable time, and we'll let you know if we can't fully meet a request and why.

You can ask us to delete your account and personal information. Some information may be retained where required by law or for legitimate business purposes (for example billing records, security and fraud prevention), as described in section 12.

PortLens is intended for users aged 18 and over. It is not directed at children under 18, and we do not knowingly collect their personal information. If you believe a child has provided us information, please contact us and we'll take reasonable steps to delete it.

If you have a privacy concern, please contact us first at connect@portlens.com.au. We'll investigate and aim to respond within a reasonable time. If you're not satisfied with our response, you can refer the matter to the Office of the Australian Information Commissioner (OAIC).

We may update this policy from time to time and will change the date above when we do. As privacy laws in Australia continue to evolve, we keep this policy under periodic review.