1. About This Policy

Separately ("we", "us", "our") operates the website at separately.ai and provides a divorce asset division estimation tool for Australian users. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our service, you consent to the collection and use of your information as described in this policy. If you do not agree, please do not use our service.

2. Information We Collect

2.1 Information You Provide

• Account details: username, email address, and password (hashed)
• Assessment data: financial information about assets, debts, superannuation, income, and property you enter into the form wizard
• Relationship details: names, dates of birth, relationship dates, and children's information as entered for your assessment
• Payment information: processed securely by Stripe — we do not store card numbers

2.2 Information Collected Automatically

• Device and browser information (user agent, screen resolution)
• IP address
• Usage data via Google Analytics (pages visited, session duration)
• Cookies for session management and authentication

2.3 Information from Third Parties

• Google OAuth: if you sign in with Google, we receive your name, email address, and profile picture from Google

3. How We Use Your Information

We use your personal information to:

• Provide, operate, and maintain the Separately service
• Generate your asset division estimation reports
• Process payments via Stripe
• Authenticate your identity and manage your account
• Communicate with you about your account or service updates
• Improve our service through aggregated, de-identified analytics
• Comply with legal obligations

We will not use your personal information for purposes other than those described above without your consent.

4. How We Store and Protect Your Information

• Your data is stored in MongoDB databases hosted by MongoDB Atlas with encryption at rest and in transit
• Passwords are hashed using Argon2id, an industry-leading algorithm
• Session cookies are httpOnly and secure
• Payment data is handled by Stripe and is PCI-DSS compliant
• Access to production systems is restricted to authorised personnel

While we take reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Disclosure of Your Information

We may share your personal information with:

• Stripe: for payment processing
• Google: if you use Google OAuth sign-in
• AI providers: to generate analysis insights (data is sent without personally identifying information where possible)
• Hosting providers: Vercel (application hosting), MongoDB Atlas (database hosting)
• Law enforcement: if required by law or to protect our legal rights

We do not sell your personal information to third parties.

6. Cookies

We use the following types of cookies:

• Essential cookies: session authentication (required for the service to function)
• Analytics cookies: Google Analytics to understand how users interact with our service

You can control cookies through your browser settings, but disabling essential cookies will prevent you from using the service.

7. Your Rights Under the Australian Privacy Act

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or out-of-date information
• Request deletion of your account and associated data
• Withdraw consent for data processing at any time
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached

To exercise any of these rights, please contact us at the details below. You can also delete your account directly from your account settings page.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account, we delete your user record and all associated assessments, assets, debts, calculations, and AI analysis results.

We may retain de-identified, aggregated data for analytics purposes. Transaction records may be retained as required by Australian tax law.

9. Cross-Border Data Transfers

Your data may be processed in countries outside Australia by our service providers (e.g. Vercel in the United States, MongoDB Atlas data centres). We take reasonable steps to ensure these providers comply with the APPs or equivalent protections.

10. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Separately
Email: privacy@separately.ai

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.