Privacy Policy

Last updated: 18 October 2026

Wealth Locker helps you store and make sense of your insurance, wealth, and estate information in one secure place. That information is among the most sensitive you own, and protecting it is central to how we build the product. This Privacy Policy explains what we collect, how we use and protect it, who we share it with, and the rights you have over it.

We handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). By using Wealth Locker you agree to the practices described here. If you don't agree, please don't use the service.

Information you give us

• Identity and contact details (name, email, phone, date of birth, address)
• Account credentials (email and a password, which we never see in plaintext)
• Insurance information (personal, health, and general policies, premiums, providers)
• Wealth information (assets, liabilities, structures, entities, valuations)
• Estate information (documents, key people, health-check items)
• Documents you upload, and the text extracted from them

Information created when documents are processed

When you upload a document, we extract structured data from it — for example policy numbers, coverage amounts, dates, and beneficiaries — so it can be organised in your account.

Information collected automatically

• Technical data such as browser type, device, and IP address
• Usage data such as which features you use and when you sign in
• Essential cookies needed to keep you signed in and the app working

We use the information we collect to:

• Provide, maintain, and secure the platform
• Read and organise your uploaded documents
• Create and manage your account and any adviser connection you choose
• Send you service notifications such as policy renewal reminders
• Respond to your requests and provide support
• Detect, prevent, and investigate fraud or unauthorised access
• Improve the product and develop new features
• Meet our legal and regulatory obligations

We do not sell your personal information, and we do not use it for third-party marketing.

Wealth Locker uses artificial intelligence to read your documents and pull out the key details, so you don't have to enter everything by hand. This involves:

• Optical character recognition (OCR) to read text from PDFs and images
• Large language models to interpret policy terms and extract structured data
• Generating plain-language summaries of what a document contains

This processing is carried out by AI and OCR service providers: Anthropic is our main AI provider, OpenAI is used to retry a PDF that our main provider cannot read, and Datalab reads text from documents that need it. We may also use Google's Gemini models. Your document content is sent to them to perform the analysis. We do not use your documents to train AI models. Each provider handles the information it receives under its own terms. The results are used to populate your Wealth Locker account. Section 4 explains where these providers handle information, including outside Australia.

We share information only where it's needed to run the service or where the law requires it:

• Service providers (sub-processors): vendors who host our infrastructure, process documents, send transactional email, and handle payments. They are named below and in our Data Policy.
• Your financial adviser: if you link an adviser, they can see the areas of your Locker that you choose. You can change those areas, or remove the adviser, at any time from People With Access on your Profile page.
• Your adviser's firm: if your adviser works in a firm on Wealth Locker, the firm's admins can view and edit your Locker, and colleagues the firm allows can view it. This firm access is not limited to the areas you chose for your adviser. If your adviser's login is deactivated, every active adviser in the firm can view that adviser's clients. The firm can also move you to another adviser in the firm, for example when your adviser leaves. If you have your own Wealth Locker login and the firm sends the notice, we tell you in the app, and by email unless you have turned off adviser emails.
• Wealth Locker support: our support team can view and edit a customer's information when needed to help with a request. Changes made through our admin tools, such as a password or two-factor reset, are recorded along with who made them. Edits to your records are recorded too, but that record shows what changed, not who changed it.
• Legal requirements: where we are required to disclose information by law or valid legal process.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

Disclosure outside Australia

We disclose personal information, including the documents you upload, to service providers outside Australia. In particular:

• Supabase (database, sign-in and document storage): your account data and uploaded documents are stored in Singapore.
• Netlify (application hosting and background processing): the functions that run Wealth Locker, and that process each document you upload, run in the United States.
• Anthropic (AI analysis): the document being analysed is sent to Anthropic. Anthropic says it stores data in the United States and may route processing to the United States, Europe, Asia and Australia.
• Google (Gemini models, which we may use for AI analysis): Google says it may process and cache data in any country where Google or its agents maintain facilities.
• OpenAI (AI analysis, used to retry a PDF our main AI provider cannot read): OpenAI says it processes and stores data in the United States and in other countries where its affiliates, partners or vendors are located.
• Datalab (reading text from documents that need it): Datalab says its services are hosted in the United States, and possibly other countries.
• Stripe (payments): receives your name, email and billing details. Stripe says it processes data in the United States and in other countries where its affiliates and sub-processors operate.

Emails the Wealth Locker app sends (such as welcome emails, invitations and notices) go out through Amazon Web Services in Sydney. A document you forward to docs@wealthlocker.ai is received by our email service in Sydney, then processed like any other upload, which means by our functions in the United States and by the AI providers above. Where personal information is handled overseas, we take reasonable steps to ensure it is protected to a standard consistent with the Australian Privacy Principles. Our full list of providers is in our Data Policy.

We apply technical and organisational controls to keep your data safe, including:

• Encryption in transit (HTTPS/TLS) and at rest
• Database access rules, enforced at the database, so each account can only reach the data it is allowed to see
• Centralised authorisation checks on our API and least-privilege access internally
• Automated security scanning in our build pipeline and ongoing dependency patching
• A record of account activity, including changes made through our admin tools

Our full approach is described in the Security Policy. No system can be guaranteed perfectly secure, but we work continuously to reduce risk.

We keep your personal information while your account is active and for as long as we need it to provide the service. We may retain certain information longer where required to meet legal obligations, resolve disputes, or enforce our agreements.

When you close your account, we deactivate it straight away: sign-in is blocked, you're signed out of every device and any paid subscription is cancelled. We permanently delete your account, and everything in it, on a date we show you when you close it. That date is 30 days after you close the account, counted to the next midnight, Melbourne time. Until then you can ask Support (support@wealthlocker.com.au) to restore your account. After that date we can't restore it.

If you closed your account before 18 October 2026, we keep it deactivated and archived until you ask us to delete it. To do that, contact support@wealthlocker.com.au.

Permanent deletion removes your account records, your stored files and documents, your support conversations, our records of documents you emailed to us and any archived copy. We delete these unless the law requires us to keep them. A raw copy of an email you forward to docs@wealthlocker.ai is held by our email service for up to 30 days and then deleted automatically. Some records are not deleted with your account:

• a security log of sign-ins and account changes, including IP address and device details, kept for security and fraud prevention;
• a minimal record that your account existed and was deleted: your email address and the dates, so we can show the deletion happened;
• billing records held by Stripe, our payment provider;
• records of our AI usage and costs, with your account details removed.

Copies may also remain in backups for a limited time. Retention by data type is set out in the Data Policy.

Under Australian privacy law you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: ask us to correct information that is inaccurate or out of date
• Deletion: ask us to delete your personal information and account
• Portability: request your data in a machine-readable format
• Objection / restriction: object to or ask us to limit certain processing
• Complaint: raise a concern with us, and with the Office of the Australian Information Commissioner (OAIC)

You can exercise any of these rights using the contact form below — no email account is needed. We respond to verified requests within a reasonable time and in line with our legal obligations.

We use cookies and similar technologies that are essential for the platform to function — for example, to keep you securely signed in and to remember your preferences. You can control cookies through your browser, though disabling essential cookies will stop the app from working properly.

We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date above. We encourage you to review it periodically. Continuing to use Wealth Locker after changes take effect means you accept the updated policy.

Questions about this policy or your privacy, or want to exercise one of your rights? Use the contact form below. If you're signed in, we'll reply to the address on your account.