Privacy Policy

Effective Date: 25/01/2026
Platform Name: Hatchling Investor
Website: https://hatchlinginvestor.com
Contact Email: support@hatchlinginvestor.com

Hatchling Investor (ABN 38 304 433 759) (“we”, “us”, or “our”) operates the website https://hatchlinginvestor.com ("the Platform"). We provides an online stock analysis and educational platform intended to assist users in understanding publicly available company information.

The user of the platform ("you", "your", "the user") signs up and interfaces with the Platform.

These policies define the data we collect from the user while they use the Hatchling Investor website, platform, and related services (collectively, the “Platform”).

We are committed to protecting your privacy and handling personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). This Privacy Policy explains how we collect, store, use, and disclose personal information. We only collect what is strictly necessary to provide the services of the Platform, and we do not engage in the sale of user data to third-party advertisers or data brokers.

1. Personal Information We Collect

We collect the following categories of personal and technical information.

1.1 Account Details

• When you create an account, we collect your email address, which is stored in our backend database. This is collected during sign-up and is used for account authentication and security-related communication.
• We also collect a password, which is stored only in a hashed and unreadable form in our backend database. This is collected during sign-up and is used solely for secure authentication. We cannot view or retrieve your actual password.
• We additionally collect a display name, which is stored in our backend database. This is collected during sign-up and is used for profile display and account-related communication.

1.2 Technical Details

We collect certain anonymous and technical information to enforce anonymous usage limits:

• On your first visit, an anonymous ID is created and stored locally on your device to identify your device across a session.
• A view count is also stored locally when you view stock analysis pages.

1.3 Enhancement Details

The following are things we save to enhance the user experience:

• Your theme preference (light or dark mode) is stored locally on your device when you toggle it, for user interface customisation.
• We also store authentication session data to keep you signed in. This is stored in local storage if “Remember Me” is enabled, or in session storage otherwise, and is collected upon sign-in.
• In the future, we may add a feature to enhance the user experience by remembering which stocks you have recently seen, or stocks you choose to keep in a list (e.g. portfolio or watchlist). The user would personally choose what stocks to "keep" while recently-seen stocks will be collected automatically.

2. How We Collect Personal Information

We collect personal information in the following ways:

Information You Provide Directly

We collect information directly from you when you sign up for a new account or sign into an existing account. This information is stored securely on our backend servers and includes items such as your:

• Email address
• Hashed password (we don't directly store your password for security purposes)
• Display name
• Stocks you choose to save to view later (if a such a service becomes available in the future)

Information Collected Automatically

We also collect certain information automatically when you use the platform. This information is stored locally on your device using local storage or session storage. This information does not leave your device. Examples include:

• Anonymous ID
• How many stock analysis pages you visit
• Authentication session data (to keep users signed in).
• Recently viewed stocks (if such a service becomes available in the future)

This information is used primarily to enforce anonymous usage limits and improve user experience.

3. Where We Store Your Personal Information

Your information is stored securely on Supabase servers. Supabase handles security of the backend data, this includes our own data, as well as your personal information.

4. Why We Collect Personal Information

We collect personal information to: allow you to create and maintain a secure account, operate and improve the platform, ensure platform security and prevent misuse, comply with legal obligations

5. How We Use and Disclose Personal Information

We use personal information only to the extent necessary for the following purposes:

• Creating and managing user accounts,
• Authenticating users and maintaining secure login sessions,
• Enforcing anonymous usage limits,
• Providing access to platform features,
• Improving platform performance and user experience,
• Protecting the security and integrity of the platform,
• Complying with legal and regulatory obligations.

We do not use personal information for advertising, profiling, or marketing. We do not sell your personal information. We only disclose personal information where:

It is necessary to operate the platform (e.g. to trusted service providers such as Supabase and Cloudflare), the recipient is contractually required to handle information securely and only for approved purposes, disclosure is required by law.

We do not share personal information for unrelated, informal, non-business, or any undisclosed purposes.

We may disclose information if required by law or to protect legal right.

6. Disclosure to Third-Parties

We do not sell, trade, or rent your personal information to others. We only share information with third parties in the following circumstances:

• Service Providers: We share data with infrastructure providers (like Supabase and Cloudflare) who are essential to running the Platform. These parties are contractually obligated to keep your information confidential.
• Legal Necessity: We may disclose your information if required to do so by law (e.g., a subpoena) or if we believe such action is necessary to comply with the law and the reasonable requests of law enforcement.
• Business Transfer: If Hatchling Investor is involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your personal information is moved and becomes subject to a different Privacy Policy.

7. Access and Correction

Under the Australian Privacy Principles, you have specific rights regarding your data:

• Access: You have the right to request a copy of the personal information we hold about you.
• Correction: You have the right to request that we correct any inaccurate or out-of-date information.
• Response Time: We will respond to any request for access or correction within 30 days.

To exercise these rights, please contact support@hatchlinginvestor.com.

8. Complaints

If you believe that we have breached the Australian Privacy Principles or have a complaint about how your data has been handled:

1. Contact Us: at support@hatchlinginvestor.com.
2. Investigation: We will investigate your complaint and provide a written response within a reasonable timeframe (typically 7 days).
3. External Review: If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

9. Data Security

We take reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These measures include secure authentication systems, and encryption where appropriate. However, no system can be guaranteed to be completely secure. Users are also responsible for taking reasonable steps to protect their own account security, including keeping login credentials confidential and using secure devices and networks. We are not responsible for unauthorised access resulting from a user’s failure to safeguard their account information.

10. Retention of Personal Information

We retain personal information only as long as necessary for the purposes listed above. If you delete your account, your personal information will typically be deleted immediately from our backend. However, backend processes with our third-party provider may allow data to be retained for up to 14 days.

Personal information stored on your own device won't automatically be deleted.

11. Tracking

We use cookies and similar technologies to improve the platform and user experience. This may include tracking usage, login sessions, and device information.

12. Communication

We will only send emails for account security purposes (e.g., password resets), or notifying of changes to our Terms of Service or Privacy Policy. We do not send newsletters, marketing, or promotional emails.

13. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. For any and all changes, we will notify registered users via their provided email address.

14. Contact Us

For privacy questions, requests, or complaints, contact: support@hatchlinginvestor.com