Privacy Policy

1.1 This Privacy Policy explains how Ben Rogers (ABN 85 543 459 204), trading as Vitrion ("Vitrion", "we", "us") collects, uses, stores and discloses personal information through the Vitrion software and website (the "Service"). It forms part of our Terms of Service.

1.2 We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1.3 We are the seller of every Subscription. Stripe processes payments for us as our payment processor: it receives the payment details it needs directly from you, and we do not see or store your card number.

2.1 Account information: your email address and display name, from the Microsoft (Microsoft Entra External ID) sign-in you create.

2.2 Household information: the information you enter about your household. This may include names, dates of birth, relationships, employment and occupation, state of residence, retirement ages, superannuation, income, expenses, assets, liabilities, insurance policies, trusts and companies, dependants, goals and the scenarios you build, whether entered in a form or changed in place in your Position's narrative.

2.3 Health information: a health-status rating and smoking status, collected only with explicit consent given for each person in the Health section. Until consent is given for a person, none of their health information is recorded. Consent can be withdrawn at any time in the same place, and withdrawing it deletes that person's health information immediately.

2.4 Your goals in your own words: when Agent asks what you want, your answer is kept exactly as written, with the question it answered. Corrections are added after the original rather than replacing it.

2.5 Results: the results the Service produces from your information, together with the assumptions and scenario under which each was produced.

2.6 Information about others: if you enter information about another person, such as a partner or dependant, you must be entitled to do so, and we ask you to let them know it is held in accordance with this Policy. Health information about a person is recorded only once consent is given for that person under 2.3, and any account holder of the household may give that consent.

2.7 Shared households: an owner of a household may invite another person to hold access to it with their own account. We record the email address the invitation is made for. The owner sends the invitation link themselves; we do not send it, we store only a hashed form of it, and it expires 7 days after it is created. Every account holder of a shared household can see and change all of the information in it, including health information for which consent has been given, and each account holder's email address and display name are shown to the others. We also record who has held access to the household and when.

2.8 Website enquiries: if you send us a question through a form on our website, we collect your name, your email address and what you write, which may include questions about your own finances. We use it only to reply to you and to prepare for a session with you. Messages from our contact page and questions sent through our questions form are kept in the Service's Microsoft Azure SQL database in Australia East (New South Wales), with the date you ticked the box to agree to this use, and we email you once to say we have them; sending them does not add you to our subscriber list. Within Vitrion, only Ben Rogers can see either, and neither is added to a household record in the Service. We keep it for 12 months from your last message, and you may ask us to delete it sooner at any time by contacting us under clause 10. We do not share it with anyone else, or use it for marketing, without your consent.

2.9 Our subscriber list: if you join the list on our website, we collect your email address and the dates you joined, confirmed and left. You are added only once you open the confirmation link we email you; if you do not, you are not added and we send you nothing further. We use the list only to email you new articles when they are published, and we do not promise how often. The list is kept in the Service's Microsoft Azure SQL database in Australia East (New South Wales), and the emails are sent from our Microsoft 365 mailbox. Every email carries a link that takes you off the list in one click, and you may also ask us to remove you by contacting us under clause 10. Once you leave, we send nothing further and keep only your email address and those dates, as the record of your consent. We do not share the list with anyone else.

2.10 Notes: notes on the sections of your Position and Decisions, written by you or added by Agent from your conversation with it and marked as such. You can edit or remove any note. Notes are read by Agent, and so are sent to Anthropic under clause 4; the engine that produces your results never reads them.

3.1 We use your information only to provide the Service to you: to model your household's position, to show and keep your results over time, and to respond to your requests through Agent.

3.2 We do not use your information for any other purpose, including to develop or test the Service, without your consent.

3.3 We may produce aggregate, de-identified counts, never individual records, to measure whether the Service is helping its users.

4.1 Agent is powered by Anthropic's Claude models, accessed through Anthropic's API. When you use Agent, the information needed to answer you is sent to Anthropic, which processes it outside Australia.

4.2 This includes: your messages and the earlier messages in the conversation; a summary of your household (each member's first name, age and retirement age; total assets and debts; monthly income and expenses; total superannuation; and each goal's name, amount and date); your most recent headline result; and any further parts of your record Agent reads to answer you, which may include full names, dates of birth, employment, accounts, income, expenses, debts, goals, insurance policies and scenarios. Smoking status is sent only for a person whose health consent is recorded. Your notes on the sections of Position and Decisions are read by Agent, and so are sent to Anthropic; the engine that produces your results never reads them.

4.3 Your email address, health-status rating and stored goals narrative are not sent.

4.4 Your conversations with Agent are stored in your browser, not on our servers. Deleting a conversation removes it from your browser. Information already sent to Anthropic is handled under Anthropic's commercial terms, under which inputs and outputs are deleted from Anthropic's systems within 30 days of receipt or generation, except where longer retention is needed to enforce its Usage Policy (up to 2 years for flagged content) or to comply with the law, and they are not used to train Anthropic's models.

5.1 Microsoft (Microsoft Entra External ID) provides sign-in, and Microsoft Azure hosts the Service and its database. Operational telemetry is kept in Azure Application Insights for 30 days. Stripe processes payments: when you subscribe it receives your name, email address, billing address and payment details to take the payment, and may process them outside Australia. We do not see or store your card number.

5.2 We do not otherwise disclose your information to third parties. The Service contains no advertising and no third-party analytics.

5.3 Access to household information in the production Service is limited to Ben Rogers and Chris Rogers, and is used only to operate, maintain and support the Service, or at your request.

6.1 Your information is stored in a Microsoft Azure SQL database located in Australia East (New South Wales).

6.2 We take reasonable steps to protect your information from misuse, interference, loss and unauthorised access, modification or disclosure, including encrypted connections and restricted administrative access.

7.1 You can view and correct your information in the Service at any time, except your goals narrative, which is corrected by adding to it.

7.2 You may ask for access to the personal information we hold about you at any time, with or without a Subscription, by contacting us under clause 10. We will respond within 30 days.

7.3 Export of your Position as a product feature is available on paid Subscriptions under the Terms of Service.

8.1 You may delete individual items, or your entire household record, at any time from within the Service. Deletion removes the information, including your goals narrative and stored results, from the live Service immediately, and from backups within 7 days.

8.2 Where a household is shared, any account holder may delete it, and deleting it deletes it for every account holder. The record of who has held access to the household and when, and of the invitations made to it, including each invited email address, is kept until the household is deleted and is deleted with it.

8.3 When a shared household is deleted, or an account holder is removed from one, we keep a notice for each person affected, recording only what happened and when and nothing from the household, until that person dismisses it.

8.4 You may also ask us to delete your information by contacting us under clause 10.

8.5 Records of payments, refunds and invoices are kept after your household is deleted. Five years after each payment, we remove your name, email address and billing address from its record, and keep only the amount, date and plan.

9.1 We never sell your personal information and never use it for advertising.

10.1 Questions, requests and complaints can be sent to contact@vitrion.com.au.

10.2 We will respond to a complaint within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (www.oaic.gov.au).

11.1 This Policy is effective from 24 October 2026.

11.2 We may update this Policy. We will notify you of material changes before they take effect, and each version is dated.