Privacy Policy

AetherForge AI is the trading name of FORGE INTELLIGENCE LIMITED ("AetherForge AI", "we", "us" or "our"). We operate the website www.aetherforgeai.co.nz and provide AI-generated market intelligence and portfolio-monitoring tools. We are the "agency" responsible for your personal information under the Privacy Act 2020.

We are committed to protecting your privacy and handling your personal information openly, transparently and in accordance with the thirteen Information Privacy Principles.

We only collect personal information that is necessary for our lawful functions and activities, and we collect it directly from you wherever possible, by lawful and fair means:

• Account information — your name, email address and country when you register, and authentication details managed by our sign-in provider.
• Paper-book records — the cash, buys, sells, corrections and dividends you record in NZ$, including tickers, quantities, prices, foreign-exchange rates and notes, and the CSV export of that book.
• Billing information — subscription plan, status and payment identifiers. Card details are processed directly by Stripe and are never stored on our servers.
• Technical information — IP address, browser and device type, and usage analytics collected automatically to keep the service secure and reliable.

When we collect personal information from you, we take reasonable steps to ensure you are aware of why it is being collected, who will receive it, and that you have a right to access and correct it.

We use your personal information only for the purposes for which it was collected, including to:

• create, secure and manage your account;
• generate AI market-intelligence reports based on the holdings you add;
• prepare a weekly projections email for a paid plan when that email is switched on. Share projections are for signed-in members: illustrative 7-day ranges for NZX, ASX and US shares, calculated from past prices and listed A–Z. They are scenarios, not forecasts, and general information, not advice. Crypto projections stay paused. The message uses the same market-wide indicative projections described in section 4. It does not include the holdings, values, cash, profit or loss, or allocation on the account. That email stays off until it is enabled, and each message includes an unsubscribe link;
• process subscription payments and manage your plan;
• send you service updates and security notices;
• respond to your support enquiries; and
• maintain, protect and improve the security and performance of the service.

We will not use your personal information for a new, unrelated purpose without your consent, unless permitted under the Privacy Act 2020.

Scores and projected ranges are calculated by a rules-based engine. A third-party AI service writes the plain-English note on a ticker and the replies in the assistant, the Portfolio Notes Assistant, and the Headmaster chat. Those notes are labelled “AI-written note”. A stored member report for Stox, Koins or Headmaster marks its summary as not AI-enhanced, because that summary is built from the calculated figures.

The assistant can send the question you typed, and recent messages in that chat. When the paper book has holdings, it can also send the holding count, the total market value, the total cost, the total unrealised profit or loss, the best and worst performer, the sector weights, and for each holding the ticker, the name, the sector, the share count, the average price, the current price, the value, the profit or loss, and the weight.

The Portfolio Notes Assistant can send your question, and recent messages in that chat. When a Headmaster book is available it can also send the cash balance, the total value, the profit or loss, the diversification score and its label, and the allocation weights and values in NZ$, including cash. It can send the top eight positions with name, asset class, weight and value, the latest Stox and Koins findings, and the Headmaster ideas for names in the book. It can send a plan you typed and report text you attached.

The Headmaster chat can send your question, and recent messages in that chat. It can send the total value, the total cost, the profit or loss, the cash balance, the cash weight, the retained-cash target, the illustrated cash reallocation, and the working that produces that reallocation. It can send each asset class with its weight, its value in NZ$ and its position count, the top eight positions with name, asset class, weight, value and profit or loss, concentration-risk notes, stress-test impacts in NZ$ and percent, and the bull, base and bear scenario pathways. When the book is invested it can send the diversification score and HHI. It can send a calculated yearly return and volatility for the mix. It can send the latest Stox and Koins findings, and the Headmaster ideas block. Names outside the book are included only when you ask for a watchlist.

A ticker note can send the ticker, the question you typed, and the quote used for that note. If you leave the question blank, the request still includes a short default question.

A weekly projections email, when that email is enabled, can send the market-wide indicative 7-day projections already on the projections page: the ticker, the name, the market, the indicative percent, and the as-of label. It does not send a person's holdings, values, cash, profit or loss, or allocation. It does not send the email address. It does not use a report allowance. One note is written for the week and reused for each recipient.

The request does not include a card number. Our code does not write the text of these requests to its logs. Messages in the assistant chat are saved to your account so the conversation can continue, and they stay until you clear the chat. The Portfolio Notes Assistant, the Headmaster chat, the ticker note and the site guide do not save your messages. Stored Stox and Koins reports stay in your account. To have reports or your account deleted, email us and we delete them. The AI provider keeps a request under its own API terms.

Plain-English notes are written by a third-party AI service, xAI (Grok), through its API. xAI's API terms state that API requests and responses are kept for up to 30 days for abuse monitoring, then deleted, and are not used to train its models.

AI-written notes are informational only — see our AI Disclaimer.

We do not sell your personal information. We may disclose it only:

• to the processors named below, bound by confidentiality obligations:
  • Cloudflare — public site and network.
  • Stripe — subscription payments. We never see your card number.
  • xAI (Grok) — plain-English notes and assistant replies (USA).
  • Google Analytics — which pages are used, only after you accept analytics cookies.
  • Totalum on Google Cloud — account storage.
  • CoinGecko — crypto prices.
  • CoinCap — crypto prices.
  • Binance — public crypto price tickers.
  • Kraken — crypto prices.
  • Coinbase — crypto prices.
  • Yahoo Finance — prices for NZX-listed, ASX-listed and US shares, and mapped crypto quotes.
  • GeckoTerminal — DEX token prices.
  • DexPaprika — DEX token prices.
  • gold-api.com — gold and silver spot prices.
  • ExchangeRate-API — daily foreign-exchange rates.
  • Frankfurter — foreign-exchange rates on past trade dates.
• where you have authorised the disclosure;
• where required or authorised by law, including to comply with a lawful request from a New Zealand court, regulator or enforcement agency; or
• in connection with a business restructure, merger or sale, where the recipient agrees to protect your information consistently with this policy.

Some of the processors named in section 5 are located outside New Zealand. That list includes Cloudflare, Stripe, xAI (Grok), Google Analytics, Totalum on Google Cloud, CoinGecko, CoinCap, Binance, Kraken, Coinbase, Yahoo Finance, GeckoTerminal, DexPaprika, gold-api.com, ExchangeRate-API, Frankfurter. DEX prices in that list come from GeckoTerminal and DexPaprika. xAI (Grok) is in the USA. Google Analytics runs only after you accept analytics cookies. Where we disclose personal information overseas, we take reasonable steps to ensure it is protected by comparable safeguards to those under the Privacy Act 2020, or we rely on an exception permitted by IPP 12 (such as your authorisation).

We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, use, modification or disclosure. This includes encryption in transit, access controls, and scoping every portfolio, report and conversation to your own account. No system is completely secure, but if a notifiable privacy breach occurs we will notify affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

We keep your personal information only for as long as it is required for the purposes set out in this policy or as required by law. When information is no longer needed, we securely delete or de-identify it. You may delete your holdings at any time, and you may request deletion of your account.

Under the Privacy Act 2020 you have the right to request access to the personal information we hold about you, and to request correction of any information that is inaccurate, out of date, incomplete or misleading. You can update much of your information directly in your account settings, or contact us to make a request. We will respond within the timeframes required by the Act (generally 20 working days).

Before using or disclosing your personal information, we take reasonable steps to ensure it is accurate, up to date, complete, relevant and not misleading. Please help us by keeping your account details current.

We assign internal account identifiers solely to operate the service. We do not require you to disclose unique identifiers assigned by other agencies (such as an IRD number) and we do not use such identifiers as our own.

We use essential cookies to keep you signed in and to secure the service. Analytics stays off until you accept. Decline keeps it off. You can change this later from Cookie settings. The Google Analytics tag is not loaded until you choose Accept. Decline leaves it off. You can change that choice at any time from Cookie settings in the footer. You can also control cookies through your browser settings, although disabling essential cookies may affect functionality.

If you have a question, wish to exercise your privacy rights, or want to make a complaint about how we have handled your personal information, email admin@aetherforgeai.co.nz or the Privacy Officer at lukas@aetherforgeai.co.nz. You can also use the contact form on the Contact page and mark it for the Privacy Officer. We take privacy complaints seriously and will work with you to resolve them.

If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner (New Zealand): www.privacy.org.nz · 0800 803 909.

We may update this policy from time to time to reflect changes in our practices or the law. The "last updated" date above shows when it was last revised, and material changes will be notified through the service.