Privacy Policy

Last updated: 1 September 2026

1. Introduction

JS Financials ("we", "us", "our") is operated by Jackson Semenas (ABN 57 226 575 365), based in Australia. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website at jsfinancials.com.au (the "Site"), use our member portal, purchase our products, or interact with us through any channel.

We are bound by the Australian Privacy Principles ("APPs") under the Privacy Act 1988 (Cth). Where we process personal data of individuals located in the European Economic Area ("EEA") or the United Kingdom ("UK"), we also comply with the General Data Protection Regulation ("GDPR") and the UK GDPR respectively. Where we process personal data of California residents, we comply with the California Consumer Privacy Act ("CCPA").

By accessing the Site or purchasing any product or service, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

  • Account information: name, email address, and password when you create a member account or are invited to the mentorship portal.
  • Purchase information: name, email address, and billing details when you purchase a product. Payment card details are collected and processed exclusively by our payment processor, Stripe, Inc., and are never stored on our servers.
  • Contact form submissions: name, email address, subject, and message content when you use the contact form.
  • Intake form submissions: personal and professional information you provide when completing a client intake form for the mentorship program.
  • Mentorship submissions: files, code, notebooks, and written content you upload through the mentorship submission system.
  • Chat interactions: messages you send through the AI assistant embedded on the Site.
  • Newsletter signup: email address when you subscribe to receive communications from us.

2.2 Information Collected Automatically

  • Analytics data: we use Vercel Analytics to collect anonymised, aggregated data about page views, visitor counts, referral sources, and device types. Vercel Analytics does not use cookies and does not collect personally identifiable information.
  • Authentication cookies: when you log in to the member portal, we set session cookies via Supabase Auth to maintain your authenticated session. These are strictly necessary functional cookies and are not used for tracking or advertising.
  • Server logs: our hosting provider (Vercel, Inc.) may collect standard server log data including IP addresses, browser type, and request timestamps. This data is retained by Vercel in accordance with their privacy policy.

2.3 Information from Third Parties

  • Stripe: when you complete a purchase, Stripe provides us with your name, email address, and transaction details (but not your full card number).

3. How We Use Your Information

We use your personal information for the following purposes:

  • Service delivery: to provide access to purchased products, courses, reports, the mentorship portal, and the member dashboard.
  • Account management: to create, maintain, and secure your account, including password resets and session management.
  • Payment processing: to process transactions, issue invoices, handle refunds, and manage subscription billing through Stripe.
  • Communication: to send transactional emails (purchase confirmations, password resets, submission review notifications, overdue invoice notices), and, where you have opted in, marketing communications.
  • Mentorship administration: to manage your mentorship enrolment, track your progress, provide feedback on submissions, log session notes, and deliver personalised content.
  • Site improvement: to analyse anonymised usage patterns and improve the Site, products, and user experience.
  • Legal compliance: to comply with applicable laws, regulations, and legal processes, and to protect our rights and the rights of others.

4. Legal Basis for Processing (GDPR)

If you are located in the EEA or UK, we process your personal data on the following legal bases:

  • Performance of a contract: processing necessary to deliver the products and services you have purchased.
  • Legitimate interests: processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and administering the mentorship program, provided these interests do not override your fundamental rights.
  • Consent: where you have given explicit consent, such as subscribing to marketing communications. You may withdraw consent at any time.
  • Legal obligation: processing necessary to comply with a legal obligation to which we are subject.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We share your information only with the following categories of third-party service providers, strictly for the purposes described in this policy:

  • Stripe, Inc.(payment processing): receives your name, email, and payment details to process transactions. Stripe's privacy policy: stripe.com/privacy
  • Supabase, Inc.(authentication, database, and file storage): stores your account data, entitlements, mentorship content, and submitted files. Supabase's privacy policy: supabase.com/privacy
  • Vercel, Inc.(website hosting and analytics): hosts the Site and collects anonymised analytics data. Vercel's privacy policy: vercel.com/legal/privacy-policy
  • Resend, Inc. (email delivery): processes and delivers transactional and marketing emails on our behalf.
  • Anthropic, PBC(AI assistant): messages you send to the AI chat assistant on the Site are processed by Anthropic's API to generate responses. We do not send your account data or personal information to Anthropic beyond the content of your chat messages.
  • Formspree, Inc. (form processing): processes contact form and intake form submissions.

We may also disclose your information where required by law, court order, or governmental authority, or where necessary to protect our legal rights or the safety of others.

6. International Data Transfers

Our service providers are primarily located in the United States. By using the Site or purchasing our products, you acknowledge that your personal information may be transferred to and processed in the United States and other jurisdictions outside Australia, the EEA, and the UK.

Where personal data is transferred outside the EEA or UK, we ensure appropriate safeguards are in place, including reliance on the service provider's Standard Contractual Clauses or other approved transfer mechanisms under the GDPR.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including:

  • Account data: for the duration of your account and for a reasonable period thereafter to allow for reactivation or to comply with legal obligations.
  • Purchase and transaction records: for a minimum of seven (7) years to comply with Australian tax and accounting obligations.
  • Mentorship submissions and session logs: for the duration of the mentorship program and for twelve (12) months after its conclusion, unless you request earlier deletion.
  • Contact form and intake form submissions: for twelve (12) months after the enquiry is resolved.
  • Chat assistant messages: not stored by us beyond the duration of your browser session. Anthropic may retain data in accordance with their own data retention policy.

When personal information is no longer required, we will securely delete or anonymise it.

8. Cookies and Tracking Technologies

The Site uses the following cookies and tracking technologies:

  • Strictly necessary cookies: Supabase authentication session cookies, required for the member portal to function. These cannot be disabled without breaking login functionality.
  • Analytics: Vercel Analytics, which operates without cookies and collects only anonymised, aggregated data.

We do not use advertising cookies, retargeting pixels, or any third-party tracking cookies. We do not participate in cross-site tracking or behavioural advertising.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • All data transmitted between your browser and the Site is encrypted using TLS (HTTPS).
  • Authentication is managed through Supabase Auth with bcrypt password hashing. We do not have access to your plaintext password.
  • Payment data is processed exclusively by Stripe, which is PCI DSS Level 1 certified. We never receive or store your full card number.
  • Member portal content is protected by row-level security policies that restrict access to authorised users only.
  • File downloads are served via short-lived signed URLs (60 seconds) to prevent unauthorised access.

No method of electronic transmission or storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

10. Your Rights

10.1 Rights Under Australian Privacy Law

Under the Privacy Act 1988 (Cth), you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Complain to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.

10.2 Rights Under GDPR (EEA and UK Residents)

If you are located in the EEA or UK, you have the following additional rights:

  • Right of access: to obtain confirmation of whether we process your personal data and to receive a copy.
  • Right to rectification: to correct inaccurate or incomplete personal data.
  • Right to erasure: to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
  • Right to restriction: to request restriction of processing in certain circumstances.
  • Right to data portability: to receive your personal data in a structured, commonly used, machine-readable format.
  • Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time.

You may exercise these rights by contacting us at the details provided in Section 13. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

10.3 Rights Under CCPA (California Residents)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose.
  • Request deletion of your personal information.
  • Opt out of the sale of personal information (we do not sell personal information).
  • Not be discriminated against for exercising your privacy rights.

11. Children's Privacy

The Site and our products are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Site after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or wish to make a complaint, please contact us:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or with the relevant supervisory authority in your jurisdiction.