Privacy Policy

DANA — Directional AI Navigating Assets · Last updated: June 2026 (rev. 2)

1. Introduction

This Privacy Policy explains how DANA ("DANA", "we", "us", or "our") collects, uses, stores, and protects your personal information when you use the DANA platform, website, mobile applications, and related services (collectively, the "Service"). It explains the categories of data we process and the legal bases on which we rely (see "Legal Bases for Processing"). Where we rely on your consent — for example, for optional marketing — we ask for it separately and you may withdraw it at any time. If you do not agree with this Policy, please do not use the Service.

2. Information We Collect

We collect only the information needed to operate the Service: (a) Account information — your name and email address when you register or sign in (including via Google or Apple sign-in); (b) Billing information — processed securely by Stripe; we do not store your full payment card details; (c) Communication preferences — such as whether you opt in to email or SMS alerts, and a mobile number if you enable SMS alerts; (d) Usage data — pages viewed, features used, and basic device/log information (IP address, browser type) collected automatically to keep the Service secure and reliable.

3. How We Use Your Information

We use your information to: (a) provide, maintain, and improve the Service; (b) authenticate your account and process subscriptions; (c) send you signal alerts, digests, and service notifications you have opted into; (d) respond to support requests; (e) detect, prevent, and address fraud, abuse, or security issues; and (f) comply with our legal obligations. We do not use your personal information to make automated decisions that produce legal or similarly significant effects about you.

4. Social Media Content & Automation

DANA operates its own social media accounts on TikTok, Instagram, and YouTube to publish its own educational finance videos. Our posting automation acts solely on DANA-owned accounts and DANA-owned content. We do not collect, access, or process the personal data, profiles, or content of any other social media users through this automation, and we do not post on behalf of any visitor or member.

5. YouTube API Services

DANA uses YouTube API Services to upload its own videos to, and read the public statistics of, its own YouTube channel. By using features that rely on these APIs you also agree to the YouTube Terms of Service (available at https://www.youtube.com/t/terms), and our handling of any data obtained through Google APIs is also governed by the Google Privacy Policy (available at https://policies.google.com/privacy). Through the YouTube API we access and store only our own channel identifier and the public statistics (views, likes, comments) of our own uploaded videos; we do not access, store, or share any other YouTube user's data. You can review or revoke DANA's access to your Google account data at any time via the Google security settings page at https://myaccount.google.com/permissions. Any authorized data we cache is refreshed or deleted in line with this Policy and the YouTube API Services Terms.

6. Cookies & Similar Technologies

We use essential cookies and local storage to keep you signed in, remember preferences, and secure the Service. We do not use cookies to sell your data. You can control cookies through your browser settings, though disabling them may limit some features.

7. Third-Party Service Providers

We share limited information with trusted providers only as needed to run the Service: Stripe (payment processing), our email/SMS delivery providers (alerts and notifications), and our hosting and infrastructure providers (e.g. Render and Cloudflare). These providers process data on our behalf under their own privacy and security obligations. We do not authorise them to use your information for their own marketing.

8. We Do Not Sell or Share Your Data

We do not sell, rent, or trade your personal information to third parties. We may disclose information only: (a) with your consent; (b) to the service providers described above; (c) if required by law, regulation, legal process, or governmental request; or (d) to protect the rights, property, or safety of DANA, our users, or the public.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we delete or anonymise it.

10. Data Security

We use industry-standard technical and organisational measures — including encryption in transit, access controls, and secure infrastructure — to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Legal Bases for Processing (GDPR)

Where the EU or UK GDPR applies, we process your personal data only where we have a lawful basis to do so: (a) Performance of a contract — to provide the Service you have signed up for and process your subscription; (b) Legitimate interests — to secure, maintain, and improve the Service and prevent fraud and abuse, balanced against your rights; (c) Consent — for optional communications such as marketing emails or SMS alerts, which you may withdraw at any time; and (d) Legal obligation — where we must process data to comply with the law. We do not carry out automated decision-making that produces legal or similarly significant effects about you.

12. Your Rights

Depending on your jurisdiction (including under the EU/UK GDPR and the California CCPA/CPRA), you may have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, to data portability, and to withdraw consent at any time. California residents have the right to know what personal information we collect, to request deletion, to correct it, and to opt out of any "sale" or "sharing" of personal information — we do not sell or share your personal information, so no opt-out is required, but you may still contact us to confirm. We will not discriminate against you for exercising any of these rights. To exercise any right, contact us at info@dana.technology; we will respond within the time required by applicable law. If you are in the EU/UK and believe we have not handled your data lawfully, you also have the right to lodge a complaint with your local data-protection supervisory authority.

13. Marketing Communications

You may opt out of marketing or alert emails at any time using the unsubscribe link in any message, or by adjusting your notification settings. We will still send essential service or transactional messages (such as billing receipts and security notices).

14. International Data Transfers

DANA is operated from Australia and uses infrastructure that may process data in other countries. Where personal information is transferred across borders — including from the EU/UK — we take steps to ensure it remains protected consistent with this Policy and applicable law, relying on appropriate safeguards such as the European Commission's Standard Contractual Clauses (or equivalent UK transfer mechanisms) where required.

15. Children's Privacy

The Service is intended for users who are at least 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the Service or by email where appropriate. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

17. Contact Us

If you have questions or requests regarding this Privacy Policy or your personal information, contact us at info@dana.technology.

Questions? Contact us at info@dana.technology

View Terms of Use →