Privacy
Current as at 4 September 2026 (version 1.6). “We” is Assemblance Technologies LLC (Delaware, USA), which operates DilutionLens. We handle personal information in line with the Australian Privacy Principles, and this page says plainly what we hold and what you can ask us to do about it.
The short version
You can read the whole site without an account, and if you do we hold almost nothing about you. If you create a free account we hold your email address and a record of what you unlocked — set out in full below. There is no password to store and nothing is sold or shared for advertising.
The personal information that matters most on this site is not about our readers — it is about company directors named in the filings we summarise. That is covered in its own section below, including how to object.
If you create an account
Signing in works by emailed link. You give us an email address, we email a link that works once and expires after 15 minutes, and clicking it signs you in. There is no password, so there is no password for us to hold or lose.
| Your email address | Held as the account itself, with the date you first signed in, the date you last signed in, how many times you have signed in, and which version of these terms and this policy you accepted when you did. |
| Sign-in links | We store a one-way hash of each link — not the link — together with the time it was requested, when it expires, whether it has been used, and the IP address it was requested from. The IP address is what stops someone requesting thousands of links. These records are deleted once they have expired. |
| What you unlocked | A free account includes two full company unlocks a month. We record which companies you unlocked, when, and which sections of the page you opened. That record is how the monthly allowance is counted and how we learn which parts of the product people actually come for. |
| Survey answers | The short question before your second unlock each month: the option you picked and anything you typed in the optional box. Do not put anything confidential in that box. |
| Sign-in cookie | One cookie, dl_session, set when you sign in and lasting up to 90 days. It cannot be read by scripts in your browser, is only ever sent over HTTPS, and is not sent to other sites. It exists to keep you signed in — it is not an analytics or advertising cookie. Signing out clears it. |
Email we send you. Sign-in links, because you asked for one, and one welcome email when you create your account — sent once, saying what the account gives you. We will not send you anything else — product news, a newsletter, a digest — unless you ask for it. Everything we send says who it is from and lets you stop it in one click without signing in.
Closing your account. Email privacy@dilutionlens.com from the address you signed up with and ask us to delete it. We remove your email address, your account and your sign-in links. Records of how many unlocks were used in a month, and any survey answers, may be kept with your identity stripped out, because they no longer say anything about you. You can also ask for a copy of what we hold; the same address handles that.
If you pay for a subscription
| Your card details | Go from your browser directly to Stripe, the payment processor. They never reach our servers and we cannot see them — Stripe tells us only that a payment succeeded or failed. What Stripe holds and how it protects it is set out in Stripe's own privacy policy. |
| Subscription record | Stripe's identifier for you as a customer and for your subscription, the plan, its status, and the start and end of the period you have paid for. This record is how the site knows to show you the paid tier, and it is checked against Stripe daily so the two cannot silently disagree. |
| Billing notifications | Each notification Stripe sends us about your subscription — payment succeeded, payment failed, subscription changed or cancelled — is kept for 90 days for troubleshooting and reconciliation, then deleted. |
Closing your account deletes the subscription record with it. If your subscription is still active when you ask, we will have it cancelled first — deletion deliberately waits for that, so you cannot end up still being charged for an account that no longer exists. Billing questions and refund requests go to the billing address on the terms page.
What we collect about you
| Usage analytics | We use PostHog to count page views and a small set of named events (which sections readers open, which source links they follow). Automatic capture of everything you click is switched off, session recording is switched off, and we do not build a profile of you. PostHog receives your IP address and browser details as part of the request; its servers are in the United States. If you have an account, these events are counted against a random identifier for that account — so that we can tell how many people finish signing up, rather than how many times a button was pressed. Your email address is never sent to PostHog, and we attach no other details to that identifier. If you subscribe, the billing steps — started checkout, subscribed, cancelled — are counted the same way; those events carry Stripe's identifier for the subscription, never your card details. |
| Email you send us | If you email corrections, a waitlist request, an alert request or a privacy enquiry, we hold that email — your address and whatever you wrote — so we can act on it and keep a record of what we did. |
| Local storage | Your light/dark theme choice is stored in your browser. PostHog sets its own cookies to recognise a returning browser anonymously. Neither is used for advertising. |
We do not sell personal information, we do not run advertising, and we do not share analytics data with data brokers. You can block analytics with any tracker blocker and the site works normally.
Directors named on company pages
Company pages show directors' dealing notices — the director's name, the type of transaction, the number of securities and the date — taken from Appendix 3Y notices the company itself lodged with the ASX. Each row links to the notice it came from. We publish these because directors' trading in their own company is part of the public disclosure record that the rest of the page is built on.
We limit what that means in practice, and it is worth being precise about how far that goes. The dealings table and the announcements list — the two places a director's name can appear — are marked so that Google will not quote them in a search-result snippet. Directors' names never appear in a page title, description or link preview. No personal information is sent to the AI model that writes the company summaries; it works only from aggregate share, cash and options figures.
What that does not do: the pages themselves remain public and indexed, and we allow AI and search crawlers to read them, because being findable is how people reach this site. A name that a company published in its own filing therefore remains discoverable here. If that is a problem for you, the section below is the route to raising it.
If you are named and want something changed or removed, email privacy@dilutionlens.com with the company and the entry. We will acknowledge it, tell you what we hold, and correct anything that misstates the filing. Where a request is to remove information that accurately reflects a public filing, we will consider it on its facts and tell you our reasons either way. We cannot change the underlying notice — that is the company's filing on the ASX platform, not ours.
Where information goes
Three service providers process data outside Australia: PostHog (analytics, United States), Stripe (payments, United States — it receives your card details directly if you subscribe) and Amazon Web Services (hosting and the mailboxes on this domain — files and mail are stored in Europe and pages are delivered through a global content network). The AI model that writes company summaries is Google’s Gemini, reached through OpenRouter, Inc. (United States); it receives only the extracted financial figures for a company — no reader data and no personal information.
Access, correction and complaints
You can ask what personal information we hold about you and ask us to correct it. Email privacy@dilutionlens.com. We aim to acknowledge within 5 business days and to respond substantively within 30 days. Data errors that are not about a person are better sent to corrections@dilutionlens.com — see the corrections process.
If you are not satisfied with how we handled a privacy matter, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
We keep emails sent to us for as long as we need them to deal with the matter and to show what we did about it. Analytics data is retained by PostHog under its own retention settings and is not tied to a named person.