This policy explains what personal information Ambitious Investing collects through our website, apps, checkout, agreements, member community and support channels, why we collect it, and how you can access, correct, or request deletion of it. We are based in New Zealand and work with members in New Zealand and Australia. We handle personal information in line with the New Zealand Privacy Act 2020 and, where applicable, the Australian Privacy Principles under the Privacy Act 1988 (Cth).
1. Account and enrolment information
When you create an account, book a call, join a program, sign an agreement, make a payment, contact us, or use the Platform, we collect information such as your name, email address, phone number, program or membership details, signature, payment plan information, support requests, communications with our team, and relevant account activity. We use this information to create and secure your account, deliver your membership, personalise the Platform, manage access, support you, administer payments, and contact you about your membership.
2. Billing and payments
Payments are processed through secure hosted payment services. Card details are entered directly into those secure payment fields and are not stored on our own servers. We store the billing information needed to manage your enrolment, including customer references, subscription or payment plan status, invoices, receipts, payment dates, failed payment records, refunds, disputes, and the contracted amount or payment schedule attached to your purchase.
If there is a billing question, refund request, failed payment, debt recovery matter, or card dispute, we may use and retain relevant records as evidence of authorisation and service delivery. This can include your signed agreement, checkout records, invoices, receipts, payment history, access logs, lesson progress, call attendance, support tickets, emails, SMS messages, and notes from our team.
3. Community features
The member community lets members message, comment, react, participate in discussions and interact with each other and our mentors or staff. Anything you post in a community space may be visible to other members of that space, consistent with how group communities work. Please do not share information there that you would not want other members to see.
The community may include optional profile or member-map features. If you choose to use them, you can manually provide approximate information such as your city. This is optional, is not precise GPS location, and is collected only if you enter it yourself.
4. Course progress, video activity and service delivery
We track which lessons and modules you watch or complete, your video watch progress, login activity, call attendance, community access, agreement acceptance, test attempts, support requests, and other first-party activity needed to operate the Platform, support members, confirm access, improve delivery, and evidence that services were provided. We do not sell this information or share it with advertisers.
5. Content and recordings
Course videos, call recordings, documents and other educational resources are hosted, streamed and delivered through secure systems we use to operate the Platform. If a call, event or session is recorded for coaching, replay, compliance or service delivery purposes, we may store and make that recording available to the relevant members, mentors or staff according to the access rules for that content.
6. Push notifications and communications
If you use our mobile app and grant notification permission, we store a push notification token so we can notify you about upcoming sessions, community activity, support replies and membership updates. You can turn this off at any time in your device settings. We may also contact you by email, SMS, phone, app notification or other channels connected to your membership, bookings, payments, support or account.
7. Instagram and Facebook messages and comments
When you message or comment on the Ambitious Investing or Riharifxtrading Instagram account or Facebook Page, we receive that content through Meta’s platform. We collect the text of your messages and comments and any links you send, your Instagram-scoped user ID, the time of each message, and the ad or post it came from. Where our messaging automation has it, we also hold your Instagram username, profile name and profile picture. We receive only what Meta makes available to us.
We use this to read and reply to your messages, send the information you asked for (for example when you comment a keyword), follow up on enquiries, keep a record of the conversation and run our service. Messages may be processed by AI tools to help us reply and run our service. We do not sell this data.
Message data is handled on our behalf by n8n (workflow automation), ManyChat (Instagram automation, which receives your Instagram ID, username and name) and Supabase (database hosting, where we store the message record). Our team reads these messages in our internal dashboard. Meta handles your data under its own privacy policy.
We keep these messages while they are needed for support and sales follow-up, and delete them on request. To ask us to delete your Instagram or Facebook messaging data, use our Data Deletion page. You can also remove our access to your Meta data in your Instagram or Facebook settings under Apps and websites.
8. Who we share information with
We do not sell your personal information, and we do not use it for third-party advertising. We share only the minimum necessary information with trusted service providers who help us operate the Platform, including providers for hosting, authentication, payments, communications, customer support, security, analytics, content storage and content delivery. These providers process information on our behalf so we can run the business and deliver your membership.
We may also share relevant records with banks, card networks, payment providers, debt collectors, legal advisers, mediators, courts, regulators, accountants, or other professional advisers where needed to resolve payment disputes, recover unpaid amounts, respond to legal or regulatory processes, protect our rights, or comply with law. Information sent between your device and our services is encrypted in transit.
9. Data retention
Your account data is retained for as long as you hold an active membership, plus a reasonable period afterwards for support, financial, tax, dispute, debt recovery, legal, compliance and record-keeping purposes. Records connected to invoices, signed agreements, payment authorisation, access delivery, disputes, chargebacks or debt recovery may need to be retained even if you ask us to delete other account data. Instagram and Facebook message records are kept as described in section 7.
10. Your rights and deleting your data
You have the right to access, correct, or request deletion of your personal information. To do so, email us at the address below. Some information may need to be retained to meet legal, financial, tax, dispute and record-keeping obligations. New Zealand residents may contact the Office of the Privacy Commissioner, and Australian residents may contact the Office of the Australian Information Commissioner, if they have an unresolved privacy concern. See our Delete Your Account page for step-by-step instructions on requesting account or partial data deletion, or our Data Deletion page if you only messaged us on Instagram or Facebook.
11. Changes to this policy
We may update this policy as our Platform, business or legal obligations change. The updated date above shows when it was last revised.
12. Contact
For privacy questions or data deletion requests, email us at info@ambitiousinvesting.com.au.