Data Use Policy

How Rask uses your data

Version 2.0 · Last updated: 5 May 2026

This is the trust-narrative companion to our Privacy Policy. The Privacy Policy explains the legal mechanics: what we collect, who we share with, your rights. This page explains the why — what your data powers inside Rask, and the choices we've made about how to handle it.

Why we use data

Quality financial advice in Australia has historically been expensive, slow, and out of reach for most people. We think a big part of why is that the workflow has been manual: re-keying data, chasing statements, building spreadsheets, writing the same paragraph for the hundredth time. Almost none of that is the part of advice that actually helps a client.

Our bet is that if we can pull the right data into one place — securely, with your consent — and use software (and yes, AI) to do the mechanical parts, the human advice that's left is sharper, faster, and a lot cheaper to deliver. That's the deal: your data, used carefully, makes financial guidance work better for you.

What your data powers

Each surface in Rask has a clear purpose for the data it touches.

The dashboard

Your snapshot view. Pulls together net worth, recent activity, goals, and what to look at next.

Cashflow

Banking, super, credit cards, and loans connected via open banking so you can see income, spending, and trends without spreadsheets.

Portfolio

Investments across brokers, funds, and platforms, ingested from Sharesight or Navexa, with valuations, performance, and watchlists.

Document vault

Encrypted, per-client storage for super statements, payslips, insurance schedules, and anything else your adviser needs.

/plan (Statements of Advice)

Where Rask Advice Pty Ltd builds and delivers your formal Statement of Advice. Clearly marked, authored by your assigned adviser.

/learn (education)

Courses, content, and member resources. Tracks your progress so you can pick up where you left off.

AI assistant

Drafts, summarises, answers questions, and helps your adviser prepare advice. Always supervised by humans.

Messaging & notifications

Two-way messaging with your adviser; reminders for tasks, milestones, and price alerts.

Memberships & billing

Free, Pro, Super, and Ultra membership tiers, billed through Stripe. We never see your card number.

The principles we apply

Australia first. We host the platform on Google Cloud Platform in Melbourne. Sensitive financial files (advice records, fact-finds, vault documents) and CDR / open-banking data stay in Australia. Some of our processors (e.g. payments, email, AI) operate from overseas — we list them in our Privacy Policy.

Collect only what we need. We don't ask for information we can't use to make Rask better for you. Where we can pull data via APIs (open banking, portfolio platforms) instead of asking you to type it, we do.

Deletion as default. When data becomes redundant — particularly CDR / open-banking data — our default is to delete it. We don't retain it for de-identified research or general analytics use. We do not sell it.

Encryption end-to-end. TLS in transit, encryption at rest, and an extra layer of AES-256-GCM application-level encryption for the most sensitive items (open-banking provider credentials).

Least privilege, audited. Staff and advisers see only what they need to do their job. Sensitive operations require an explicit reason and are logged. Per-client document folders are segregated from each other.

Human in the loop on advice. AI helps your adviser prepare, but no personal advice document leaves Rask Advice without a human authorised representative reviewing and signing off.

About AI specifically

We use AI throughout the platform. We're not coy about that — it's a core part of how we deliver advice at a price most people can afford. But it has to be safe and useful, not just clever.

What we use it for. Drafting (advice paragraphs, emails), summarising (statements, calls), answering questions, surfacing relevant information from your documents, and routine quality checks.
What we don't use it for. Making personal recommendations directly to you. Advice always comes from your human adviser, who reviews and signs off on what reaches you.
The providers. OpenAI, Anthropic, Google (Gemini), and xAI (Grok). All are configured so they can't use Rask data to train their models.
What we feed in. Only what's needed for the task. Identifiers (names, account numbers, addresses) are redacted or replaced with surrogates wherever practical.
What you should expect. AI gets things wrong. Always. We know it; you should know it. If something looks off, tell us. If something is presented to you as personal advice, it's because a human adviser put their name on it — not because an AI generated it.

Open banking, in plain English

Open banking (the Consumer Data Right) is the most sensitive data flow in Rask, so it gets its own treatment. Here's the short version. The full mechanics are in the Privacy Policy, Section 6.

You authenticate directly with your bank — Rask never sees your banking password.
We work with a CDR-accredited data-recipient partner who collects the data on a contract that binds them to the same Australian privacy and CDR rules we follow.
The default is 12 months of transaction history per connected account, unless you ask for less.
This data is hosted in Australia, encrypted, and never sent to overseas AI providers.
You can disconnect any account at any time — the credentials are deleted on the spot. You can also request a full delete of your cashflow data, which removes it from our active systems and lets backups roll over.
We never sell this data. We never give it to advertisers. We don't use it to build de-identified data products. Redundant data gets deleted.

Security at a glance

Cloud infrastructure on Google Cloud Platform in Melbourne, with Cloudflare edge and WAF.
Internal services on private networking; production databases and caches not directly reachable from the internet.
Multi-factor authentication available on all accounts and required for the most sensitive features.
Daily database backups with point-in-time recovery on a rolling window.
Audit logging on every significant action, retained per our regulatory obligations.
An internal Incident Response Runbook and Notifiable Data Breach commitment under the Privacy Act.

Your controls

Things you can do at any time inside Rask:

Connect or disconnect a bank, super, broker, or portfolio account.
Upload, replace, or delete a document in your vault.
Update your goals, preferences, marketing settings, and contact details.
Request a copy of your personal information.
Request deletion of your cashflow data, and (subject to legal record-keeping limits) deletion of your account.
Toggle analytics consent at any time on rask.au.

If something isn't possible inside the app, email compliance@rask.au and we'll handle it.

The future of data-enabled finance

We think advice in Australia is on the cusp of getting an order-of-magnitude better and cheaper, and that secure, careful use of personal data — paired with humans where humans matter — is the lever. We're going to keep getting better at this: tighter controls, more transparency, sharper tools. Where we change something material, we'll update this page and tell you.

Questions or ideas? compliance@rask.au.

Where to learn more

Privacy Policy — the full APP / CDR Privacy Safeguards / NDB / processor-list document.
Financial Services Guide — who we are as a financial services business.
Advice FSG — for personal advice from Rask Advice Pty Ltd.
Cookie Policy — what we set, why, and how to control consent.
Terms of Use — the agreement that governs your use of Rask.