Your ID is used once, then deleted.
Your ID is used once to verify you, held by our verification partner, and permanently deleted within 30 days of the switch.
The less we keep, the less there is to lose.
From upload to deleted.
Upload
Documents are encrypted with AES-256-GCM the moment they reach us.
Verify
Our verification partner, Stripe Identity, captures and holds your ID for the check. We never store a copy.
Delete
We instruct Stripe to redact your ID within 30 days of a completed switch. We keep only the confirmation that you passed.
How we protect it.
- AES-256 at rest, TLS 1.3 in transit.
- Secure sign-in by magic link. No passwords to leak.
- Every action taken on your behalf is logged in your private dashboard.
- Your data is stored on Supabase-hosted infrastructure. Bill analysis runs via Anthropic's API.
- Stripe (payments), Supabase (database and auth), Anthropic (bill analysis), Loops.so (email), Resend (auth emails). We don't sell your data to anyone.
- Privacy Act 1988 (Cth), Australian Privacy Principles (APPs), Spam Act 2003 (Cth), National Energy Retail Law.
Encrypted with AES-256. Your ID redacted within 30 days. Always.
You stay in control.
Cancel your Service Authorisation (read the agreement) any time from your account settings, or email [email protected].
Ask us to delete all your personal data by emailing [email protected]. We acknowledge requests within 5 business days and complete them within 30 days.
Every action taken on your behalf is recorded and visible in your private dashboard.
Cancel any pending switch before it runs. One tap in your dashboard.