Your ID is used once, then deleted.

    Your ID is used once to verify you, held by our verification partner, and permanently deleted within 30 days of the switch.

    The less we keep, the less there is to lose.

    From upload to deleted.

    On upload

    Upload

    Documents are encrypted with AES-256-GCM the moment they reach us.

    During the switch

    Verify

    Our verification partner, Stripe Identity, captures and holds your ID for the check. We never store a copy.

    Within 30 days

    Delete

    We instruct Stripe to redact your ID within 30 days of a completed switch. We keep only the confirmation that you passed.

    How we protect it.

    Encryption
    AES-256 at rest, TLS 1.3 in transit.
    Sign-in
    Secure sign-in by magic link. No passwords to leak.
    Audit trail
    Every action taken on your behalf is logged in your private dashboard.
    Where your data lives
    Your data is stored on Supabase-hosted infrastructure. Bill analysis runs via Anthropic's API.
    Who we work with
    Stripe (payments), Supabase (database and auth), Anthropic (bill analysis), Loops.so (email), Resend (auth emails). We don't sell your data to anyone.
    What we comply with
    Privacy Act 1988 (Cth), Australian Privacy Principles (APPs), Spam Act 2003 (Cth), National Energy Retail Law.

    Encrypted with AES-256. Your ID redacted within 30 days. Always.

    You stay in control.

    Revoke authority

    Cancel your Service Authorisation (read the agreement) any time from your account settings, or email [email protected].

    Request deletion

    Ask us to delete all your personal data by emailing [email protected]. We acknowledge requests within 5 business days and complete them within 30 days.

    Audit log

    Every action taken on your behalf is recorded and visible in your private dashboard.

    Withdraw approval

    Cancel any pending switch before it runs. One tap in your dashboard.