Privacy Policy

What we collect

When you use our service, we collect:

• —Your name, email address, and phone number (provided by you during signup)
• —Data extracted from your electricity bill: NMI, retailer, usage (kWh), charges ($), billing period, supply address, and customer ABN if present
• —Your energy buying preferences (enquiry type, contract terms, business type)
• —Your referral relationships (who referred you, who you refer)

What we do NOT collect or store

• —Your electricity bill file (PDF). Bills are processed in memory by our AI analysis service and immediately discarded. They are never written to disk, stored in any database, or retained in any form after the analysis is complete.
• —Payment information (we do not currently process payments)

How bill analysis works

When you upload a bill:

1. The file is sent to our server over an encrypted (HTTPS) connection
2. Our server converts the bill to images in memory
3. The images are sent to a third-party AI model (Google Gemini) for data extraction
4. If the primary AI model cannot extract all required fields, a secondary AI model (Anthropic Claude) is used as a fallback
5. The extracted data is returned to you and, if you confirm, saved to your account
6. The original bill file is discarded from memory. It is never stored.

Neither Google nor Anthropic use data submitted via their APIs for model training.

Public bill analysis API

Our public API (/api/public/analyse) allows AI agents to analyse bills without creating an account. When this API is used:

• —The bill is processed identically to the above (in memory only, never stored)
• —No user account is created
• —No extracted data is saved to any database
• —The only data retained is the requesting IP address, held for up to 1 hour for rate limiting purposes, then discarded

How we use your data

We use your extracted bill data and preferences to:

• —Show you your energy usage and cost summary
• —Match you with appropriate energy buying options
• —Communicate with you about your energy enquiry via email
• —Facilitate referrals between users

We do NOT:

• —Sell your data to third parties
• —Use your data for advertising
• —Share your personal information with energy retailers without your explicit consent
• —Use your data to train AI models

Data storage and security

Your account data is stored in a database hosted in Sydney, Australia. Access to your data is protected by row-level security — you can only access your own records. All connections are encrypted via HTTPS. Authentication uses email-based one-time passwords (OTP), not stored passwords.

Your rights

You can:

• —View all data we hold about you via your dashboard
• —Update your contact details at any time
• —Cancel any energy enquiry
• —Request deletion of your account by emailing hello@elecsi.com.au

We will respond to deletion requests within 30 days.

Cookies

We use Google Analytics 4 to understand how people use our site. GA4 may set cookies to track page views. No personal information is shared with Google beyond anonymised usage data.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent version.

Contact

hello@elecsi.com.au