Privacy Policy

What is collected

• Your email address and password (the password is hashed by Supabase Auth; it is never visible to us).
• The date and time you accepted the “not migration advice” disclaimer.
• Application details you enter: applicant and sponsor names, target lodgement date.
• Checklist statuses and any notes you write.
• Documents you upload, which for this visa commonly include identity documents, financial records, and photographs of you and your partner.
• Messages you send to the assistant and text you give the statement drafter.

Sensitive information

Partner visa evidence is sensitive information under the Privacy Act 1988 (Cth) — it concerns your relationship, your finances and your household. It is collected only to help you assemble your own application, and it is used for nothing else. It is never sold, never used for advertising, and never used to train any model.

Where it is stored, and who can see it

Data is held in Supabase (Postgres and Storage) and the application runs on Vercel. Documents live in a private storage bucket with no public URLs; files are served only through short-lived signed links generated for you after you authenticate.

Every table enforces row-level security keyed to your user ID, and the storage bucket enforces the same rule on the file path. One account cannot read another's records or documents. This is enforced by the database itself, not only by the application.

Automated processing

When you request a document review, that document is sent to the Anthropic API for analysis, and the resulting verdict and commentary are stored against it. The assistant and statement drafter send the text you provide, plus your checklist context, to the same API. Requests are made server-side; the API key is never exposed to your browser. Anthropic does not use API inputs to train its models. Do not upload anything you are not willing to have processed this way — reviews are only ever run when you ask for one.

Retention and deletion

Your data is kept while your account exists. Deleting your account from Settings removes your uploaded files from storage and deletes your application, checklist, documents and assistant history, then deletes the account itself. This is immediate and cannot be undone. Backups held by our infrastructure providers may persist for a short period under their own retention schedules.

Your rights

You can access and correct your information directly in the app at any time, and delete all of it from Settings. If you have a concern about how your information has been handled, you may also complain to the Office of the Australian Information Commissioner.

Cookies

Only a session cookie used to keep you signed in. No advertising or analytics cookies are set.