Privacy Policy

1. Data controller

[nombre del titular — por confirmar] (ABN [ABN — por confirmar]), Australia. For any privacy matter you can write to privacy@aussiflow.com.

2. What data we collect

• Account data: email address and login credentials.
• Migration profile: the data you provide for the analysis (age, occupation, English level, education, experience, family situation, etc.).
• Documents: files you voluntarily upload (e.g. your CV) to enrich the analysis.
• Usage data: product analytics, only if you consent (see the cookie policy).
• Payment data: handled by Stripe. We do not store your card numbers.
• Sensitive data (only if you provide it voluntarily): relevant criminal record and medical conditions, when relevant to your migration procedure.

3. Why we use your data and legal basis

• Provide the service (generate and manage your plan) — performance of the contract.
• Product analytics to improve Aussiflow — consent (revocable at any time).
• Security and abuse prevention (rate limiting, fraud detection) — legitimate interest.
• Service communications (transactional emails about your account and plan) — performance of the contract.
• Technical error monitoring and diagnostics (anonymised data, no IP or email) — legitimate interest.
• Processing of sensitive data (criminal record, medical conditions) — only if you choose to provide it by voluntarily completing those optional form fields; completing them constitutes your consent to process it for that purpose (consent legal basis for special categories of data).

4. Where your data is stored

Your data is stored in Australia (Supabase, region ap-southeast-2 (Sídney, Australia)). Aussiflow operates from Australia under the Australian Privacy Act. If you reside in the European Union, your data is transferred outside the EEA; we apply the safeguards required by the GDPR for such international transfers.

5. Third parties processing data (sub-processors)

We work with providers that process data on our behalf, each with its own purpose:

• Supabase — Database, authentication and file storage (Australia (ap-southeast-2)).
• Anthropic — AI plan and analysis generation (Claude) (EE. UU. / USA).
• Stripe — Payment and subscription processing (EE. UU. / UE).
• PostHog — Product analytics (only with your consent) (UE / EU).
• Resend — Transactional email delivery (EE. UU. / USA).
• Upstash — Rate limiting (anti-abuse protection) (Global).
• Vercel — Application hosting and request logging (Global (CDN)).
• Sentry — Technical error monitoring and diagnostics (EE. UU. / USA).

We do not sell your data or share it with third parties for advertising purposes.

6. Team access for support and quality

Our team may access your data to provide support and to review the quality of the analyses generated (quality control). Such access is restricted to authorised staff and is logged.

7. Security and retention

We apply reasonable security measures: encryption in transit and at rest, access control restricted by role (each user can only access their own data through row-level security policies on the database), and signed, time-limited URLs for your documents.

We retain your data while your account is active. If you request deletion of your account, we delete your profile, plans, tasks and uploaded documents immediately. Our infrastructure provider (Supabase) may retain backup copies for a limited period after deletion, in line with its standard backup policy.

If a security breach occurred that poses a risk to your data, we will notify you without undue delay. Our internal goal is to assess it and, where appropriate, notify it within 72 hours of becoming aware of it — a stricter standard than the Australian notifiable data breaches scheme (30 days), which we also comply with. If you reside in the European Union, we will notify the competent data protection authority(ies) of the Member State(s) where affected users reside, in accordance with Article 33 of the GDPR.

8. Your rights

At any time you can exercise your rights of:

• Access to your data.
• Rectification of inaccurate data.
• Erasure ("right to be forgotten").
• Data portability.
• Objection to and restriction of processing.
• Withdrawal of consent to analytics (without affecting prior processing).

To exercise them, write to privacy@aussiflow.com. If you reside in the EU, you may also lodge a complaint with your data protection authority.

9. Changes to this policy

We may update this policy. The current version will be published on this page with its last updated date.

10. Contact

Controller: [nombre del titular — por confirmar], Australia. Privacy: privacy@aussiflow.com. General contact: hello@aussiflow.com.