Privacy policy
This policy explains how ozimmi handles your information under the Australian Privacy Principles. Immigration information is sensitive; we treat it accordingly. Everything described here is something the product actually does today — where something is not built yet, this policy says so instead of promising it.
Who we are, and how to reach us
ozimmi is operated by Pixelite SL, a company registered in Andorra, which is the controller of the information described here. For anything about your privacy — a copy of your data, a correction, a deletion, or a complaint — email privacy@ozimmi.app. We are outside Australia, and we handle your information under this policy and the Australian Privacy Principles it follows.
Who else touches your data
Three companies process it on our behalf, and only these three. Our database provider (Neon) stores your case; our hosting provider (Vercel) runs the site and its API; and, only if you turn on the AI option described below, Anthropic reads the sentence you wrote in order to interpret it. Each of them runs on infrastructure they procure themselves — Amazon Web Services in Neon's and Vercel's case — so that is their sub-processor rather than a company we deal with directly. Each one's obligations are the ones they publish in their own terms; we do not restate them here as promises of ours, because we cannot enforce more than they undertake.
What we collect
The information you enter to prepare your case — such as age, work history, qualifications, English results, family details and, if you choose, document references. Some of this is sensitive information under the Privacy Act 1988 (Cth).
How we use it
Only to organise your case, compute your indicative assessment, and prepare your dossier. We do not sell your information, and we do not rank professionals by payment.
Cross-border disclosure (AI processing) — your choice
Answering a question in your own words is the only time we send something you wrote to another company to READ: that sentence goes to our AI provider (Anthropic) to interpret, and may be processed outside Australia. (Our hosting and database providers necessarily route and store your case — that is covered under Storage & security — but they are not sent it to read, and no AI is involved in your assessment, which is computed here by us.) We ask before any of this happens and the default is OFF, so if you never turn it on, nothing you write is ever disclosed this way (Australian Privacy Principle 8). You can turn it on or off at any time on the intake page, and turning it off stops it immediately. Anthropic's commercial terms state that they may not train models on customer content, and their published retention policy is that API inputs and outputs are deleted within 30 days, with longer retention in limited cases such as enforcing their usage policy or meeting legal obligations. Where they process it is governed by their data processing addendum; we do not state a region here because we have not established one, and we would rather say nothing than guess.
Storage & security
Case data is held in a multi-tenant Postgres database run by Neon, with per-tenant isolation enforced by the database itself, not only by our code. Sensitive fields such as document numbers are encrypted at rest, and sensitive values are never written to our logs. We do store the facts you enter — that is what lets you come back to a case — and you can erase them at any time, as described under Deleting your data.
Your case is tied to this device
You do not need an account. Your case is bound to a key stored on the device you started it on, which is the only thing that can reach it — we cannot open your case for you, and nobody else can either. If you lose that device or clear its storage, the case becomes unreachable and is deleted on the schedule below. That is the trade for not having to hand us an identity to begin.
Deleting your data
You can delete your case at any time from the intake page — 'Delete everything' erases the case, any others on that device, and the device key itself. It is immediate: the data is removed from the service there and then, we keep no archived copy of our own, and because there is no account, nobody here can restore it for you afterwards. One honest qualification: our database provider keeps encrypted point-in-time backups for disaster recovery, so a deleted case ages out of those over the provider's backup window rather than disappearing from them the same second. Sensitive fields stay encrypted inside every one of those snapshots. Starting a new case also deletes the one it replaces.
How long we keep it
The device key stops working after 60 days without use, which makes the case unreachable. About 30 days after that we delete the case and the identity behind it, so an abandoned case is gone roughly 90 days after you last touched it. We do not keep data we can no longer show you.
Getting a copy (access)
'Download my data' on the intake page gives you everything recorded against your case as a file, with sensitive values decrypted for you. It includes answers you later changed, because we keep those too and this is meant to show you what we actually hold — not a tidied version of it.
Correcting your data
Answer the question again and your new answer is what every assessment uses from that moment. The previous answer is kept, marked as superseded and shown in your download, so the record of what was assessed and when stays honest rather than being quietly rewritten. One exception, because you should hear it from us rather than discover it: if the earlier answer was backed by a document you provided and your new answer contradicts it, we do not silently overwrite the document-backed value — we hold the new answer aside, flag the disagreement for review and tell you at the time. If you would rather none of it were kept, delete the case.
Complaints
Write to privacy@ozimmi.app and tell us what went wrong; we will answer you. If you are not satisfied with our answer, or you would rather not come to us first, you can refer the matter to the Office of the Australian Information Commissioner.
This is a plain-language summary for a product in development and is not itself legal advice; the final policy will be reviewed by an Australian privacy practitioner before any paid launch.