Privacy policy
This policy explains how ozimmi handles your information under the Australian Privacy Principles. Immigration information is sensitive; we treat it accordingly. Everything described here is something the product actually does today; where something is not built yet, this policy says so instead of promising it.
Who we are, and how to reach us
ozimmi is operated by Pixelite SL, a company registered in Andorra, which is the controller of the information described here. For anything about your privacy (a copy of your data, a correction, a deletion, or a complaint), email privacy@ozimmi.app. We are outside Australia, and we handle your information under this policy and the Australian Privacy Principles it follows.
Who else touches your data
These companies process it on our behalf. Our database provider (Neon) stores your account and your cases; our hosting provider (Vercel) runs the site and its API; our email provider (Resend) receives your email address in order to send the emails your account needs, such as a welcome, a notice that your account is open, or a password reset link; if you buy a Case File, your payment details go to Braintree (part of PayPal) or to Paddle, in their own checkouts, as described under Payments, so we never receive or store your card number; and, only if you turn on the AI option described below, Anthropic reads the sentence you wrote in order to interpret it. Each of them runs on infrastructure they procure themselves (Amazon Web Services in Neon's and Vercel's case), so that is their sub-processor rather than a company we deal with directly. Each one's obligations are the ones they publish in their own terms; we do not restate them here as promises of ours, because we cannot enforce more than they undertake.
Payments
A Case File can be bought only from a signed-in account. If you buy one, your payment is handled by one of two companies, depending on your country. Where Paddle (Paddle.com Market Limited and its affiliates) sells it as our Merchant of Record, Paddle collects your payment and billing details in its own checkout as an independent controller, under its privacy notice at https://www.paddle.com/legal/privacy. Where Pixelite SL sells it directly, Braintree, a PayPal service, collects your card details in its own payment form and handles them under the PayPal Privacy Statement at https://www.paypal.com/us/legalhub/paypal/privacy-full. We give whichever of them takes the payment your account email address, so that its checkout can confirm the payment with you. Where Pixelite SL sells it directly, we also email you a receipt through our email provider, Resend, which receives your email address, the amount and currency, the payment reference and the date. Either way, we never receive or store your card number. We keep a record of the purchase itself: which product, the amount and currency, when it was paid, whether it was refunded, and the payment company's reference for it. That record belongs to your account, not to a case, because it is the record of a sale: 'Delete everything' and the deletion of an abandoned case do not remove it, it is not part of 'Download my data', and nothing deletes it automatically today. We also record which lane each Case File was sold in: what our check decided when you paid and again when the payment completed, whether the Case File includes the report, and the two-letter country code your connection came from at checkout, never the IP address. That record is part of the record of the sale and is kept the same way. Write to privacy@ozimmi.app for a copy of it.
Where you are
Some of what ozimmi gives you depends on where you are physically located while you use it. You can tell us whether you are in Australia or outside it, under Your data on the intake page; the answer starts as not stated, you can change it at any time, and it is kept with your account. It is about you, not about the visa applicant, whose location is one of your case answers. Each time ozimmi checks which of its outputs it can give you, it records that check: when it was made, which output and channel it was for, the answer you gave, the country your connection appeared to come from as a two-letter code (never your IP address), whether your case answers say the applicant is in Australia, whether your account holds a practitioner listing with a current registration check, and what was decided. It records nothing you wrote. The country code comes from our hosting provider (Vercel), which reads it from your connection. 'Delete everything' and closing your account delete your answer; the records of the checks stay, with the link to your account removed, as our evidence of how each decision was made, and nothing deletes them automatically today.
What we collect
Your account: your name, your email address and a password, which we store only as a one-way hash, never as the password itself. Each sign-in creates a session record that holds the IP address and browser details it came from. Your case: the information you enter to prepare it, such as age, work history, qualifications, English results, family details and, if you choose, document references. Some of this is sensitive information under the Privacy Act 1988 (Cth). The student visa changes checker does not save the answers you give it, but to limit how often it can be used it records a hashed form of your IP address with a count of requests per minute. A hashed IP address can be reversed by brute force, so we treat it as personal information, and a daily cleanup deletes these records once they are more than a day old.
How we use it
Only to organise your case, prepare the outputs you ask for, and decide from where you are which of ozimmi's outputs we can give you. We do not sell your information, and we do not rank professionals by payment.
Cross-border disclosure (AI processing): your choice
Answering a question in your own words is the only time we send something you wrote to another company to READ: that sentence goes to our AI provider (Anthropic) to interpret, and may be processed outside Australia. (Our hosting and database providers necessarily route and store your case, as covered under Storage & security, but they are not sent it to read, and no AI is involved in your assessment, which is computed here by us.) We ask before any of this happens and the default is OFF, so if you never turn it on, nothing you write is ever disclosed this way (Australian Privacy Principle 8). You can turn it on or off at any time on the intake page, and turning it off stops it immediately. Anthropic's commercial terms state that they may not train models on customer content, and their published retention policy is that API inputs and outputs are deleted within 30 days, with longer retention in limited cases such as enforcing their usage policy or meeting legal obligations. Where they process it is governed by their data processing addendum; we do not state a region here because we have not established one, and we would rather say nothing than guess.
Storage & security
Case data is held in a multi-tenant Postgres database run by Neon, with per-tenant isolation enforced by the database itself, not only by our code. Sensitive fields such as document numbers are encrypted at rest, and sensitive values are never written to our logs. We do store the facts you enter, because that is what lets you come back to a case, and you can erase them at any time, as described under Deleting your data.
Your account and your cases
Your cases belong to your account. They can be reached only by signing in to it, and the database itself keeps each account's cases apart from every other account's. If you forget your password you can reset it with a link sent to your email address. A case started without an account, before accounts were introduced, was tied to a key stored on the device it was started on instead; it cannot be reached through an account, and it is deleted on the schedule below.
Deleting your data
You can delete your cases at any time from the intake page. 'Delete everything' erases every case on your account, immediately: the data is removed from the service there and then, we keep no archived copy of our own (a Case File purchase record is not case data and stays, as described under Payments), and nobody here can restore it for you afterwards. It does not close your account, so your name, email address and login remain and you can start again. To close the account and have those deleted too, use Delete account under Manage account in the ozimmi app, which erases the account, its sign-in and every case in it at once (a Case File purchase record still stays, as described under Payments), or email privacy@ozimmi.app. One honest qualification: our database provider keeps encrypted point-in-time backups for disaster recovery, so a deleted case ages out of those over the provider's backup window rather than disappearing from them the same second. Sensitive fields stay encrypted inside every one of those snapshots. Starting a new case also deletes the one it replaces.
How long we keep it
Your account and its cases are kept until you delete the cases or close the account, in the app or by asking us. A case started without an account is different: its device key stops working after 60 days without use, which makes the case unreachable. About 30 days after that we delete the case and the identity behind it, so an abandoned case is gone roughly 90 days after you last touched it. We do not keep case data we can no longer show you. The one record that outlives a case is a Case File purchase record, described under Payments.
Getting a copy (access)
'Download my data' on the intake page gives you everything recorded against your case as a file, with sensitive values decrypted for you. It includes answers you later changed, because we keep those too and this is meant to show you what we actually hold, not a tidied version of it.
Correcting your data
Answer the question again and your new answer is what every assessment uses from that moment. The previous answer is kept, marked as superseded and shown in your download, so the record of what was assessed and when stays honest rather than being quietly rewritten. One exception, because you should hear it from us rather than discover it: if the earlier answer was backed by a document you provided and your new answer contradicts it, we do not silently overwrite the document-backed value; we hold the new answer aside, flag the disagreement for review and tell you at the time. If you would rather none of it were kept, delete the case.
Complaints
Write to privacy@ozimmi.app and tell us what went wrong; we will answer you. If you are not satisfied with our answer, or you would rather not come to us first, you can refer the matter to the Office of the Australian Information Commissioner.