Privacy Policy

This policy describes what we collect, why, who we share it with, and how to control or delete it. It is governed by the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). — What we collect — • Account: email address, name (optional), password (stored as a one-way hash — we never see your password), email-verification status. • Saved scenarios (dashboard): the migration scenarios you choose to save — occupation (ANZSCO code + title), visa subclass (189 / 190 / 491), points score, Date of Effect (DOE), and nominating state. • Migration profile (the Profile page — every field is optional and you can leave anything blank): personal and points inputs (age, English level, education level, years of Australian and overseas work experience, and study / NAATI / professional-year bonuses), the resulting per-criterion points breakdown and your 189 / 190 / 491 totals; targeting (primary occupation, primary subclass, and target states for 190 and 491); demographic details (whether you are onshore, citizenship, current state of residence, designated-regional-area residence, months of residence in Australia, and whether you currently work in your nominated occupation); partner details (partner status, partner's occupation, partner skill points); and a self-attested skill-assessment milestone. • Salary (optional): if you enter an annual salary it is encrypted at rest with AES-256-GCM — stored as ciphertext with a fresh random value per save, never as plaintext — so a leaked database dump alone cannot reveal it. It defaults to private and is used only in your own salary-versus-cohort comparison unless you explicitly choose to show it on your profile card. • Profile visibility and sharing: the partner, demographic, and salary sections each have their own public / private toggle, and everything defaults to private. Today your profile is visible only to you, and you may download a shareable image of your own profile card. These toggles govern what would appear if and when we launch a public profile card — no section is ever shown publicly unless you have switched it to public. • Cached intelligence: per-saved-scenario snapshots of public EOI data (queue size, cutoff history, percentile, modelled wait estimate) — generated from public government data, attached to your saved scenario for performance. • Communication preferences: master email toggle, round-alert subscriptions, weekly-digest opt-in, per-scenario alert flags. • Billing (paid plans only): Stripe customer ID, subscription status, credit balance, transaction history. Card numbers are stored by Stripe, never by us. • Anonymous usage: hashed IP addresses for free-tier rate-limiting. We do not store raw IPs. • AI assistant conversations: the messages you send to and receive from the AI assistant (including when you are not logged in) are stored to operate and improve the service. Raw conversation text is retained for 180 days and then removed; we keep only an anonymized topic category for long-term trend analysis. — Why we collect it — Your saved scenarios and migration profile power the My Journey tracker, score-checking, the saved-occupations dashboard, personalized pathway comparisons and recommendations, your downloadable profile card, and email alerts you opt into. Cached snapshots make the dashboard fast. We may show advertising in the future to support the platform; if and when that happens, we will update this policy, list any new advertising subprocessors below, and disclose what (if any) data is shared with them. — Who we share it with (subprocessors) — We do not sell or rent your personal data. Limited data is processed by the following categories of vendors strictly to operate the platform: • Hosting and database providers (United States) — to run the website and store your account, saved scenarios, and email preferences. • Email delivery service (United States) — to send you transactional and alert emails. They receive your email address. • Stripe (United States, Australia) — payment processing for paid plans. Card details are entered into Stripe directly and we never see them. • AI model provider (Google, United States) — powers the AI assistant and processes your conversation text (including for anonymous users) to generate responses and to classify question topics. Google receives the message text you send to the consultant. Each vendor has its own privacy policy. The current list of named vendors is available on request via the support link. — Data retention & deletion — Saved scenarios stay in your account until you remove them via the Edit popover (Remove this scenario) on the dashboard, or until your account is deleted. Your migration profile — including any encrypted salary — is editable at any time on the Profile page and is removed when your account is deleted. Email-send logs are retained for 30 days for rate-limit accounting, then aggregated. To delete your account and all associated data, contact us via the support link in the footer; we will action requests within 30 days. — Your rights (under the Australian Privacy Principles) — You have the right to access the personal information we hold about you, correct it, request deletion, and object to its processing. Most of these are available directly in-product (the Edit / Remove controls on each saved scenario, the per-section edit and public / private toggles on your Profile page, the email-preferences page, the Account page). For requests we cannot fulfil through the product, contact us via the support link. — Data security — We take reasonable technical and organisational steps to protect your information: passwords are stored only as a one-way hash, any salary you enter is encrypted at rest with AES-256-GCM, access to the production database is restricted, and data is transmitted over encrypted (HTTPS/TLS) connections. No method of storage or transmission is ever completely secure, so we cannot guarantee absolute security. If we become aware of a data breach likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme under the Privacy Act 1988. — Complaints — If you believe we have mishandled your personal information, please contact us first via the support link in the footer; we will investigate and respond, ordinarily within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by phone on 1300 363 992. — International users — The service is hosted in the United States. By using ImmiTrend you consent to your data being processed in the United States. We apply the same controls regardless of your country.