Your privacy matters.

This document sets out the privacy policy of Poweraudit Pty Ltd ABN 52 664 548 396 (referred to in this privacy policy as 'Poweraudit', 'we', 'us', or 'our').

We take our privacy obligations seriously and we've created this privacy policy to explain how we store, maintain, use and disclose personal information.

By providing personal information to us, you consent to our storage, maintenance, use and disclosing of personal information in accordance with this privacy policy.

We may change this privacy policy from time to time by posting an updated copy on our website and we encourage you to check our website regularly to ensure that you are aware of our most current privacy policy.

This privacy policy was last updated on 13 November 2026.

The personal information we collect may include the following:

• (a)name;
• (b)mailing or street address;
• (c)email address;
• (d)telephone number and other contact details;
• (e)payment information such as the payment method used, the amount, the date and a transaction or order reference. We do not collect, see or store your full card number, expiry date or security code — those are provided directly to our payment provider on their own secure page;
• (f)your power usage;
• (g)your power meter reading for your property;
• (h)billing information from your power supplier;
• (i)images of the exterior of your property;
• (j)information about your personal and household circumstances;
• (k)information in connection with client surveys, questionnaires and promotions;
• (l)information you submit through our AI chat or online messaging features, including chat prompts, transcripts, timestamps, related session metadata and, where you have opted in, redacted analytics derived from those chats;
• (m)your device identity and type, I.P. address, geo-location information, page view statistics, performance diagnostics, error telemetry, session replay data on selected pages where consented, advertising data and standard web log information;
• (n)information about third parties;
• (o)electricity bills, interval data, tariff data, network tariff information, solar export data and other energy-related documents or datasets you provide to us;
• (p)account numbers, National Metering Identifier (NMI), meter identifiers and similar service or supply identifiers contained in those documents or datasets;
• (q)information generated from our review and analysis of those documents or datasets, including extracted data fields, summaries, classifications, comparisons and recommendations; and
• (r)any other information provided by you to us via our website or our online presence, or otherwise required by us or provided by you.

We will collect your personal information in a lawful and fair way. We will only collect your personal information where you have consented to it, or otherwise in accordance with the law.

How we collect information from you

We may collect personal information where you:

• (a)contact us through our website;
• (b)submit questions or messages through our AI assistant or chat features;
• (c)receive goods or services from us;
• (d)upload or otherwise provide us with electricity bills, interval data, tariff data, meter data, solar export data or other energy-related documents or datasets during the course of providing our goods or services;
• (e)submit any of our online enquiry forms;
• (f)communicate with us via email, telephone, SMS, social applications or otherwise;
• (g)interact with our website, social applications, services, content and advertising; and
• (h)invest in our business or enquire as to a potential purchase in our business.

How we collect information from third parties

Where possible, we collect your personal information directly from you. However, there may be occasions when we collect personal information about you from someone else. For example, another individual in your household.

How you provide information for someone else

If you are providing personal information on behalf of someone else, you must have the consent of that person to provide their personal information to us to be collected, used, and disclosed in accordance with this privacy policy.

How we collect information from cookies

We may also collect personal information from you when you use or access our website or our social media pages. This may be done through use of web analytics tools, cookies, session storage, local storage or similar tracking technologies that allow us to track, analyse and improve website usage. Cookies and similar technologies store information on your computer, mobile phone or other device and enable the creator of the cookie or identifier to recognise your browser or device across visits. If you do not wish information to be stored as a cookie, you can disable cookies in your web browser, however some features may not function as intended.

We use website analytics and performance tools as part of operating our website. Where you opt in to optional analytics, we may also use behavioural analytics, feature delivery, session replay and error monitoring tools. These tools may use cookies, local storage, session storage and similar identifiers to understand how visitors use our services and to help us improve them.

If you accept the cookie notice and ask us for a quote, we may share a one-way code derived from your email address and the outcome of your enquiry with a third-party advertising measurement service to see how our advertising performs. Declining the cookie notice does not prevent you from requesting a quote. Accepting it does not enrol you in marketing messages or personalised advertising.

Your Bill Review

Our Bill Review is a free service at review.poweraudit.com.au. To use it you give us your name, email address and postcode, a phone number if you choose, and your answers to four questions about your home: whether you have a smart meter, solar panels, a home battery and a Seniors Card. You then upload your electricity bill as a PDF or as photos. A bill typically contains your name, supply address, National Meter Identifier (NMI), account number, tariff details and usage history. We collect only what the review needs, and we use it only to produce your report and for related customer service.

Your Bill Review data is kept in Australia

Everything we store for your Bill Review is stored in Australia. Your bill, the details you give us, your report and our record of the review are held in a database and a private file store in Sydney, and the emails we send you leave through a mail service in Sydney. Nothing in that store can be reached by a public link. Your report is reached only through the private link we email you, or by our staff after signing in, so keep the link to yourself: anyone who has it can open your report.

How your bill is read, and what the AI service is shown

The Bill Review is automated. Our system reads your bill, compares the plans published for your area and writes your report. A person on our team looks at a bill only when the system cannot read it or is unsure of what it read, and reads a sample of finished reports to check and improve the service. Where you upload photos, our system also runs its own text recognition on our servers in Sydney to cross-check the reading; that software sends nothing anywhere.

Before anything is sent to the AI service, our own software, running on our servers in Sydney, finds and paints out on every page of your bill your name, your address, your NMI, the account, invoice, reference and meter numbers printed on it, and any phone numbers and email addresses, and keeps only a picture of what remains. Only those pictures are sent to Anthropic, PBC, an artificial intelligence provider in the United States, through Anthropic's commercial API, together with your postcode, so that it can read the tariff, usage and charges. The file you uploaded, and the words under the paint, never leave our servers. If our software cannot find and paint out your name, your address and your NMI on a bill, that bill is not sent at all, and a person on our team takes the review instead. To write the words of your report, our system then sends Anthropic the figures it read and the plan comparison, which carry no name, address or NMI either.

So the one step in the Bill Review at which anything of your bill leaves Australia carries nothing that identifies you: no name, address, NMI, account number, email address or phone number reaches Anthropic. What does reach it is processing, not storage. Under Anthropic's commercial terms and data processing addendum, Anthropic acts as our processor and processes what we send only on our instructions, to return its reading to us; it does not use what we send or its outputs to train its models; and it deletes inputs and outputs from its systems within 30 days of receiving them, except where the law requires it to keep them or its automated safety systems flag content as a possible breach of its usage policy.

If you came to the Bill Review from one of our Google ads

When you click one of our ads on Google, Google adds a click identifier to the link it sends you to. If you start a Bill Review from that link, we keep that identifier with your review, and once a day Google, in the United States, collects it from us together with the time you started your review and the time you sent your bill, so that we can see how our advertising performs. That is all Google receives from the Bill Review: no name, email address, phone number, postcode, bill, report or link to your report. We delete the identifier after 30 days.

When you start a Bill Review we note how you reached it: which button on our website you used, and whether you came from a search engine, another website, one of our ads or directly. We keep these as short labels with your review so that we can see which parts of our website and advertising are useful. They do not include what you searched for or the page you came from, and we do not share them with anyone.

How long we keep your Bill Review data

We keep each part of a Bill Review only as long as it is useful to you. A daily job deletes it on this schedule, counted from the day you started the review:

• (a)your bill file(s) and the raw readings our system took from them: 30 days, then deleted;
• (b)the Google ad click identifier, if you came from one of our Google ads: 30 days, then deleted;
• (c)how you reached the Bill Review (the labels described above): 12 months, then deleted;
• (d)your name, email address and phone number, and the live link to your report: 90 days, then removed. The stored report is de-identified at the same time: your name and address are taken out and your NMI is removed, leaving the report number, your postcode and your answers about your home with it;
• (e)the de-identified report, with your postcode and your answers about your home, and the plan comparison it was built from: 12 months, then deleted; and
• (f)de-identified statistics about the review (see section 8): kept.

A small number of bills that our team marks as useful examples of a bill format are kept, as uploaded, for 12 months so that we can improve how the system reads bills, and are then deleted. You can ask us to delete your Bill Review data at any time by emailing customerservice@poweraudit.com.au. We will delete your bill, your details and your report straight away, leaving only the de-identified statistics.

How we handle payments

We do not collect, see or store your full card details. Payments made online through this website are processed by Stripe Payments Australia Pty Ltd, and card payments taken in person are processed by Zeller Australia Pty Ltd. Your card details are provided directly to the payment provider on their own secure page.

The Bill Review is free, and no payment details are collected for it. Where you pay us online for another service, we share your name and email address with Stripe, together with a reference for your invoice. We do not share your electricity bill, your supply address or your meter details with any payment provider. Stripe processes that information under its own privacy policy, available at https://stripe.com/au/privacy.

We collect and use personal information for the following primary purposes:

• (a)to provide goods, services or information to you;
• (b)for record keeping and administrative purposes;
• (c)to provide information about you to our contractors, employees, consultants, agents or other third parties for the purpose of providing goods or services to you;
• (d)to improve and optimise our service offering and customer experience;
• (e)to extract, classify, summarise and analyse information contained in electricity bills, interval data, tariff data, meter data, solar export data and other energy-related information you provide to us, including by using business or commercial artificial intelligence and automation tools, so that we can review your energy profile, prepare reports, compare options, identify patterns in usage and costs, and support our recommendations and customer service;
• (f)to review, monitor and improve our AI assistant, including understanding the questions users ask and the responses provided, using redacted transcript analytics where you have opted in to optional analytics;
• (g)to comply with our legal obligations, resolve disputes or enforce our agreements with third parties;
• (h)to send you administrative messages, reminders, notices, updates, security alerts, and other information requested by you; and
• (i)to consider an application of employment from you.

Where we use AI tools to read bills or analyse energy data, we use commercial services under business terms, never publicly available consumer chatbot accounts. For the Bill Review that service is Anthropic's commercial API, described in section 3: your name, address, NMI and account numbers are painted out of the bill on our own servers before anything is sent, and under our contract with Anthropic what we send and what comes back are not used to train its models and are deleted within 30 days.

The Bill Review is produced by our system, and no person reads each report before it is sent. A person on our team looks at a bill the system cannot read or is unsure about, and reads a sample of finished reports to check and improve the service. Elsewhere in our business, AI-generated outputs are an assistive tool only and are reviewed by our personnel before they are relied on.

We may also use your personal information for:

• (j)secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use;
• (k)such purposes where we reasonably believe that use of your personal information is necessary to lessen or prevent a serious threat to the life, health or safety of any individual, or to public health or safety, and it is unreasonable or impracticable to obtain your consent;
• (l)any other purpose for which we receive consent from you; or
• (m)any other purpose which is permitted or required under applicable privacy laws.

We respect your privacy, and we will take reasonable steps to keep your personal information confidential and protected. We may disclose your personal information to:

• (a)our professional advisors such as lawyers, accountants and auditors;
• (b)third-party providers who help us operate our website, hosting, analytics, observability, AI assistant, business or commercial AI analysis workflows, document processing, CRM, communications or technology systems, and other AI, cloud or software service providers we use from time to time;
• (c)payment providers who process payments on our behalf, being Stripe Payments Australia Pty Ltd for payments made online through our website and Zeller Australia Pty Ltd for card payments taken in person. We provide them with your name, email address and an order reference; we do not provide them with your electricity bill, supply address or meter details;
• (d)our related entities; or
• (e)any third parties you have consented personal information to be disclosed to.

We may also disclose personal information to third party contractors as required for us to provide our goods and services to you, such as cloud-service providers, IT professionals, business or commercial AI service providers, marketing agencies and debt collection agencies.

Without limiting the above, we may disclose or make available electricity bills, interval data, tariff data, meter data, solar export data and related personal information to business or commercial AI, document processing and cloud-service providers that help us extract, classify, summarise or analyse that information on our behalf for the purposes set out in this privacy policy. For the Bill Review, that provider is Anthropic, PBC in the United States, on the terms described in section 3.

Where we use such providers, we seek to use services configured for organisational or commercial use rather than publicly available consumer chatbot accounts, and we seek contractual or technical controls appropriate to the service. Where applicable under our arrangements with those providers, we seek to ensure that customer inputs and outputs are not used to train public AI models unless otherwise disclosed to you or permitted by law.

We take care to work with such third parties who we believe maintain an acceptable standard of data security and require them not to use your personal information for any purpose except for those activities we have asked them to perform on our behalf.

We will not otherwise disclose your personal information unless:

• (e)you have consented to us disclosing your personal information for particular circumstances;
• (f)as needed in an emergency or in investigation suspected criminal activity;
• (g)we are required to disclose under a subpoena, court order or other mandatory reporting requirements;
• (h)we reasonably believe that disclosure of your information is necessary to lessen or prevent a serious threat to the life, health or safety of any individual, or to public health or safety, and it is unreasonable or impracticable to obtain your consent;
• (i)it is reasonably necessary for the establishment, exercise or defence of a legal claim; or
• (j)it is otherwise authorised or required by law.

We use our best endeavours to store all personal information we collect securely and to work with service providers that maintain appropriate technical and organisational safeguards. Your Bill Review data is stored in Australia, in Sydney, as section 3 describes. For our other systems, some information may be stored on servers located in Australia, however our service providers may also operate infrastructure, support teams, backup systems or disaster recovery environments in other countries.

Where you use our AI assistant or chat features, your questions, transcripts, related metadata and operational logs may be processed or stored by technology providers we engage to operate those services. Where you opt in to optional analytics, we may also store redacted transcript analytics, behavioural analytics and replay data for selected pages to help us improve our website and services.

Where you provide us with electricity bills, interval data, tariff data, meter data, solar export data or related documents, those materials are stored on our hosting in Australia and are processed by the AI provider described in section 3. They may also be processed by cloud or document processing providers we engage to help us provide our services.

Where practicable, we seek to minimise the personal information provided to these systems and use redacted or de-identified information where appropriate.

Our website analytics, observability, hosting, CRM, communications and AI providers may process information across multiple countries, including countries outside Australia. The countries in which such overseas recipients are likely to be located are Australia and the United States of America. By using our services and providing your personal information, you acknowledge that overseas recipients may process or store your personal information in accordance with this privacy policy and applicable law. Our hosting provider's operational logs, which record requests to our websites, including your IP address, but never the contents of your bill or your report, may be held outside Australia.

When you communicate with us through a social media service, the relevant social media provider and its partners may collect and hold your personal information overseas according to their own privacy terms.

We may at times send you marketing communications which will be done in accordance with the Spam Act 2003 (Cth) (Spam Act).

If we do, we may use email, SMS, social media, phone or mail to send you direct marketing communications.

Where consent is needed, we will ask you for your consent before sending you marketing communications, except where you:

• (a)have explicitly opted-in to receiving email marketing from us in the past; or
• (b)were given the option to opt-out of email marketing when you initially signed up for one of our platforms and you did not do so.

You can, at any time, opt out of receiving marketing materials from us by using the opt-out facility provided (e.g., an unsubscribe link on emails we send you) or by contacting us via the details provided at the end of this privacy policy. We will implement such a request as soon as possible, however, cannot guarantee that such a response will be immediate.

The information we collect may have analytical, educational, or commercial value to us. Where we have de-identified the information we have collected, we reserve the right to process, discuss and distribute such information.

Our process of de-identification would leave only the following attributes linked to your personal information:

• (a)your household data (number of people in the home);
• (b)your power usage via our power audit sensor system device;
• (c)your power usage via your power metre;
• (d)your power usage cost; and
• (e)your postcode.

("De-Identified Information")

We will use your De-Identified Information to calculate the average power usage in your suburb and compare this data to other users in the same suburb. Subject to clause 5 of this privacy policy, we will not disclose your personal information with a third party.

For the Bill Review, the de-identified statistics we keep are the state, the electricity distributor, the retailer and plan on the bill, the billing period, the usage and amounts billed, the rating the review gave your plan and the saving it found, together with a one-way code derived from the NMI that lets us recognise a bill for the same meter without keeping the identifier itself. They also include facts about each report that identify no one: its number, when it was made, how long it took and what it cost us, the version of our software and the day's market prices it used, the plan it pointed to and what that plan costs, and how the report was written and checked. We use these to understand the market, to measure and improve the service, and to show recent results on our website without saying whose they are: a region or a postcode, the retailer, and the saving the review found, rounded, or that it found the customer is already on the cheapest plan.

We take reasonable steps to ensure your personal information is secure and protected from misuse or unauthorised access. Our information technology systems are password protected, and we use a range of administrative and technical measures to protect these systems. However, we cannot guarantee the security of your personal information.

Our website may contain links to other websites. Those links are provided for convenience and may not remain current or be maintained. We are not responsible for the privacy practices of those linked websites and we suggest you review the privacy policies of those websites before using them.

If you wish to request access to the personal information we hold about you, please contact us using the contact details set out below including your name and contact details. We may need to verify your identity before providing you with your personal information. In some cases, we may be unable to provide you with access to all your personal information and where this occurs, we will explain why. We will deal with all requests for access to personal information within a reasonable timeframe.

If you think that any personal information we hold about you is inaccurate, please contact us using the contact details set out below and we will take reasonable steps to ensure that it is corrected.

If you wish to complain about how we handle your personal information held by us, please contact us using the details set out below including your name and contact details. We will investigate your complaint promptly and respond to you within a reasonable timeframe.

For further information about our privacy policy or practices, or to access or correct your personal information, or make a complaint, please contact us using the details set out below: