Legal

Privacy Policy

Last updated: 8 July 2026

EnergySorted handles your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, how we store it, when it may be disclosed overseas, and how you can access, correct or delete it.

1. What we collect and why

• Account details — your email and a password (never stored in plain text; hashed with bcrypt). Purpose: to create and secure your account.
• Bill and usage data — the usage figures, tariff details and supply address or NMI on any bill you upload, plus the usage profile behind a comparison (network area, distributor, tariff type, billed usage). Purpose: to cost plans against your real usage.
• Comparison history — comparisons you run or save to be watched for cheaper plans. Purpose: to deliver and improve results and alerts.
• Enquiry details — if you contact us or submit a form, the name, email and message you provide. Purpose: to respond to you.
• Usage analytics — if you accept analytics cookies, standard measurement data (pages viewed, approximate location, device/browser). Purpose: to understand and improve the site. See section 4 and our Cookie Policy.
• Security data — limited technical data (such as IP address) used to rate-limit and protect forms and logins against abuse, including via Cloudflare Turnstile, a bot-protection challenge on our public forms.

2. How it is stored

Account and comparison data is stored in the application database. Passwords are bcrypt-hashed, not stored in a reversible form — we cannot see or recover your password. Saved comparisons and usage profiles are tied to your account and only returned to requests made by that account. We apply reasonable technical and organisational security measures, including encryption in transit (HTTPS), hashed credentials and access controls.

3. Bill reading and the AI advisor

If you upload a bill to be read automatically, or ask our AI advisor ("Ask EnergySorted") a question, the relevant bill content and your queries are sent to OpenAI, a service provider located in the United States, to extract usage figures and generate answers. We do not independently retain the raw bill file beyond what is needed to complete that extraction.

4. Analytics and cookies

We use Google Analytics via Google Tag Manager to measure how the site is used. Analytics is loaded with Google Consent Mode v2 and stays off until you accept in our cookie banner; if your browser signals Do Not Track / Global Privacy Control, it is not loaded at all. This may involve processing by Google, including overseas. You can change or withdraw consent at any time via Cookie settings. Full detail is in our Cookie Policy.

5. Who we share it with, and overseas disclosure

We do not sell your data. We share personal information only with the service providers needed to operate the service, and only for that purpose:

• OpenAI (United States) — bill extraction and AI answers (section 3).
• Google — analytics/tag management, if you accept (section 4); may involve overseas processing.
• Cloudflare — Turnstile bot-protection on our forms.
• Our cloud hosting provider — to run the application and store its data.
• Email delivery provider — to send transactional emails such as verification and alerts.

Because some of these providers are located overseas, your personal information may be disclosed to recipients outside Australia (Australian Privacy Principle 8), and that processing is subject to those providers' own terms and privacy practices.

6. How long we keep it

We keep your account and comparison data while your account is active, so we can run comparisons, watch saved plans and answer questions. If you ask us to delete your data, or a reasonable period after you close your account, we delete it — except where we are required to retain certain records to comply with the law.

7. Your choices, access and correction

You can change your password at any time from your account page while signed in (this also signs out other active sessions). You can delete a saved comparison from your dashboard. You can request access to, correction of, or deletion of your account and associated personal information by emailing support@energysorted.com.au.

If you are not satisfied with how we have handled your personal information or a privacy complaint, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8. Contact

For privacy questions or to request access to or deletion of your data: support@energysorted.com.au. This service is operated by EnergySorted.

This is a plain-English draft, not legal advice; a lawyer should review it before launch.