Privacy Policy

1. Who we are

The data controller is Energy IQ Group (ABN 61 148 794 944), 526/368 Sussex St, Sydney NSW 2000, Australia. For privacy enquiries, contact us via the details at the end of this policy.

2. Information we collect

• Account & contact details — name, work email, password (stored hashed), company name, role, and phone where provided.
• Business & energy data you upload — store and site details, utility invoices (PDFs/images), supplier and account numbers, NMI/meter identifiers, consumption (kWh and other units), costs, billing periods and related metadata.
• Sales enquiries — the company, name, email, portfolio size and message you submit through our contact form.
• Billing information — subscription plan, store counts, and payment status. Card payments are processed by Stripe; we do not store full card numbers.
• Usage & technical data — log data, device/browser information, IP address, and essential cookies used to keep you signed in.

3. How we use your information

• Provide, operate and secure the platform and your account.
• Extract, organise and analyse your energy invoices and produce analytics, carbon/ESG reporting and AI insights.
• Process subscriptions, trials and payments, and send service and billing communications.
• Respond to sales enquiries and provide support.
• Detect, prevent and investigate fraud, abuse and security incidents, and meet legal obligations.

4. AI processing

To read invoices and generate insights, content you upload may be processed by third-party AI providers (currently Google (Gemini) and/or Anthropic (Claude)) acting as our processors. We send only the data needed for the task, and our providers are contractually prohibited from using your content to train their models. AI outputs can be inaccurate and should be reviewed before you rely on them.

5. Disclosure & sub-processors

We do not sell your personal information. We share it only with service providers that help us run EnergyIQ, under appropriate confidentiality and data-protection terms:

• Cloud hosting and database infrastructure;
• File/object storage for your uploaded invoices;
• Email delivery for transactional and notification emails;
• Stripe for card payment processing;
• AI providers as described above.

We may also disclose information where required by law, to enforce our terms, or to protect the rights, safety and property of EnergyIQ, our customers or others.

6. Data security & storage

Data is encrypted in transit (TLS) and access is restricted by role-based controls and tenant isolation, so each customer can only access its own data. Uploaded files are served through short-lived, signed links. While we take reasonable steps to protect your information, no method of transmission or storage is completely secure.

7. Data retention

We retain your information for as long as your account is active and as needed to provide the service, then for a reasonable period to meet legal, tax, accounting and dispute-resolution requirements. You may request deletion of your account data, subject to those obligations.

8. Your rights

You may request to access, correct, or delete your personal information, or object to or restrict certain processing. To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request.

9. International data transfers

Some of our providers may store or process data outside Australia. Where this occurs, we take reasonable steps to ensure your information is handled consistently with the APPs and this policy.

10. Cookies

We use strictly necessary cookies to authenticate your session and keep the platform secure. We do not use them for third-party advertising.

11. Children

EnergyIQ is a business product and is not directed to anyone under 18. We do not knowingly collect data from children.

12. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new “Last updated” date.

13. Contact & complaints

For privacy questions or to make a complaint, contact Energy IQ Group at the address above or via our contact form. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.