Privacy & data

• Account — your email and login, handled by our auth provider (Clerk).
• Property details — postcode, address, and meter NMI you enter or that we read from a bill.
• Bills you upload — the actual PDF/image files, plus the figures read from them (usage, cost, rates, feed-in).
• Solar / battery systems — size, cost, install dates, warranty, and any receipts you attach.
• Energy data — daily and interval readings you import from your inverter/battery logger.
• Tariffs & appliances — the rate windows and large appliances you record.
• Feedback — only if you choose to send it (message, and an email address if you add one).

We do not sell your data, show third-party ads, or share it with retailers. Plan data flows one way — from the public Consumer Data Right feed to you.

• Database: a managed Postgres database (Neon) hosted in Australia (Sydney, ap-southeast-2), encrypted at rest.
• Uploaded bill files are additionally encrypted by GridCheck with AES-256-GCM before they're written, so the stored bytes are unreadable without a key that never touches the database.
• In transit: everything is served over HTTPS, and the database connection is TLS-encrypted.
• Access is per-account: every request is tied to your login, and every query is scoped to your user ID — one account can never read another's data.
• AI bill reading is optional and key-free by default. The built-in PDF reader needs no AI. If you opt into AI reading, your API key stays in your browser only — it is sent per request, used momentarily, and never stored on our servers.

Only you. GridCheck's administrator can read the feedback messages you choose to send (to reply and fix issues) and can manage the shared public plan catalogue — but cannot access your bills, invoices, systems or energy data. Those are locked to your account.

On the Home page there's a Delete account button. It permanently and immediately removes allof your data — profile, properties, invoices and the uploaded bill files, systems and receipts, tariffs, appliances, and every imported energy reading — and deletes your login. It's a hard delete: the rows are gone, not hidden, and it cannot be undone.

The only thing unaffected is the shared public plan catalogue, which contains no personal information.

We keep your data only while your account exists. Delete your account and it's removed straight away. We don't keep shadow copies; routine infrastructure backups roll off on the provider's normal cycle.

Questions, or want your data removed manually? Email tim@dinte.co.