BilliT-Co Privacy Notice

Version 1.1 — 09/10/2026.

Who we are

BilliT-Co is a trading name of G Financial Wealth Pty Ltd, ABN 34 692 930 662, of Holland Park, Queensland.

Email us about anything here: energy@billit-co.com.

What this notice is

It explains what we collect, what we do with it, who else sees it, where it is kept, how long we keep it, and how you get it back or get it removed.

It is written to be read, not to be got past. If anything is unclear, ask and we will explain it.

We do not check one bill and stop. We keep checking the bills you give us, over time, for as long as you are with us.

So what you agree to at sign-up is ongoing: that we may keep reading and checking the bills you upload, not only the first one.

You can withdraw that at any time — one email to us, effective as soon as we receive it. It is no harder to stop than it was to start.

What we collect

What you send us, and the meter data you authorise us to get. We are not connected to your meter or retailer. Your meter data reaches us one of three ways: you upload it, you forward us your network's email, or you authorise us to request it and your network sends it. Nothing else reaches us.

Your account: your email address, your password, and your name if you give it. Your password is stored only as a one-way scramble — we cannot read it, and neither can anyone who gets hold of it.

Your agreement: the date and time you accepted these documents, and which version you accepted.

Your bills, and what is printed on them: your name, supply address, NMI, retailer, account and invoice numbers, charges, rates and usage. Each bill you upload, for as long as you keep uploading them.

A meter data file, if you upload one — the interval readings your retailer or distributor gave you.

Your meter-data authority. Being a member means authorising us to get your meter data — it is how we check your bills against what you actually used, so it is part of joining, not an extra. When you give it we record your name, date and time, IP address, browser user-agent, meter number (NMI), supply address, the date range, and the exact words you agreed to — the network needs this to release your data, and it is our proof you asked.

Your request details: full name, mobile, supply address, postal address, meter number (NMI), and your retailer and account number if you add them. We pre-fill what we can read from your bill; you check it.

Your signature, if you sign the network's authority form in the app. We place it on their form, keep the signed copy, and send it with your request. We use it for nothing else.

The meter readings your network sends back — half-hourly, or one total per read, depending on your meter.

A photo of your meter, if you take one. We send the photo to Google to read the meter and serial numbers off it, then we discard the photo — we do not store it. We keep the numbers, and the supply address you type in yourself.

Details about your property, if you enter them: roof type, orientation, shading, storeys, whether you already have solar or a battery.

Technical logs. Our servers record each request, including your IP address and your browser's user-agent string.

A record when we act on your account. If one of us takes an administrative action on your account — for example, helping you get back in — that action is recorded.

What we do with it

We read your bills, check them for billing errors, and tell you what we found. If you approve a dispute, we use what we hold to put that dispute to your retailer. We use your email address to run your account — confirming it is yours, letting you reset your password — and to tell you about your audits, your disputes and your invoices.

We check each bill against your meter data: what your meter recorded against what your retailer billed.

As a member you agree we keep the usage, rate and charge figures from your bills, with your name, address, meter number and account details removed, to improve how we check bills, find better deals, and get you a better result. We never sell your information.

We do not sell your information. We do not rent it. We do not put it on a marketing list. We do not use your bills to train anyone's AI, and Google does not use them to improve its products.

Your data goes to no installer unless you ask

We will not send your bill data, your property details or your contact details to any solar or battery installer, or to any similar third party, unless you have explicitly asked us for renewables quotes.

Not by default. Not because you looked at something. Not because we inferred you might be interested. Only if you ask — a deliberate action, which we record with the date and time.

If you never ask, it never happens.

Who else sees it

Google. Our systems run on Google Cloud, and we use Google's Gemini service to read your bills and your meter photo. This is the one place your bill information leaves our systems as a matter of course, and it is set out in full below.

Google, whose mail service sends the emails that confirm your address and reset your password. It sees your email address and the email we send you, and nothing from your bills.

Your electricity network — the distributor that owns the poles and wires to your address, not your retailer — because you authorised the meter-data request. Which network depends on where you live (Queensland: Energex or Ergon; New South Wales: Ausgrid, Endeavour or Essential). We send them your name, mobile, supply address, meter number (NMI), the date range, and your signed form, so they can confirm you are the account holder and release your data — by email, or their upload page where that is the only way they accept it. Each request is yours alone; no one else's details go with it. We send you a copy of your request and signed form.

Your retailer and distributor — only for a dispute you specifically approved, and only what that dispute needs.

Your state's energy ombudsman — only if an approved dispute is escalated there.

Nobody else. If that ever changes, we will tell you before it does, not after.

Where it is kept

In Australia. Your bills, meter files, account and our records of your audits are stored in Google Cloud's Sydney region. Our backups are in Sydney. Our server logs are in Sydney.

One exception, and it matters. To read a bill or a meter photo, we send it to Google's Gemini service. Google does not use it to improve its products, but Google keeps a copy of what we send and what comes back for a limited period, to detect misuse and to meet its legal obligations. Google does not say how long that period is, and during it the copy may be held in any country where Google has facilities. Our own copy never leaves Sydney.

Emails to you are sent through Google's mail service, which may process them outside Australia.

Meter data emailed to us, by your network or by you, lands in our Google-hosted email, which may sit outside Australia. We copy it into our Sydney storage and work on it there.

We tell you because it is true, and because you cannot make a real decision without it.

How long we keep it

Each bill, and the audit of it: seven years from the day you upload that bill. Each one runs its own seven years.
Each meter data file: seven years from receipt.
Your authority, signed form, request details and the record of you giving it: seven years from the day you give it. An authority covers up to two years of data. Withdraw any time; we then make no new request under it.
De-identified bill figures: kept while useful for improving our checks and finding better deals.
Anything that is evidence in a dispute we lodged: until that dispute is closed, even if longer.
Your account and email address: until you ask us to remove them.
Server logs: 30 days, then deleted automatically.
After we delete something, it can survive in our backups for up to 30 days before it is gone for good.

Cancelling is not the same as deleting

Two different things, and we will not treat one as the other.

Cancelling stops us checking your bills. It does not delete anything.

Asking us to delete your information is a separate request — email us and say so, and we will act on it.

If you want both, say both.

Your rights

You can ask to see what we hold. Email us and we will send it.

You can ask us to correct it if it is wrong.

You can ask us to delete it. We will, except two things: anything that is evidence in a dispute we lodged on your behalf, and a meter-data authority we have already sent to your network — the signed form, the request details and the record of you giving it — which we keep for seven years from the day you gave it, as the record of the consent your network acted on. An authority we never sent is deleted with everything else. If we keep something, we will tell you exactly what and why, not leave you guessing.

Withdraw your meter-data authority any time with one email. We make no new request under it. Because the meter check is the service, withdrawing it ends your membership. Data already sent to us is kept and deleted on the same terms as your bills.

We respond within 30 days.

Two honest limitations. Our server logs hold your IP address for 30 days and cannot be separated per person, so they are not something we can export or delete individually; they expire on their own. And the copy Google holds for misuse detection is Google's, not ours, so we cannot delete it for you.

Keeping it safe

Your bills and files sit in Australian storage only our own systems can reach. No part of your information is readable by another customer. Your password is stored only as a one-way scramble.

We confirm your email address before your account can upload anything, so an account in your name is proved to be yours. If you reset your password or sign out, every session signed in to your account ends, on every device.

What we do not claim: no system is perfect and we are not going to tell you ours is. If something happens to your information that is likely to cause you serious harm, we will tell you, and we will tell the Commissioner.

Email addresses we already hold

Before accounts existed, some people gave us an email address to hear about the launch. We still hold those addresses, and the property setup those people told us. We no longer collect them this way. We have not used them for anything else and we will not pass them on. If yours is one and you want it gone, email us.

Cookies

One cookie, to keep you signed in. Not for advertising, not shared with anyone. Sign out or clear it and you are signed out.

Complaints

Tell us first — energy@billit-co.com. We will acknowledge your complaint within 5 business days and give you our answer within 30 days.

You can also contact the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

If this changes

If we change what we do with your information, we will update this notice, email you, and ask you to agree again before the change applies to you. We will not change it quietly.