Privacy Policy

Operated by Mixma AI. Last updated: 10 July 2026. This policy describes how VeriPlan Lite handles information today. Seek qualified legal advice before large-scale paid marketing campaigns.

What we do with your invoice

When you upload an invoice PDF, it is processed temporarily to extract fields (provider name, ABN, invoice number, date, and line items) for your review. The file itself is not stored by default and is discarded once processing completes.

Extraction may use Cloudflare Workers AI and, when enabled, OpenAI document recognition. Invoice bytes are sent to these services in memory for processing only and are not retained by VeriPlan after the request completes.

Participant information

Any NDIS participant identifier found on an invoice is shown to you during the review step for your own context, but is never sent to our database and is not retained after your session ends.

What we do store

When you run checks on an invoice, we store minimal metadata associated with your account:

• Provider name and ABN (as extracted or corrected by you)
• A salted, one-way hash of the invoice number (not the invoice number itself)
• Support item codes referenced on the invoice
• The check result and flags raised
• The date and time of the check
• Which team member ran the check (organisation accounts)

We never store the raw invoice PDF or participant identifiers as part of this record.

Account and billing information

We use Supabase for authentication and PostgreSQL hosting, Cloudflare for application delivery, and Stripe for billing. Your email address, authentication credentials, and billing details are handled by those providers under their own privacy and security practices.

Data deletion

Deleting your account removes your profile and check history. Because raw invoices and participant identifiers are never stored, there is nothing further to delete on that front. If you need a record deleted sooner, contact us and we will process the request manually.

What VeriPlan is not

VeriPlan is a checking assistant. It does not make payment decisions, provide legal advice, or determine fraud. It does not build profiles of providers, and it does not contact NDIS participants on your behalf.

Contact

Questions about this policy can be sent to hello@mixma.ai.