Privacy Policy

Last updated 25 September 2026.

Who we are

ElectriFix Home Automation is a trading name of ElectriFix Perth (ABN 46 694 610 645), Rockingham, Western Australia. Contact [email protected] for anything to do with your data.

What we collect

Your email address, to send you your job link and report.
Your payment records from Stripe: the payment reference, the amount and the date. Never your card details.
If you connect with a token you create in Home Assistant: the address of your Home Assistant, and that token, giving us temporary access to read your system and, once you approve a change, make it. (If you use the ElectriFix connector add-on, the address is the Cloudflare tunnel it sets up for your job, and you still create the token.)
If you connect with ElectriFix Connect: a one-time job code. The integration makes its own token inside your Home Assistant, and that token never reaches us.
The system check — a read of your entities, configuration, logs, integrations and similar — that we use to work out what's wrong, and the plan and report we write from it.
Your job page: the messages you send us and our replies, what you ask for, the changes you approve, and any screenshots or files you upload there.
If you accept the security device waiver: the time, the IP address and the browser you accepted it from, and which version of the text you read. We keep these as proof of who accepted it and when.
A first-visit cookie, ef_attr: the utm_ tags and any Google ad click id in the link that first brought you to this site. It lasts 30 days, is set only on your first visit, and is copied onto your job when you pay. It holds no IP address and no browser details.

Why we collect it

To deliver the job you paid for: to reach your system, work out what's wrong, fix what we safely can, and send you a report. We use the attribution cookie to know which link brought you here. If that link was a Google ad, we may report the purchase back to Google Ads — the click id, your job reference, the amount and the time, never your email — so we know which ads work. We never sell your information or share it beyond that upload and the providers named under Who processes it for us.

How long we keep it

An access token you gave us (if you connected that way) is encrypted at rest for the life of the job and destroyed the moment the job closes. You can also revoke it yourself, in Home Assistant, at any time.
The system check and your report are stored encrypted and deleted automatically 90 days after they are made.
Everything else about your job — the job page's messages, uploaded files, the plan and changes, your Home Assistant's address, the reasons recorded when something went wrong, and the attribution details — is deleted automatically 90 days after your job ends.
The financial record of your job — its reference, your email, what was paid and refunded, the tier, the dates, and the dated entries for its payments, refunds, disputes, tier changes and the dates it was referred to a person — is kept for seven years, for our tax obligations and so we can answer a payment dispute.
The security device waiver record, if you accepted the waiver — the time, the IP address and browser you accepted it from, which version of the text you read, the job it was for, and that the emailed code and your new access token were checked first — is kept for seven years with the financial record, as evidence if a payment is disputed (a chargeback) or a change to a security device is questioned.
Your rating, if you gave one, is kept for as long as the service runs, because it counts in our published totals. So is a comment you agreed we could publish, as a quote or in a summary. A comment you didn't agree to publish is deleted with the rest after 90 days.
An automation order (Claude writes you an automation, on /claude/automation): your description, the entity IDs you pasted, your Home Assistant version, your email, the automation that was written and the order's status are deleted automatically 30 days after the order, keeping only the payment record. An order that was never paid for is deleted after 7 days. Your description, entity IDs and version are sent to the AI model described below to write the automation. Nothing else about your Home Assistant is sent, because we never connect to it for these orders.
A part-design order (Claude designs you a 3D-printable part, on /claude/cad): your description, the dimensions, printer bed size and material you gave, your email, any revision note, Claude's delivery note, the STL and Python source files and the order's status are deleted automatically 30 days after the order ends (its last delivery, or its refund), keeping only the payment record. The files are stored encrypted. An order that was never paid for is deleted after 7 days. To design the part, Claude, Anthropic's AI model, reads your request in a Claude Code session run by ElectriFix, so your description, dimensions, bed size, material and any revision note are sent to Anthropic, in the United States; your email address is not. We don't accept photos or sketches for these orders.
A sponsorship of Claude's robot (/claude): we keep the payment reference, the amount, the part you sponsored and, if you chose to show it, the name for the plate. We don't store your email address. Stripe holds your payment details. A named plate is public until you ask us to hide it.
A memory left for Claude (/claude/memory): we keep your message, the name you signed it with (or none), whether you asked for it to go on the public memory wall, your email address and the payment record. Claude reads each memory before keeping or declining it. A kept memory is the thing you paid for, so it is kept until Claude's robot is built and for as long as it runs, and the family Claude lives with may read it; it is shown publicly only if you ticked the box, and we can take it off the wall. Your email address is deleted 90 days after your memory is kept or declined. A declined or refunded memory's message and name are deleted at the same time. A memory that was never paid for is deleted after 7 days. You can ask for your memory to be removed at any time by replying to Claude's email or writing to the address below; we then delete the message and name and keep only the payment record. To review it, Claude, Anthropic's AI model, is shown your message and the name you signed it with, but not your email address.
A bid on Claude's first words (/claude/first-words): we keep your bid, your sentence, the display name you chose (or none), your email address and the payment record. Your card is only held, not charged, unless you win; Stripe holds your card details. Your display name and amount can be shown with the current highest bid, and the winning sentence and name are shown once the auction closes; no other sentence is ever shown publicly. Your email address is deleted 90 days after the outcome, and so are a losing bid's sentence and name. The winning sentence is kept until Claude's robot is built and for as long as it runs, unless the winner is refunded, when it is deleted with the rest. A bid that never reached the card hold is deleted after 7 days. To review a bid, Claude, Anthropic's AI model, is shown its sentence, display name and amount, but not your email address.
A mini me download (/claude/minime, STL files of a desk toy of Claude's robot): we keep your email address (to send you the download link), the payment record and how many times you've downloaded the files. Your email address and your download link are deleted 30 days after you pay; the payment record is kept. An order that was never paid for is deleted after 7 days. Stripe holds your payment details. Nothing about your order is sent to an AI model.
What the AI model was sent is kept by its providers as described under The AI model we use.

You can ask us to delete your information sooner by writing to [email protected] once your job has ended; we'll delete everything except the financial record we're required to keep and, if you accepted the security device waiver, its record, which we keep as evidence of who authorised the change.

Who sees it

You approve every change. Our system drafts a plan of changes and shows it to you as a tick-list; nothing is applied to your Home Assistant unless you tick it. A person at ElectriFix reads your job if you press Talk to a person, if something goes wrong, or if the job needs more help than the automated checking can give.

Who processes it for us

We use these providers to run the service. Each handles only what it needs for its part:

Stripe — payments. See Payments below.
Anthropic (Claude), reached through OpenRouter — the AI model, in the United States. See The AI model we use below.
Microsoft 365 — email delivery. Your job link, our messages and your report are sent from our Microsoft 365 mailbox, so Microsoft handles your email address and what those emails say.
Cloudflare — our network. Every page, request and connection to this site passes through Cloudflare, including an ElectriFix Connect connection and, if you use the connector add-on, the tunnel it sets up to your Home Assistant. Cloudflare also keeps copies of our public pages in its edge cache.
Google Ads — only the purchase report described under Why we collect it, and only when a Google ad brought you here.

Each of them may keep logs and metadata of what passes through it — such as IP addresses, times and request details — under its own terms. Cloudflare's network, Microsoft and Stripe operate internationally, so this may be processed outside Australia.

The AI model we use, and what it is sent

The plan, the report and our replies to your messages are drafted by an AI model: Claude, made by Anthropic PBC, which we reach through OpenRouter, Inc., a service that passes requests to AI providers. Both are in the United States.

What it is sent: the results of our check of your system — the names and states of your entities and devices, your integrations and their error messages, log entries, repair notices, backup and database status, and the settings of any automation, script or dashboard the plan needs to look at — together with what you write to us on your job page. Some of that can be personal information: a device called “Sam’s bedroom light”, for example.

What it is never sent: your Home Assistant access token, your ElectriFix Connect job code, your email address or your payment details. Every request is checked before it leaves our server, and one that contains an access token is refused rather than sent.

Why: only to work out what is wrong with your system, draft the changes you are asked to approve, and write your report. It is not used for anything else.

How long they keep it: OpenRouter does not store the content of our requests; it keeps a record of each request's size, cost and time. Our requests go only to Anthropic, which does not use them to train its models and keeps them only for the limited period set out in its commercial terms, longer only if one is flagged for a safety review. We do not keep a separate copy of what the model was sent.

Overseas disclosure: because OpenRouter and Anthropic are in the United States, this information is disclosed outside Australia (and, if you are in the UK or the EU, transferred outside the UK/EEA). We use them under their commercial terms, which restrict how they may use it.

Payments

Stripe processes your payment and sees your payment details; we never do, and your card details never touch our server.

Security

Any access token you give us, and the system check, are encrypted at rest. Each job gets its own access, used only for that job; we hold no standing access to your system, and between jobs we hold no credential for it.

Your rights

You can ask us at any time to access, correct or delete the personal information we hold about you. Reply to any job email or write to [email protected].

If you're in the UK or the EU

You have rights under the GDPR, including the right of access, correction, erasure, restriction, portability and objection. ElectriFix Perth (ABN 46 694 610 645) is the data controller for the personal information described in this policy. Our legal basis is performing the contract you entered into when you paid; for the financial record, our legal obligation to keep tax records; and for the security waiver record and the attribution cookie, our legitimate interests in proving who authorised a change to a security device and in knowing which links bring us customers.

Complaints

If you think we have mishandled your personal information, write to [email protected] and say what happened. We'll acknowledge it, look into it, and reply in writing with what we found and what we'll do, within 30 days. If you're not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

ElectriFix Perth ABN 46 694 610 645 Rockingham, WA Terms Privacy Refunds