What we collect, why, and how to delete it.

Last updated: 17 June 2026

This website and the PR Insight web app are operated by Aira Dev Pty Ltd (ACN 699 003 248 · ABN 40 699 003 248), a company registered in Australia (“we”, “us”, “our”). This Privacy Policy describes what personal information we collect, why we collect it, who we share it with, and how you can access, correct, or delete it. It is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

PR Insight is a data tool, not a migration agent. We are not affiliated with the Australian Government, the Department of Home Affairs, or OMARA — see our Terms of Use for the full disclaimer.

1. What we collect

Account information:email address, name (optional). We use a passwordless magic-link flow — we never collect or store passwords. Where you sign in via the magic-link, we receive only the email address you provided.
Migration profile (only what you choose to enter): age, English level, occupation (ANZSCO code + title), years of skilled employment, qualifications, claimed points, visa subclass(es) of interest, nominating state preference, and partner / dependant details if you opt to model them.
Saved scenarios and documents: the assessments, comparisons, and plans you save to your account.
Communication preferences: round-alert subscriptions and email opt-ins.
Billing (paid plans only, post-launch): Stripe customer ID, subscription status, transaction history. Card numbers are entered into Stripe directly and are never stored on our systems.
Anonymous usage data: hashed IP addresses for rate-limiting and abuse prevention; aggregate page-view counts via a privacy-respecting analytics provider. No personally identifiable information is sent to analytics providers.
Server logs: standard request logs (timestamps, error traces, app version) retained for debugging and security.

2. What we do NOT collect

To stay strictly within the role of a data tool and outside s.276 of the Migration Act, PR Insight does not collect, store, or process:

Passport scans, ID documents, or biometric data;
Skills-assessment outcome letters or other application evidence;
Health, police, or character documents;
Any document you would lodge with the Department of Home Affairs.

Please do not upload these. If you do, we will delete them.

3. Why we collect it

Your migration profile powers the points calculator, eligibility checker, pathway comparison, saved-scenarios dashboard, and email alerts you opt into. Cached snapshots make the app fast. Anonymous analytics help us understand which features work and improve the product. Billing data is used solely to operate paid subscriptions.

We do not use your data to train AI models, and we do not share it with advertisers. If we ever introduce advertising to support the platform, we will update this policy and disclose what data (if any) is shared with them before any change takes effect.

4. Service providers

We do not sell or rent your personal information. Limited data is processed by a small number of third-party service providers strictly to operate the platform. Personal information may be disclosed to the following categories of providers:

Managed database hosting(servers located in Singapore) — stores account information, your migration profile, and saved scenarios. All user-owned records are filtered by user ID at the application layer.
Web hosting and edge runtime(servers located in the United States and the Asia-Pacific region) — receives request metadata to route pages and serve the web application.
Transactional email delivery(servers located in the United States) — sends magic-link sign-in emails and the round-change alert emails you opt into. Receives your email address and message contents.
Payment processing(Stripe, Inc., servers located in the United States and Australia — post-launch only) — handles subscription billing for paid plans. Card details are entered into Stripe’s hosted form directly; we never receive or store payment card numbers.

Each provider operates under its own privacy policy and is contractually bound to process information only on our instructions. A current list of specific service providers is available on request at hello@prinsight.app. We will update this section before introducing any new provider that processes personal information.

5. If you explicitly request a migration professional

If, and only if, you explicitly opt in to being connected with a migration professional, we will share your contact details and the relevant parts of your saved profile with a MARA-registered migration agent or Australian legal practitioner. This only happens with your express opt-in consent on a per-introduction basis. You can decline at any time, and declining does not affect your use of any other feature.

6. Data security

Your data is stored on managed PostgreSQL infrastructure with TLS-only connections. Authentication uses passwordless magic- link tokens; we never store passwords because we never collect them. All application traffic is served over HTTPS with strict transport security headers.

In the event of a data breach affecting your personal information, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988.

7. Data retention & deletion

Saved scenarios remain in your account until you remove them from the dashboard or delete your account.
Email-send logs are retained for 30 days for rate-limit accounting, then aggregated.
Server logs are retained for up to 90 days, then deleted or anonymised.
Billing records (post-launch) are retained for 7 years to comply with Australian tax and accounting law.
To delete your account and all associated personal data, contact us via hello@prinsight.app. We will action deletion requests within 30 days.

8. Cookies and similar technologies

PR Insight uses a small number of cookies and browser-storage items. All are documented below so you can decide what to allow. We do not show a cookie consent banner because the Australian Privacy Principles (APPs) require disclosure, not opt-in consent, for the items described below. Visitors from jurisdictions with stricter requirements (e.g. EU, UK, or California) may use the browser-level controls noted under “How to opt out”.

8.1 Strictly necessary (always on)

Authentication session cookie. Issued when you sign in via magic link. Lets the dashboard recognise you across page loads. HTTP-only, Secure, SameSite=Lax. Expires 30 days from sign-in or on sign-out. Without it you cannot stay signed in.
Beta access cookie (beta period only). Confirms you have signed in to the invite-only beta. Removed automatically when public launch happens.

8.2 Functional (preference)

Theme preference.Stored in your browser’s localStorage under pri-theme. Remembers whether you chose light, dark, or system theme. Cleared when you clear site data.

8.3 Analytics (anonymous)

Page-view counts and performance metrics. We use a privacy-respecting analytics provider that does not store personally identifiable information and does not track you across other sites.
Error tracking. Anonymous error reports help us catch and fix bugs. We deliberately disable personally-identifiable-information capture and disable session replay; no IP addresses, request headers, or authentication tokens are sent.

8.4 Payments (post-launch only)

When subscription billing is enabled, our payment processor sets cookies as part of its hosted checkout. We never receive or store card data. Payment cookies are only set when you actively initiate a transaction.

8.5 How to opt out

For analytics and error tracking: enable your browser’s “Do Not Track” or “Global Privacy Control” signal, or install a privacy extension (uBlock Origin, Privacy Badger). We respect these signals.
For all cookies including the authentication session: sign out and clear site data via your browser settings. You will need to sign in again on your next visit.
We will introduce a regional consent banner before public launch so EU, UK, and California visitors can manage non-essential cookies explicitly.

9. Your rights under the Australian Privacy Principles

You have the right to:

Access the personal information we hold about you;
Correct it if it is inaccurate or out of date;
Request deletion of your data;
Object to particular processing activities;
Withdraw consent for optional features (alerts, analytics, professional introductions) at any time;
Lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au) if you believe we have mishandled your information.

10. International users & cross-border disclosure

Our service uses subprocessors located outside Australia (primarily the United States and Singapore). By using PR Insight you consent to your personal information being transferred to, and processed in, those jurisdictions. We apply the same controls regardless of your country and we take reasonable steps to ensure overseas recipients handle your information consistently with the APPs.

11. Children

PR Insight is not directed at children under 16 and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the “Last updated” date at the top of this page, and where appropriate we will notify signed-in users by email or an in-product banner. Continued use of the platform after changes constitutes acceptance of the updated policy.

13. Contact

Questions about this policy, or requests to exercise a privacy right: hello@prinsight.app.