Privacy Policy

We collect what the product needs to work when you take an action:

• Checklist requests: your name, email address, and industry, so we can send the checklist you asked for.
• Accounts: your email address (for sign-in links) and, if you save them, workplace names, role classifications, and the hourly rates you enter. We do not ask for or store employee names or other sensitive personal information.
• Payments: subscriptions are processed by Stripe. Your card details go directly to Stripe and never touch our servers. We store only your subscription status.
• Rate checks: when you run a check we store your account email, the award, classification, rate, result, and a hashed network address to enforce free-tier limits and prevent abuse.

• To provide the service you asked for.
• To email you the checklist you requested, and related follow-up you can unsubscribe from at any time.
• To manage your account and subscription.
• We do not sell personal information, and we do not share it with third parties beyond the service providers listed below.

• Supabase hosts our database and authentication. Access is protected by row-level security: your data is only readable by your account.
• Stripe processes payments.
• Cloudflare hosts the application.
• Meta Platforms, Inc. (Meta Pixel) is used for marketing analytics and traffic tracking on our marketing pages.
• Google LLC (Google Ads) is used to measure advertising results on production marketing pages, first completed rate checks, registrations, and verified paid subscription events.
• Pay rate figures are retrieved from the Fair Work Commission Modern Award Pay Database. Your queries to it pass through our server; the Commission does not receive your identity from us.

On public marketing pages we use the Meta Pixel for page views, lead capture, checkout starts, and purchases. These tools may set cookies and receive page-level events only.

We do not fire Meta PageView on authenticated or sensitive routes such as your dashboard (/app), account settings, the signed-in rate checker, billing success pages, or any view that could expose saved workplaces, roles, rates, reports, or check history.

We record a first-party acquisition funnel for visits to the rate checker, check starts, first completed checks, and registrations. It uses a pseudonymous browser identifier and hashed network address for deduplication and abuse prevention. Campaign names and UTM fields may be stored, but award selections, classifications, pay-rate inputs, results, workplaces, names, and email addresses are excluded.

The Google Ads tag runs only on the production site. A paid subscription event is sent only after our server verifies a live, completed Stripe payment. A first-check conversion is sent only after the server returns a successful rate result. Google receives event-level data and non-personal transaction identifiers used to avoid duplicate counting; payment conversions also include value and currency. We do not send customer email, name, card details, pay-rate inputs, award or classification selections, results, workplaces, saved roles, reports, or check history to Google.

You can ask us to access, correct, or delete your personal information at any time by emailing hello@mixma.ai. Deleting your account removes your saved workplaces, roles, and rates from our database.

If you have a concern about how we handled your information, email us first and we will respond promptly. You can also contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

If we change this policy, we will update this page and the date above. Material changes to how we handle your data will be flagged to account holders by email.