How plan information is handled

Information collected

Plan information may include sensitive disability, health, support, funding, goal, location and contact information. Only information reasonably needed to produce provider-matching signals should be entered.

Purpose

Information is processed to identify service needs, location preferences and other matching signals, and to help the user search for potentially suitable NDIS providers. The platform does not determine NDIS eligibility or provide clinical advice.

Data minimisation and storage

• The full pasted plan text is not stored in the plan-match database record.
• A cryptographic hash and limited extracted matching signals may be stored.
• Plan-match records receive a retention date and are scheduled for deletion or de-identification after the configured retention period.
• Users can directly delete individual plan-match records from the participant workspace.

Optional AI-assisted analysis

AI-assisted analysis is optional and requires separate consent. When enabled, the platform sends minimised extracted signals rather than the full plan text to the configured AI service. AI processing should not be enabled unless the participant has reviewed and accepted this disclosure.

Consent and choices

Consent must be affirmative and can be withdrawn from the participant workspace. Withdrawal stops new plan processing under the withdrawn consent. A deletion request may also be submitted for broader account information.

Access, correction and deletion

Use the Privacy Requests form in the participant workspace to request access, correction, deletion or withdrawal of consent. Each request receives a reference and target response date.

Important limitation

This notice describes the platform controls implemented for plan matching. The operator must insert its legal entity name, contact details, complaint pathway, overseas disclosure details and complete privacy policy before public launch.