Legal

Privacy Policy

Last updated 1 June 2026 · automate.business Limited, an nzwe venture

This policy explains what information automate.business collects, how we use it, and the choices you and your clients have. We handle personal information in line with the New Zealand Privacy Act 2020.

1. Who we are

automate.business is a product of automate.business Limited (“we”, “us”), a New Zealand company and an nzwe venture. We provide AI-assisted compliance software to accounting and bookkeeping firms (“firms”). Firms use our product to prepare and file returns for their clients (“end clients”).

2. Information we collect

  • Account information: names, work emails, roles and firm details provided when a firm signs up.
  • Ledger & financial data: transactions, chart of accounts, GST settings and bank feed data, accessed read-only from connected systems such as Xero and MYOB.
  • Usage data: actions taken in the product, recorded to the audit trail and to improve the service.

3. How we use information

We use information to prepare returns and reports, surface exceptions for human review, maintain the audit trail, provide support, and improve accuracy.

We do not use your or your clients’ data to train shared or third-party models. Learning that improves accuracy stays within your firm’s workspace.

4. Read-only access

Our connection to your accounting systems is strictly read-only. We never edit, post, or delete anything in your books. No return is lodged with Inland Revenue without an authorised person’s explicit approval.

5. Storage, location & security

Data is encrypted in transit (TLS) and at rest (AES-256), and hosted in New Zealand. Enterprise customers can arrange custom data residency and retention. We apply access controls, two-factor authentication, and audit logging across the service.

6. Sharing & sub-processors

We share data only with sub-processors necessary to run the service (such as hosting and email providers), under contract and only as needed. A current list of sub-processors is available on request. We do not sell personal information.

7. Retention

We retain data for as long as your firm maintains its account and as required to meet legal and tax record-keeping obligations. You can request export or deletion subject to those obligations.

8. Your rights

You may access, correct, or request deletion of personal information we hold about you, and ask how it is handled. End clients should direct requests to their firm in the first instance; we assist firms in responding.

9. Changes to this policy

We may update this policy from time to time. Material changes will be notified to firm account owners. The “last updated” date above reflects the current version.

Questions about privacy? Email privacy@automate.business. Our team is based in New Zealand.