Nozl is job management software for exterior cleaning businesses. This policy explains what personal information we collect, why, who we share it with, how we protect it, and how you can see or correct it. It follows New Zealand's Privacy Act 2020.
Questions or requests: privacy@nozl.co.nz.
Two kinds of information
About the businesses that use Nozl, and their people. When a business signs up, we hold its details and the details of the people it adds (owners, office staff and crews). We're responsible for this information.
That a business keeps in Nozl about its own customers. A cleaning business uses Nozl to keep its customers' names, addresses, phone numbers, emails, quotes, jobs, photos, invoices and payments. We hold and process this on the business's behalf, and only to run Nozl for it. The business decides what it collects and is responsible for it. If you're a customer of a business that uses Nozl, please contact that business first about your information; we'll help them answer you.
What we collect
- Account details: names, email addresses, mobile numbers, roles, and the business's name, address, NZBN, GST number, logo and bank account (for printing on its invoices).
- What a business puts into Nozl: its customers, properties, quotes, jobs, notes, photos and files, invoices, payments, messages, door-knocking records, timesheets, staff records, equipment and incident reports.
- Location, only when it's used: a phone's position when someone clocks on or off, drops a door-knocking pin, adds a job photo or reports an incident. We don't track anyone's location in between.
- Payments: card payments are taken by Stripe. Card numbers go straight to Stripe and never reach Nozl; we keep the amount, date and Stripe's reference.
- Support: support tickets, chat messages and feature requests sent to us.
- How Nozl is used: sign-in times, the device and browser, and records of changes (for example who sent an invoice or changed a permission), which keep the service secure and let businesses see who did what.
- Customer pages: when a customer opens a quote or invoice link, or signs in to a business's customer portal, we record that it was opened, and the sign-in's time, IP address and browser.
How we use it
- To run Nozl: show each business its own information, send the emails and texts it asks us to, take payments and keep records.
- To bill businesses for their plan, and to answer support requests.
- To keep Nozl secure, prevent misuse and fix problems.
- To tell businesses about changes to Nozl. We send marketing only to people who've agreed to it, and every such email has a way to stop.
We don't sell personal information, and we don't use a business's customer information for anything but providing Nozl to that business.
Who we share it with
We use trusted service providers to run Nozl. They may only use the information to provide their service to us.
- Supabase: our database, sign-in and file storage, in Sydney, Australia.
- Vercel: hosts the Nozl website and app, run from Sydney.
- Stripe: card payments to businesses, and businesses' payments to us.
- Resend: sends Nozl's emails.
- Google: maps, address search and directions.
- Services a business chooses to connect: Xero (accounting), ClickSend (text messages), PayHero (payroll) and its own Stripe account. Information goes to these only when the business connects them, and their own privacy policies apply.
Some of these providers store or process information outside New Zealand, mostly in Australia and the United States. We choose providers that protect information to standards comparable to New Zealand's. We'll also disclose information if the law requires it.
How we protect it
Each business's information is kept apart from every other business's, connections are encrypted, and access within a business follows the roles and permissions it sets. Read more on our security page.
Cookies
Nozl uses cookies only to keep you signed in and to remember your choices on that device, such as which columns a list shows. We don't use advertising cookies or tracking from other companies.
How long we keep it
We keep a business's information while it uses Nozl. When a business closes its account, it can download its information, and we delete it within 90 days of being asked, except for records the law requires us to keep, such as financial records (kept for seven years). Backups are kept for a short time and then replaced.
Seeing and correcting your information
You can ask to see the personal information we hold about you, and ask us to correct it. Most of it you can change yourself in Nozl. Otherwise email privacy@nozl.co.nz and we'll respond within 20 working days. If your information is held by a business that uses Nozl, we'll pass your request to that business.
If something goes wrong
If a privacy breach is likely to cause serious harm, we'll tell the people and businesses affected and the Privacy Commissioner as soon as we can, as the Privacy Act requires.
Complaints
If you're unhappy with how we've handled your information, please tell us first at privacy@nozl.co.nz. If we can't sort it out, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Changes
We may update this policy as Nozl changes. We'll change the date at the top, and tell businesses by email about anything important. General questions: hello@nozl.co.nz.