Privacy policy

What we collect depends on how you use our services. It may include:

• contact and account details, such as your name, email address, phone number, business details and sign-in details;
• information you or your organisation enter into our services, such as client, booking, plan, invoice and payment records;
• documents you upload or send to us, and the information in them;
• photos, videos, profile details, measurements, style preferences, products and generated content you choose to create, upload or save in services such as Lushie;
• information about how you use our services, such as your IP address, device and browser, device and notification identifiers, pages viewed, actions taken and diagnostic logs;
• messages you send us, such as support requests.

Some of our services are used by organisations that support people with disability, so information entered into them may include sensitive information, such as health or disability information. We collect sensitive information only with consent or where the law allows it.

We collect personal information:

• from you, for example when you create an account, use our services or contact us;
• from your organisation, when it uses our services and adds you to them;
• from accounts and services you choose to connect, such as Google, Microsoft or accounting software;
• from public sources, such as public registers;
• automatically, through cookies and similar technologies.

When an organisation uses our services to manage information about its own clients, staff or contacts, that organisation decides what information it puts into our services and how it uses it, and has its own privacy practices. We handle the information on its behalf to provide our services. If an organisation that uses Zespy holds your information, please contact that organisation first.

We use personal information to:

• provide, operate, maintain and support our services;
• verify identity, keep accounts secure, and prevent fraud and misuse;
• process transactions and send messages about our services;
• understand how our services are used, and improve and develop them;
• tell you about our products and services (you can opt out at any time);
• meet our legal obligations and resolve disputes.

We do not sell personal information.

Some of our services use computer programs, including artificial intelligence, to make or help make decisions, for example when reading documents or checking invoices and claims. These programs may use the kinds of information described in this policy, such as invoice, plan, claim and payment details.

If you sign in with, or connect, an account from a provider such as Google or Microsoft, we receive the information that you allow the provider to share with us. This may be your name, email address and profile picture, or the information needed for a feature you turn on. We use it to sign you in, to set up and run your account, and to provide any feature you turn on. We store it with your other account information, and protect and keep it as described in this policy. We share it only as needed to provide the sign-in or feature, to keep our services secure, or where the law requires it. You can remove our access at any time in your account settings with the provider, and some of our services also let you disconnect an account directly.

Zespy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use information received from Google Workspace APIs to create, train or improve artificial intelligence or machine learning models.

We may disclose personal information to:

• service providers who help us run our services, such as hosting, sign-in, email, payment, analytics, artificial intelligence and support providers;
• services that you or your organisation choose to connect;
• your organisation, when you use our services through it;
• our professional advisers;
• a buyer or successor if all or part of our business is sold or restructured;
• government agencies, regulators and others where the law requires or allows it.

We expect our service providers to protect the personal information they handle for us.

Our services are mainly hosted in Australia. We are likely to disclose personal information to service providers that store or process it outside Australia, including in the United States, countries in the European Union, and other countries where they or their suppliers operate.

We and our service providers use cookies and similar technologies to keep you signed in, keep our services secure, remember your preferences and understand how our websites and services are used. You can control cookies in your browser settings, but some features may not work without them.

We hold personal information electronically, in our own systems and those of our service providers, such as cloud hosting providers. We take reasonable steps to protect it from misuse, interference and loss, and from unauthorised access, change or disclosure. If we have a data breach that is likely to cause serious harm, we will make the notifications the law requires.

We keep personal information for as long as we need it for the purposes in this policy, or as long as the law or our agreements with customers require. We then take reasonable steps to delete or de-identify it.

You can ask for access to the personal information we hold about you, or ask us to correct it. We may need to confirm your identity first. If we refuse a request, we will tell you why, unless it would be unreasonable to do so.

You can unsubscribe from marketing messages at any time. Where it is practical, you can deal with us without identifying yourself, although most of our services need to know who you are.

If you have a question or a complaint about how we handle personal information, contact us at support@zespy.ai. Please send your complaint in writing. We will look into it, may ask you for more information, and will reply within a reasonable time.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner.

We may update this policy from time to time. The current version is always on this page, with the date it was last updated.