Privacy Policy

This Privacy Policy explains how ANOOKZ LIMITED (“Anookz”, “we”, “us”), a New Zealand company, collects, uses, shares and protects information when you use our website and services (the “Services”). It is written to be read, not to hide behind. If anything is unclear, email privacy@anookz.com.

Anookz is a business tool. Most of what we hold is business data belonging to the shop or supplier using it. Where we handle personal information about your customers, we do that as your processor and on your instructions — those terms are in our Data Processing Addendum, and this policy covers our own handling of personal information.

Information we collect

• Account information — name, email, business name and role when you sign up.
• Business data you connect — sales, products, stock, foot-traffic and location data from tools you link, such as Lightspeed, Bellwether, Airtable, Shopify and Deputy.
• Usage data — how you interact with the Services, for reliability, support and improvement.
• Device and log data — IP address, browser and error diagnostics, used to keep the Services working and secure.
• Payment data — handled by Stripe. We hold the last four digits and the card brand for display; we never hold full card numbers.
• Support and sales contact — what you send us when you book a demo or ask for help.

How we use information

• To provide and operate the Services — the floor map, ordering, point of sale, analytics and AI features.
• To connect you with the suppliers or retailers you choose to connect with.
• To take payment, run subscriptions and account for platform fees.
• To keep the Services secure and reliable, prevent abuse, and investigate incidents.
• To communicate with you about your account, changes, security and support.
• To send product and marketing email, where you have opted in. Every marketing email has an unsubscribe link; account, billing and security messages are not marketing and continue regardless.

We do not sell personal information, we do not use it for advertising, and we do not use it or your business data to train AI models.

Google user data

If you connect a Google account so Anookz can read supplier invoices and order confirmations from your inbox, we request read-only Gmail access. We read only messages relevant to that feature, and extract order, tracking, freight and invoice details onto your own records. We do not read, store or index the rest of your mailbox, and you can disconnect at any time in your account settings or from your Google account permissions.

Anookz’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use Google user data for advertising, we do not sell it, we do not transfer it except as needed to provide the feature you enabled or where required by law, and we do not allow humans to read it except with your explicit consent, to resolve a support issue you have raised, for security purposes, or where required by law.

Cameras, foot traffic and people in store

Where a store connects an in-store sensor or camera analytics provider such as Bellwether, Anookz receives counts and movement statistics — how many people entered, when, and how they moved between zones. We do not receive or store video, photographs, faces or biometric templates, and we do not identify individual shoppers.

Where a camera or sensor is installed in a store, the store is responsible for its lawful use, including any signage or notice its customers and staff are entitled to, and for its agreement with the provider.

Staff information

Where a store connects rostering, or uses the point of sale, the Services hold information about staff — names, rosters, shifts, and which staff member processed a sale. Some views, such as trading rhythm by hour, therefore show individual performance.

The employer is the controller of that information. If you are the employer, you are responsible for telling your staff what is collected and how it is used, and for using it fairly. Anookz provides the access controls to limit who inside your business can see it.

Your data is yours

The business data you bring or connect remains yours. We act as the system that connects and presents it. You can export your data, and you can leave with it. After you cancel, your data stays exportable for 30 days and is deleted within 90 days after that, other than records we must keep for tax and accounting or that belong jointly to a counterparty, which are retained and de-identified. Details are in the Data Processing Addendum.

What connected parties can see

When you connect a supplier, they can see sell-through for their own products in your store — never your total sales, your margins, or other suppliers’ performance. You control which parties are connected and can disconnect them at any time.

Some features work by producing a link that anyone holding it can open — a hosted order page, an invoice, a picking list, a connect code. Where a passcode or expiry is offered, using it is your choice. Choosing who receives a link is yours.

Sharing and service providers

We share information only with service providers who help us run the Services — cloud hosting, database, authentication, email delivery, error monitoring, AI providers, courier and payment processing — under agreements that protect it, or where required by law or to protect rights and safety. The full, dated list is on our sub-processors page, and we give 30 days’ notice before adding one that can access personal data. We do not sell your data.

If Anookz is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction. We would tell you before it became subject to a different privacy policy.

Cookies and similar technologies

We use a small number of cookies and similar technologies: strictly necessary ones that keep you signed in and protect against fraud and automated abuse, and functional ones that remember preferences such as your theme and reduced-motion setting. We do not use advertising cookies and we do not run cross-site tracking. Our Cookie Notice lists them by category.

Where your information is held

Anookz is operated from New Zealand and hosted in the United States. Our service providers are listed on the sub-processors page with the country each operates from. Where we transfer personal information overseas, we do so subject to comparable safeguards, as required by the Privacy Act 2020.

Security and retention

We protect data with encryption in transit and at rest, scoped access controls per account and per store, and reputable cloud infrastructure. Integration credentials are additionally sealed before storage and are never returned to a browser. Our security page sets out the controls in detail, including what has and has not been independently certified.

We retain information for as long as your account is active or as needed to provide the Services, and delete it on request in line with applicable law.

To keep your account secure we log sign-in activity — the time, a coarse device description and the IP address of each sign-in and failed attempt. This is what powers the “signed-in devices” and “recent security activity” views in your account. IP addresses on these security logs are removed after about 90 days; the event and its time are kept up to a year so you can review your history.

If a privacy breach occurs that has caused or is likely to cause serious harm, we will notify those affected and the Office of the Privacy Commissioner, as required by the Privacy Act 2020.

Children

The Services are for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16 through the Services.

Your rights

You have the right to ask for access to the personal information we hold about you and to ask us to correct it. Depending on where you live, you may also have rights to export, restrict or delete it, and to object to certain processing. To exercise them, contact privacy@anookz.com and we will respond within 20 working days.

If you are unhappy with our response, you can complain to the Office of the Privacy Commissioner in New Zealand, or to your local supervisory authority.

If you are one of a merchant’s customers rather than an Anookz account holder, your request is usually for that merchant to answer, since they decide what happens to your information. Send it to them; if you send it to us, we will pass it on and help.

Changes

We may update this policy as the Services evolve. We will post the new version here and update the date above. Where a change materially affects how we handle personal information, we will notify account holders at least 30 days before it takes effect.

Contact

Privacy Officer: TODO_PRIVACY_OFFICER
ANOOKZ LIMITED · NZBN TODO_NZBN · TODO_REGISTERED_OFFICE, Queenstown, New Zealand
privacy@anookz.com