Privacy Policy

Last updated 31 October 2026

This policy explains what personal information JZ Business Manager ("JZ", "we", "us") collects through JZ Business Manager, how we use it, and your choices. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1. Two kinds of information

  • About you as a JZ user: the details of the people who sign up and sign in. We decide how this is used, and this policy covers it.
  • Your business's records: customers, suppliers, invoices, expenses and receipts that a business puts into JZ. We hold these for that business and use them only to run JZ for it. The business is responsible for telling its own customers how it handles their details.

2. What we collect

  • Account details: your name, user name, email address and password. Passwords are stored only as a secure hash, so nobody at JZ can read them.
  • Google sign-in: if you sign in with Google, we receive your name, email address and profile picture from Google.
  • Business details: business name, ABN, address, phone, email and the bank details you choose to show on invoices.
  • Business records: everything you enter or upload, including customer details, invoices, payments, products, expenses and receipt images.
  • Sign-in records: the user name tried, the time, whether it worked, your IP address and browser type. We use these to protect accounts and keep them for about 90 days.
  • Payments: the amount, date and PayPal order number of plan payments. Card and bank details entered at PayPal go to PayPal, not to us.
  • Usage: how many receipt scans and Business Analyser runs a business has used each month, and their estimated cost.

3. How we use it

  • to provide JZ: sign you in, store your records, make invoices, reports and PDFs;
  • to run the AI features you choose to use;
  • to manage your plan, take payments and send receipts;
  • to keep JZ secure, stop misuse and fix problems;
  • to contact you about your account, your plan or important changes.

We don't sell personal information, and we don't use it for advertising.

4. Who we share it with

We share information only with the services JZ needs to work, and only what each one needs:

  • Anthropic (Claude AI): receipt images when you scan a receipt, and a summary of your figures when you run the Business Analyser. The Analyser summary includes customer and product names, but never customer emails, phone numbers, addresses or ABNs.
  • PayPal: to take plan payments.
  • Google: only if you choose to sign in with Google.
  • Our hosting provider: which stores JZ's database and files on our behalf.
  • Government or police: only when the law requires it.

Anthropic, PayPal and Google may store or process information outside Australia, including in the United States. We use these providers because JZ's features need them, and each has its own privacy obligations.

5. Cookies

JZ uses only the cookies it needs to work: a sign-in cookie that keeps you signed in (for up to 24 hours) and security cookies that protect forms. We don't use advertising or tracking cookies. Some page styles and scripts are loaded from public content networks (such as jsDelivr and Cloudflare), which can see your IP address when your browser fetches them.

6. How we protect it

  • JZ is only served over secure HTTPS connections.
  • Each business can see only its own records, and this is checked on every request.
  • Uploaded receipts are not stored in a public web folder and can only be opened by signed-in users of that business.
  • Only a small number of platform administrators can open a business's records, and only to give support, fix problems or check that the Terms of Use are followed.

7. How long we keep it

We keep your account and records while your business uses JZ, and for at least 12 months after your plan ends (see the Terms of Use), unless you ask us to delete them sooner. Sign-in records are kept for about 90 days. Some payment records may need to be kept longer for tax law.

8. Seeing, correcting and deleting your information

You can see and correct most of your information yourself in JZ, and a business owner can export the business's data. You can also ask us for a copy of the personal information we hold about you, to correct it, or to delete your account. We will reply within 30 days. If we can't do what you ask, for example because the law requires us to keep a record, we will tell you why.

9. Data breaches

If a data breach is likely to cause serious harm, we will tell the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

10. Questions and complaints

To ask a question or make a privacy complaint, contact JZ support. We will reply within 30 days. If you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

11. Changes to this policy

We may update this policy. For important changes we will tell you in JZ before they start. The date at the top shows when it last changed.