Privacy Policy

We collect what you put into Arborly so the app can work. We don't sell it, we don't use it for advertising, and you can see, download, correct or delete it at any time.

This policy follows the Privacy Act 2020.

• About you and your business: your name, email, phone number, business name and address.
• About your crew: the names, emails and phone numbers you give us, their H&S sign-ons and the hours they log.
• About your clients: whatever you enter on a job, usually a name, address, phone number and email.
• Photos, videos and documents you upload.
• Basic technical information: when you sign in, your IP address when a sign-on is recorded, and error logs so we can fix things.

Payments go through Stripe, so we never see your card number.

When you enter a client's details, you're collecting them and we're storing them for you. It's up to you to tell your clients how you use their information, and to have their OK to take and store photos of their property.

We only use your clients' information to run the app for you. We never contact your clients, except to send the quotes and invoices you tell the app to send.

• To run Arborly for you and your crew.
• To send you emails about your account, like sign-in links, billing receipts and changes to these terms.
• To fix problems and make the app better. We look at how features are used, not what's inside your jobs.
• To meet our legal obligations.

Only the services that help run Arborly, and only what each one needs:

• Supabase: our database and file storage, hosted in Sydney, Australia.
• Vercel: runs the app, with servers in Sydney and elsewhere.
• Stripe: handles subscriptions and payments.
• Xero: only if you connect it, and only the quotes and invoices you send there.
• Resend and Twilio: send the emails and texts you ask the app to send.

Some of these services store information outside New Zealand. We choose providers that protect it to standards comparable to New Zealand's privacy law.

We'll share information if the law requires us to. We'll never sell it.

For as long as your account is open. If you close it, everything is deleted 30 days later. The gap is there in case you change your mind.

We keep a record of when you agreed to our terms, and billing records needed for tax, for as long as the law requires.

Your data is encrypted in transit and at rest, and each business can only ever see its own. Crew logins only see the jobs they're on, and never prices.

If there's a privacy breach likely to cause serious harm, we'll tell you and the Privacy Commissioner as soon as we can.

You can ask to see or correct any personal information we hold about you. Most of it you can view and change in the app yourself.

Owners can download all of their business's data from Settings → Download my data, and delete the account from Settings → Delete my account.

Crew members can ask the business they work for, or email us directly.

If you're not happy with how we've handled your information, tell us first. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz.

If we change this policy, we'll update the date at the top and ask you to review it next time you open the app.