Privacy Policy

Last updated: 28 August 2026, Effective: 28 August 2026

In this Privacy Policy, “us”, “we”, “our” or Sazoom means Sazoom Pty Ltd (ACN 665 977 524) and our related bodies corporate.

We value and respect your privacy and are committed to protecting your personal information in accordance with applicable privacy laws, including the Australian Privacy Act 1988 (Cth), the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and other relevant regulations. Our Privacy Policy (Policy) describes how we collect, use, store and disclose your personal information.

This policy applies across all our websites and all services we provide (collectively our Services).

By providing personal information to us, you consent to our collection, use and disclosure of your personal information in accordance with this Privacy Policy and any other arrangements that apply between us. We may change this Privacy Policy from time to time by publishing changes to it on our website. We encourage you to check our website periodically to ensure that you are aware of our current Privacy Policy.

Personal information includes information or an opinion about an individual that is reasonably identifiable. For example, this may include your name, age, gender, postcode and contact details. It may also include financial information, including your credit card information.

This Privacy Policy concerns the handling of personal information. In providing our Services, we may also process business, financial, accounting and transactional data that does not constitute personal information. Our handling of that other business data is governed by our Terms and Conditions and any other applicable customer agreement. Where business or accounting data contains personal information, this Privacy Policy applies to that personal information.

1. What personal information do we collect?

We may collect the following types of personal information:

Account and contact details (e.g., name, email, address, phone, account password).
Business information (e.g., industry, size, business type).
User information (eg job title, role and date of birth).
Payment information (e.g., card details, billing info).
Financial and business data for processing, dashboards, modelling.
Transaction data between you, third parties, and us.
Communications with us (e.g., support requests, surveys).
Usage data (e.g., pages visited, features used, time on page).
Device and connection data (e.g., IP address, device type, geo-location).
Products and services you’ve purchased or enquired about.
Information you provide directly or indirectly via our platform.
any other personal information that may be required in order to facilitate your dealings with us.

2. How do we collect personal information

We collect personal information:

When you register or use our services.
Through your communications with us (email, chat, calls).
When you authorise third-party integrations (e.g., Xero).
Via cookies, analytics tools, and similar technologies.
When you enquire as to a potential purchase from our business.
When you input information directly into our platform.
From third parties you authorise to share your data with us.

In addition, when you apply for a job or position with us we may collect certain information from you (including your name, contact details, work history and relevant records checks) from any recruitment consultant, your previous employers and others who may be able to provide information to us to assist in our decision on whether or not to make you an offer of employment or engage you under a contract. This Privacy Policy does not apply to acts and practices in relation to employee records of our current and former employees, which are exempt from the Privacy Act.

3. Personal Information from Third Parties

We may obtain personal information from third parties and services that you choose to connect to our platform.

For example, if you use a third-party authentication service such as Google, Microsoft or Xero, we may receive information necessary to authenticate you and establish your account.

Where you authorise our platform to connect to a third-party business or accounting service, such as Xero, we may receive personal information contained in the data that you have authorised that service to make available to us. Depending on the service, the permissions you grant and the features you use, this may include account or profile information and personal information contained in contacts, invoices, transactions, payment records or other business records.

We use this information to provide, operate, support and secure the connected features of our Services and for the other purposes described in this Privacy Policy. Some features may also send personal information or business data back to a connected service where you instruct or authorise us to perform an action through that service.

The specific information available to us depends on the connected service, the permissions authorised by you and the features you choose to use. We do not necessarily access all information available through a connected service. We may use the information from third party services or combine them with other information we collect or generate through our services, to provide services to you.

The third-party service’s handling of information remains subject to its own terms, data policy, privacy practices as well as your account and privacy settings. Personal information received and held by us is handled in accordance with this Privacy Policy.

4. Why do we collect, use and disclose personal information?

We may collect, hold, use and disclose your personal information to:

operate, maintain and improve our Services and applications;
provide technical support and resolve technical issues;
send service, security and account-related communications;
detect and prevent fraud, misuse or malicious activity;
provide marketing in accordance with applicable law and your marketing preferences;
conduct surveys, research and analysis;
comply with legal and regulatory obligations;
produce anonymised analytics and benchmarks; and
process employment applications.

We may also disclose personal information to a trusted third party that holds other information about you where permitted by law. That information may be combined to help us understand customer preferences and interests, personalise experiences, develop anonymised consumer insights and enhance products and services.

We do not use or disclose business accounting data obtained from Xero or another connected accounting service for third-party consumer profiling, targeted advertising or unrelated third-party marketing.

5. Direct marketing

We and our trusted marketing partners may send you communications about our products, services, events and, where permitted by law, relevant partner products or services.

We may use personal information such as your contact details, account information, website activity and marketing preferences to market our products and services and, where permitted by law, relevant partner products, services or events. You can opt out of direct marketing at any time.

We do not use business accounting data obtained from a connected accounting service such as Xero for targeted advertising or third-party marketing.

6. Who we disclose your information to

We may disclose personal information for the purposes described in this privacy policy to:

our employees and related bodies corporate to enable them to maintain the platform, deliver services to you, diagnose and fix technical issues, provide you with technical support, to assess your employment application and for administrative and compliance purposes.
third party suppliers and service providers where reasonably necessary to provide, maintain, secure or improve our Services. These providers may include cloud hosting and infrastructure providers, database providers, document and OCR processing providers, artificial-intelligence and machine-learning service providers, communications and analytics providers, and payment-processing providers.
our professional advisors, including legal, accounting, audit and compliance advisors, where reasonably necessary to obtain professional services or meet our administrative, legal and compliance obligations
payment processors and payment service providers where reasonably necessary to process subscription or other payments.
our existing or potential agents or business partners to help us deliver and improve services to you.
our marketing providers where you consent to receive marketing materials from our marketing partners to provide marketing information and offers that may be of interest to you.
our sponsors or promoters of any competition we conduct via our services that you enter and agree to provide information for that competition;
anyone to whom our assets or businesses (or any part of them) are transferred to enable them to continue to operate and maintain the service after the transfer;
specific third parties authorised by you to receive information held by us; and/or
other persons, including government agencies, regulatory bodies and law enforcement agencies, courts or other third parties or as required, authorised or permitted by law.

Key technology providers currently used by us include providers such as Amazon Web Services, Supabase and OpenAI. The particular providers used may change from time to time as our technology and Services evolve.

Where a third party processes customer information on our behalf, we take reasonable steps to ensure that its access is limited to a legitimate business purpose and is subject to appropriate confidentiality, privacy and security protections.

7. Artificial Intelligence

Some features of our Services use artificial intelligence, machine learning or automated processing technologies.

To provide those features, we may use external technology and infrastructure providers, including providers such as Amazon Web Services and OpenAI. When you choose to use an AI-enabled feature, information reasonably necessary to perform the requested function may be transmitted to and processed by those providers. Depending on the feature, this may include your inputs, relevant business or financial information and the resulting outputs.

These providers process information for purposes such as providing the requested functionality, operating and securing their services, preventing abuse and complying with applicable legal obligations, subject to our arrangements with those providers.

We do not use personal or identifiable customer information, including personal information sourced through a Xero integration, to train external AI models.

Where an external provider temporarily retains information for security, abuse-prevention, support or legal-compliance purposes, that processing is subject to the applicable service configuration and contractual safeguards.

8. International data transfers

Some of the technology and service providers that support our Services are located outside Australia or may store or process personal information outside Australia.

We may disclose personal information to overseas service providers, or permit overseas service providers to access or process personal information on our behalf, where reasonably necessary to provide and support our Services.

Depending on the services and configurations used, countries in which overseas recipients may be located, or in which processing may occur, currently include Singapore, the United States and New Zealand. These locations may change as our service providers and technology infrastructure change, and we will update this Policy where appropriate.

For transfers from the EEA or United Kingdom, we use appropriate transfer mechanisms where required, which may include the European Commission Standard Contractual Clauses or applicable UK transfer arrangements such as the UK International Data Transfer Agreement.

Further information about the locations in which our service providers process personal information is available by contacting privacy@sazoom.ai.

9. Cookies and tracking technologies

We use cookies and similar technologies to improve your experience, analyse usage, and remember preferences. You can disable cookies in your browser, but some features may not work as intended.

Where required by applicable law, we will request your consent before placing non-essential cookies.

10. Retention and deletion

We retain personal information for as long as necessary to provide services and comply with legal obligations. In most cases, this means that we will only retain your personal information for as long as you are a registered user with us and you are an active user of our services, unless we are required to retain your personal information to comply with applicable laws, for example record-keeping obligations. If you unsubscribe from our services, we will keep your personal data for a period of time afterwards where we have an ongoing business need to retain it. Where there has been no active activity on your registered account after this period, we will cancel your Sazoom account and delete your personal information.

We may also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our services, or we are legally obligated to retain this data for longer time periods.

You may request deletion of your account and personal information at any time by contacting privacy@sazoom.ai.

11. Security

We are committed to protecting the personal information of our users.

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These measures may include physical, administrative, personnel and technical safeguards appropriate to the nature of the information and the risks involved.

No method of electronic transmission or storage is completely secure and we cannot guarantee absolute security. We nevertheless maintain safeguards designed to protect personal information and periodically review those safeguards as our Services and technology evolve.

12. Links to other sites

Our website may contain links to websites operated by third parties. Those links are provided for convenience and may not remain current or be maintained. Unless expressly stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites, and have no control over or rights in those linked websites. The privacy policies that apply to those other websites may differ substantially from our Privacy Policy, so we encourage individuals to read them before using those websites.

13. Accessing or correcting your personal informatio

You can request access to or correction of your personal information by contacting us. Sometimes, we may not be able to provide you with access to all of your personal information and, where this is the case, we will tell you why. We may also need to verify your identity when you request your personal information.

14. Making a complaint

If you wish to make a complaint about how we handle your personal information, you can contact us at privacy@sazoom.ai. Please include your name, email address, user identification and/or telephone number and clearly describe your complaint.

We will acknowledge, investigate and respond within a reasonable time, or within the period required by applicable law.

If you are not satisfied with our response, you may have the right to make a complaint to the Office of the Australian Information Commissioner or another applicable privacy or data-protection authority.

15. Additional rights for EU/UK residents (GDPR)

If you are in the EEA or UK, you have rights to:

Access your personal data.
Rectify inaccurate data.
Erase your data (“right to be forgotten”).
Restrict processing.
Object to processing (including marketing).
Data portability.
Withdraw consent at any time.

To exercise these rights, please email privacy@sazoom.ai.

16. Legal basis for processing (GDPR)

We process your personal data based on:

Performance of a contract.
Legitimate interests (e.g., service improvement, security).
Legal obligations.
Consent (where applicable).

17. Additional rights for California residents (CCPA/CPRA)

If you are a California resident, you have rights to:

Know what personal information we collect, use, disclose, and sell/share.
Request deletion of personal information.
Request correction of inaccurate information.
Opt out of sale/sharing of personal information.
Non-discrimination for exercising your rights.

We do not sell personal information for money but may share it for targeted advertising.

You can opt out by emailing privacy@sazoom.ai.

18. Automated decision-making

We may use automated processes, including algorithms and AI-enabled systems, to generate financial insights, classifications, alerts and suggested actions.

These processes are intended to support user decision-making and are not used by us to make decisions that have legal or similarly significant effects on individuals.

If the nature of our automated processing changes so that additional disclosure is required under applicable privacy law, we will update this Privacy Policy accordingly.

19. Children’s privacy

Our services are not intended for individuals under 18. We do not knowingly collect their data.

20. Exercising your rights

To exercise privacy rights under applicable laws, contact:

We will acknowledge your request within 10 days (California) and respond within legal timeframes (usually 30–45 days).

21. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, technology, legal requirements or information-handling practices.

We will publish the updated Privacy Policy on our website and update the “Last updated” date at the beginning of the Policy.

Where a change is material, we may also notify you by email, through the Service or by another appropriate means. Where applicable law requires additional notice, we will provide that notice.

Changes take effect on the effective date stated in the updated Privacy Policy.

22. Contact us

For further information about our Privacy Policy or practices, or to access or correct your personal information, or make a complaint, please contact us using the details set out below:

Privacy Officer

Email: privacy@sazoom.ai

Privacy & Data Protection
Your privacy matters to us. Sazoom uses bank-grade security and stores data on secure AWS servers. We comply with Australian Privacy Law, GDPR (EU/UK) and CCPA (California). You control your data — access it, update it, or request deletion anytime. No selling of personal info, ever.
Read our full Privacy Policy