Privacy Policy

1. Introduction

myGst.co.nz ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our GST tracking and receipt management service.

2. Information We Collect

2.1 Account Information

• Name and email address
• Business name and NZBN (if provided)
• GST registration number (if provided)
• Filing frequency preference

2.2 Receipt and Invoice Data

• Images and PDFs of receipts and invoices you upload
• Extracted data: supplier name, date, amount, GST amount
• Email content when you forward invoices to us

2.3 Usage Data

• Log data (IP address, browser type, pages visited)
• Device information
• Feature usage statistics

3. How We Use Your Information

We use your information to:

• Provide GST calculation and tracking services
• Extract data from receipts using OCR technology
• Generate reports and export files
• Send you GST reminders and account notifications
• Improve our services and develop new features
• Comply with legal obligations

4. Data Storage and Security

Your data is stored using industry-standard security measures:

• TLS encryption for data in transit
• Encrypted storage for data at rest
• Secure data centers
• Regular security audits and monitoring

Security Limitations: While we implement reasonable security measures, no internet-based service can guarantee absolute security. We cannot warrant that your data will always be secure or that unauthorized access will never occur. You transmit and store data at your own risk. We are not liable for any loss or damage arising from security breaches, except where prohibited by law.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Cloud hosting (Vercel, Neon), OCR processing (Google Gemini), file storage (Vercel Blob)
• Legal compliance: When required by law or to protect our rights
• With your consent: When you explicitly authorize sharing

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Export your data in CSV format
• Delete your account and data
• Withdraw consent for data processing

To exercise these rights, contact us at privacy@mygst.co.nz.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain it (e.g., tax records for 7 years as required by NZ law).

8. Cookies

We use essential cookies to maintain your session and preferences. We do not use tracking cookies for advertising purposes.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the app.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at: privacy@mygst.co.nz