Privacy Policy

PIXELMART LIMITED, trading as Warmbell ("Warmbell", "we", "us"), runs a platform that New Zealand businesses use to take bookings, payments and enquiries. We follow the Privacy Act 2020.

This policy covers personal information about:

• business owners and staff who use Warmbell;
• people who enquire about Warmbell, request a demo or sign up;
• visitors to our website.

It does not cover how a business handles information about its own customers. When you book with or buy from a business that uses Warmbell, that business is responsible for your information and we hold it on its behalf. Section 4 explains this, and you should contact the business directly about it.

• Account details: your name, email, phone number, business name and address, your role, and sign-in details such as your Google account or passkey.
• Billing details: your plan, invoices and payment history. Card details are handled by our payment provider; we see only limited details such as the card brand and last four digits.
• How you use Warmbell: actions in the admin, settings, AI credit usage, and support conversations.
• Technical information: IP address, browser and device type, and logs we need to keep the service secure and working.
• Signup records: when you agree to our terms, we record which version you agreed to, when, and from which IP address and browser.
• Enquiries and marketing: what you tell us when you contact us or request a demo, and whether you open our emails.

• to set up and run your account and provide the services;
• to bill you and manage your subscription;
• to give support and tell you about changes, outages and security issues;
• to keep Warmbell secure, prevent fraud and abuse, and keep records we need by law;
• to understand how Warmbell is used so we can improve it;
• to send you news and offers about Warmbell. You can unsubscribe at any time.

When a business uses Warmbell, it puts in information about its customers: names, contact details, bookings, payments, messages, and anything else it chooses to collect. For that information, the business decides what is collected and why. We store and process it on the business's behalf, to provide the services, and we don't use it for our own purposes.

If you are a business using Warmbell, you are responsible for telling your customers how you handle their information and for having any consent you need. If one of your customers asks us about their information, we will refer them to you and help you respond.

We share personal information only as needed to run Warmbell, with providers that work for us:

• Amazon Web Services: hosting and storage;
• Google Firebase: sign-in and account security;
• Stripe: payments and billing;
• Twilio: phone calls and text messages;
• Our email provider: sending account and notification emails;
• AI model providers: powering the AI features you switch on.

We may also share information with professional advisers, with a buyer if Warmbell is sold, or where the law requires it. We don't sell personal information.

Our main hosting is in Australia (Sydney). Some providers listed above process information in other countries, including the United States. When information goes overseas, we take reasonable steps to make sure it is protected in a way comparable to New Zealand law, as required by information privacy principle 12.

We use encryption in transit, access controls, separation between each business's data, multi-factor sign-in options, and monitoring. No system is completely secure, so if a privacy breach is likely to cause serious harm, we will tell the people affected and the Privacy Commissioner, as the law requires.

We keep account information while your account is open. When it closes, we keep it for 90 days so you can export it or come back, then delete it. Some records, such as invoices and tax records, we keep for longer when the law requires it, usually seven years.

Our website and apps use cookies and similar storage to keep you signed in, remember your settings and keep the service secure. If we use analytics or marketing cookies, we'll say so here. You can block cookies in your browser, but parts of Warmbell may not work without them.

You can ask for a copy of the personal information we hold about you, and ask us to correct it, under information privacy principles 6 and 7. Email us at [privacy@warmbell.co]. We will respond within 20 working days. Much of your account information you can also see and change yourself in the admin.

If you have a concern about how we handle your information, please contact us first at [privacy@warmbell.co] and we'll try to put it right. If you're not satisfied, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

We may update this policy. We'll change the date at the top, and tell account owners about significant changes by email or in the admin.

Privacy Officer, PIXELMART LIMITED, trading as Warmbell

[registered address]

[privacy@warmbell.co]