Privacy policy

1. Introduction

ENDLESS MARTECH LIMITED ("we," "us," or "our") operates Praiseworthy, a software-as-a-service platform that helps businesses generate customer feedback and monitor staff performance (the "Service").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service at app.praiseworthy.io. We are committed to compliance with the Privacy Act 2020 (New Zealand) and, for our Australian customers, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information we collect

2.1 Information you provide

• Account information (name, email address, phone number, company name)
• Billing information (processed securely by our payment processor — we do not store full credit card details)
• Customer data you upload (names, contact details, visit history)
• Staff information (names, performance metrics)

2.2 Automatically collected information

• Usage data (features accessed, actions taken)
• Device and browser information
• IP addresses and location data
• Cookies and similar tracking technologies

2.3 Information from third parties

• Payment confirmation from our payment processor
• Email and SMS delivery data from our communication service providers

2.4 Information from connected job management systems

If you connect a third-party job management system such as ServiceM8, you authorise us to access the following data from your connected account, solely to provide the Service:

• Job records and job activity, to identify completed jobs and the staff member who performed the work
• Job and customer contact details, to send feedback requests to the correct recipient
• Customer and company records, used as a fallback when job-level contact details are unavailable
• Staff records, to attribute feedback and performance to the correct team member
• Job notes, read only to detect customer opt-out tags (such as #dnc); note content is not otherwise stored or used
• Account information, to identify your account and configure the integration

We request read-only access, and only the minimum data required to operate the Service. You can revoke this access at any time by disconnecting the integration from within ServiceM8 or your Praiseworthy account. Data retrieved from connected integrations is handled, stored, and retained in accordance with sections 7 and 8 of this policy, and is never sold or shared except as described in section 5.

3. How we use your information

We use your information to:

• Provide, maintain, and improve the Service
• Process payments and send billing invoices
• Send customer feedback requests on your behalf via email and SMS
• Monitor and analyse usage trends
• Communicate with you about updates, security alerts, and support
• Comply with legal obligations

4. Legal basis for processing (Privacy Act 2020)

We process your information based on:

• Contractual necessity: To perform our obligations under the Terms of Service
• Consent: Where you have provided explicit consent
• Legitimate interests: To improve our Service and prevent fraud

5. Data sharing and disclosure

5.1 Service providers

We share data with trusted third-party providers who assist us in operating the Service:

• Payment processing: To handle subscriptions and billing
• Email delivery: To send review requests and notifications on your behalf
• SMS delivery: To send review requests via text message
• Cloud hosting: To store and process data securely

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.2 Business transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5.3 Legal requirements

We may disclose information if required by law or in response to valid legal requests (court orders, subpoenas).

5.4 No selling of data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Your customer data

6.1 You are the data controller

When you upload customer data to our Service, you act as the "Data Controller" and we act as the "Data Processor."

6.2 Your responsibilities

You warrant that you have:

• Obtained necessary consents from your customers under the Privacy Act 2020
• Complied with the Unsolicited Electronic Messages Act 2007 for SMS/email communications
• The legal right to share customer data with us

6.3 Customer rights requests

If your customers make privacy rights requests (access, correction, deletion), you are responsible for responding. We will assist you in fulfilling these requests where necessary.

7. Data security

7.1 Security measures

We implement industry-standard security practices:

• HTTPS/TLS encryption for data in transit
• Encryption at rest for sensitive personal information
• Regular security assessments
• Restricted access controls

7.2 Limitations

Whilst we strive to protect your information, no method of transmission over the Internet is 100% secure. You acknowledge that you transmit data at your own risk.

8. Data retention

We retain your information for as long as:

• Your account is active
• Necessary to provide the Service
• Required by law (e.g., tax records for 7 years)

When you cancel your account, we will delete or anonymise your data within 90 days, except where we must retain it for legal compliance.

9. Your privacy rights

Under the Privacy Act 2020 (New Zealand), and the Privacy Act 1988 (Cth) and Australian Privacy Principles for Australian customers, you have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal obligations)
• Portability: Request your data in a transferable format
• Objection: Object to certain processing activities

To exercise these rights, contact us at legal@praiseworthy.io.

10. International data transfers

Our Service is hosted on cloud infrastructure which may store data outside New Zealand. We ensure appropriate safeguards are in place when transferring data internationally.

11. Cookies and tracking

We use cookies and similar technologies to:

• Maintain your session
• Remember your preferences
• Analyse Service usage

You can control cookies through your browser settings, but this may limit Service functionality.

12. Children's privacy

Our Service is not intended for individuals under 18. We do not knowingly collect information from children.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before they take effect. Continued use after changes constitutes acceptance.

14. Contact us

For privacy-related questions or to exercise your rights:

ENDLESS MARTECH LIMITED
Email: support@praiseworthy.io

If you have concerns about our privacy practices, you may contact the Office of the Privacy Commissioner (New Zealand): privacy.org.nz. Australian customers may instead contact the Office of the Australian Information Commissioner: oaic.gov.au.