Privacy Policy

Account Information:

• Name
• Email address
• Business name
• Phone number
• Billing address
• Password (encrypted)

Payment Information:

• Credit card details (processed by our payment provider)
• Billing history
• ABN (for invoicing)

Business Data:

• Customer and supplier information you enter into the Service
• Product and inventory data
• Order and transaction records
• Notes and communications stored in the Service

Technical Information:

• IP address
• Browser type and version
• Device type and operating system
• Time zone and location (general)

Usage Information:

• Pages visited and features used
• Time spent on the Service
• Clickstream data
• Error logs and diagnostic data

Cookies and Similar Technologies:

• Session cookies (essential for Service operation)
• Analytics cookies (to understand Service usage)
• Preference cookies (to remember your settings)

See our Cookie Policy for more information.

3.1 To Provide the Service

• Creating and managing your account
• Processing transactions and payments
• Delivering the features and functionality you request
• Syncing data with third-party integrations you authorise

3.2 To Communicate with You

• Responding to your enquiries and support requests
• Sending service-related notifications (outages, updates, security alerts)
• Providing onboarding and training assistance

3.3 To Improve the Service

• Analysing usage patterns to improve features
• Identifying and fixing technical issues
• Developing new features and functionality

3.4 For Billing and Administration

• Processing subscription payments
• Sending invoices and payment reminders
• Managing account status

3.5 For Marketing (with Your Consent)

• Sending product updates and newsletters
• Informing you about new features or services
• Sharing relevant industry content

You can opt out of marketing communications at any time (see Section 7).

3.6 For Legal and Safety Purposes

• Complying with legal obligations
• Protecting our rights and property
• Preventing fraud and abuse
• Responding to legal requests

5.1 Service Providers

We engage trusted third parties to help operate our Service, including:

• Cloud hosting providers (for data storage)
• Payment processors (for billing)
• Email service providers (for communications)
• Analytics providers (for usage insights)
• Customer support tools

These providers are contractually bound to protect your information and use it only for the purposes we specify.

5.2 Third-Party Integrations

When you connect third-party services (such as Shopify, Amazon, Xero), we share data as necessary to enable the integration. Your use of third-party services is subject to their privacy policies.

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

5.4 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Klarr, our users, or the public.

5.5 With Your Consent

We may share your information for other purposes with your explicit consent.

6.1 Data Location

Your data is stored on secure servers. We ensure appropriate safeguards are in place for all data storage locations.

6.2 Security Measures

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication requirements
• Regular security assessments and monitoring
• Employee training on data protection

6.3 Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account termination:

• Account and business data: Retained for 30 days for export, then deleted
• Billing records: Retained for 7 years to comply with tax obligations
• Anonymised usage data: May be retained indefinitely for analytics

6.4 Data Breach Response

In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

Access Your Information

You may request access to the personal information we hold about you. We will respond to access requests within a reasonable timeframe (usually 30 days).

Correct Your Information

You may request correction of any personal information that is inaccurate, incomplete, out-of-date, or misleading.

Delete Your Information

You may request deletion of your personal information, subject to our legal obligations to retain certain records.

Data Portability

You may export your data using our built-in export features at any time.

Opt Out of Marketing

You can opt out of marketing communications by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your communication preferences in your account settings
• Contacting us directly