Privacy Policy
Shreem AI is the trading name of Rajat Pedhadia, a sole trader (ABN 83 771 682 937), based in India and serving businesses in Australia and New Zealand. This policy explains how we handle personal information. We follow the Australian Privacy Principles under the Privacy Act 1988 (Cth), the New Zealand Privacy Act 2020, and India's Digital Personal Data Protection Act 2023 (DPDP Act), as they apply to us.
1. Information we collect
- About you: name, business name, email, phone and billing details you give us when you enquire, sign up or pay.
- Your clients' data: when you connect an accounting system such as Xero or MYOB, we access the invoice, contact and document data needed to run your automation (for example customer names, emails, phone numbers, invoice amounts and due dates).
- Website data: basic technical data such as IP address and browser type, collected by our hosting provider.
2. How we use it
We use information only to provide, support and bill for our services, to communicate with you, and to meet legal obligations. We do not sell personal information and we do not use your clients' data for our own marketing.
3. Client data processed via Xero/MYOB
For data from your accounting system, you are the controller (the "data fiduciary" under the DPDP Act) and we act as your processor. We access it through the official, permission-based connections those platforms provide, only for the purposes you set up, and you can disconnect access at any time from your Xero or MYOB settings. You are responsible for having a lawful basis to send reminders to your customers.
4. Sharing and service providers
We share information only with providers we need to run the service, such as hosting, email, SMS/WhatsApp and payment providers (for example Razorpay), and where the law requires it.
5. Overseas storage
We are based in India, and our providers may store data in Australia, India, the United States, the EU or other countries. We take reasonable steps to make sure they protect it to a standard comparable with the Australian Privacy Principles.
6. Security and retention
We use access controls, encrypted connections and least-privilege access. We keep data only as long as needed to provide the service or meet legal and tax obligations, and delete or return client data within 30 days after the service ends unless you ask otherwise.
7. Your rights
You can ask to access, correct or delete your personal information, withdraw consent, or nominate someone to act for you (under the DPDP Act). Email [email protected] and we will respond within 30 days.
8. Complaints
Contact us first at [email protected]; our grievance contact is Rajat Pedhadia. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), the NZ Office of the Privacy Commissioner (privacy.org.nz) or, in India, the Data Protection Board of India.