Privacy policy

Who we hold information about, and why it reaches us

Kudos is used by accounting and bookkeeping practices. There are two groups of people in it: the practice, who signs up and uses the product, and the practice's own clients, whose details arrive from the practice's Xero account.

If you are a client of a practice that uses Kudos: we did not get your details from you. We read them from your accountant's or bookkeeper's Xero ledger, so that we can send you one email asking whether you would leave them a Google review. Your accountant or bookkeeper decides whether to use Kudos; we act on their instructions.

What we hold

For a practice: the name and email address of the person who signs up, the practice's business name, the email address they want private feedback sent to, their connection to Xero, and, if they subscribe, the reference numbers our payment provider gives us for their customer record and their subscription.

For a client of a practice: your name, your email address, and the fact that an invoice was raised for you, which we use only to decide when to send. We record whether the email was delivered, whether you opened the review page, and whether you asked not to be contacted again.

If you write private feedback, we hold what you wrote and the rating you gave.

We do not hold your invoice contents, your accounting data, or any payment details. We never see what you pay your accountant, and we never see a card number.

What we do not do

We do not track whether you opened the email, and we do not track what you click inside it. We record only that the review page itself was opened, because that page is ours.

We do not post reviews, write reviews, or see what you write on Google. The review form is Google's, and you reach it through your own browser.

We do not decide who is shown the Google review link on the basis of what you think of the practice. Everyone is shown it.

We do not sell personal information, and we do not use it for advertising.

Who else receives it

Apart from the WhatsApp exception below, everything to do with a practice's clients stays in Australia. We use four providers for it, and your information is stored and processed in Australia with all of them: Supabase (our database and sign-in, Sydney), Vercel (the website itself, Sydney), Amazon Web Services (the email service, Sydney), and Google Cloud (which holds an encryption key, Australia).

All four are United States companies. Although the data itself stays in Australia, their staff may be able to access it from outside Australia for support and administration.

One exception applies to a practice that subscribes. Payments are handled by Stripe, a United States company that processes payment information outside Australia. If you subscribe, Stripe receives your billing details and the card you enter on its own payment page. Stripe receives no information about a practice's clients: no names, no email addresses, and nothing about reviews or feedback.

One exception applies when a practice chooses WhatsApp to ask its clients for a review. The request is then sent through WhatsApp, which is run by Meta, a United States company. Meta receives the client's mobile number, the practice's name and contact address, and the message itself, and processes them outside Australia, in the United States and other countries where Meta operates. Where the practice's WhatsApp number allows it, we ask Meta to store message content in Australia; a client's mobile number is not covered by that setting. Meta receives nothing about the client's feedback. A practice that does not choose WhatsApp sends nothing to Meta.

Google also receives the business name a practice types when it searches for its own Google listing. Google receives nothing from us about a practice's clients.

Xero is where a practice's client details come from. It is a source of information to us, not a recipient of it.

If you turn on push notifications, your browser gives us a push address, and we use it to tell you when a client leaves feedback. Notifications carry no content. Each one is delivered through the push service your browser uses, which receives that push address and the time of each push: Apple (web.push.apple.com): United States and other countries; Google (Firebase Cloud Messaging, also used by Samsung Internet, Opera and Brave): wherever Google operates facilities; Mozilla (autopush): United States; Microsoft (Windows Push Notification Service): United States and other countries. A browser signed out without turning notifications off keeps receiving content-free notifications, and the next person to sign in on that browser inherits them.

How long we keep it

When a practice stops using Kudos, we delete their clients' contact details within 90 days.

One exception is deliberate. If you asked not to be contacted, or if an email to you could not be delivered, we keep a one-way scrambled version of your email address indefinitely. It cannot be read back into an address. We keep it so that your request goes on being honoured after the practice has stopped using Kudos. Deleting it would mean we could email you again by accident.

How to see, correct or delete what we hold

Email support@push2streamline.com and we will help. We answer within one business day, Monday to Friday, Australian Eastern time.

If you are a client of a practice, your details came from their Xero ledger, so correcting them there is usually the fastest fix and the one that lasts. We can also delete what we hold about you directly.

If you do not want to be asked for a review again, every email we send carries an unsubscribe link. The law requires that link to work for at least 30 days after the email is sent. Ours carries no expiry, so it continues to work after that. We record your request and honour it, and we keep that record even after the practice stops using Kudos.

Complaints

Write to support@push2streamline.com and tell us what went wrong. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Security

Each practice's data is isolated from every other practice's at the database level. The credentials that connect us to a practice's Xero account are encrypted with a key held separately, so possession of the database alone does not yield them.

If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.