Privacy Policy

We collect the information needed to operate the platform and respond to enquiries. Depending on how you interact with ENDRATO, this may include:

• Contact details you give us, such as your name, email address and business name.
• Business data you enter into the platform, including client records, bookings, quotes and financial information.
• Account and usage information, such as sign-in details, pages visited and features used, to help us secure and improve the product.

We use personal information to provide and operate the platform, respond to demo requests and enquiries, keep the service secure, and improve the product.

We do not sell personal information, and we do not use your business data to advertise to your clients.

When your business stores its own client information in ENDRATO, you remain the controller of that data. We process it on your behalf, only to provide the service.

You are responsible for ensuring you have the right to collect and store your clients' information, and for meeting your own privacy obligations to them.

Data is stored securely using industry-standard safeguards, including encryption in transit and access controls that limit who inside your business can see each module.

We retain personal information only for as long as needed to provide the service or meet legal obligations. When an account is closed, data is deleted or de-identified within a reasonable period, subject to backup cycles.

ENDRATO relies on a small number of trusted service providers for hosting, infrastructure and AI processing. These providers are bound by their own security and privacy commitments.

Some providers may process data outside Australia. Where this occurs, we take reasonable steps to ensure the information is handled consistently with Australian privacy law.

Where data is processed by an AI provider to power a feature you use, it is processed transiently to return a result — not retained to train public models.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.

You can request access to, correction of, or deletion of your personal information at any time by contacting us. We will respond within a reasonable timeframe.

If you believe we have mishandled your information, you can lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au).

Privacy questions and requests can be sent to hello@zavayd.ai.