Privacy Policy

Introduction

This Privacy Policy describes how RecurSave Limited ("RecurSave", "we", "us", or "our") collects, uses, stores, and shares personal information when you visit recursave.com (the "Site") or submit a request for a Financial Leakage Review.

This policy applies to all visitors to the Site regardless of location. We are based in New Zealand and handle personal information with reference to applicable privacy laws, including the New Zealand Privacy Act 2020 and, where relevant, international privacy frameworks such as the Australian Privacy Act 1988, the European Union General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA). We aim to apply a high and commercially reasonable standard of data protection across all personal information we handle.

If you have questions about this policy or about how your personal information is handled, contact us at hello@recursave.com.

What personal information we collect

When you submit the Request a Review form, we collect the following information that you voluntarily provide: your name, your business name, your email address, your annual revenue band, and the free-text message you provide describing what feels financially off in your business.

When you visit the Site, the following technical information is collected automatically by the services listed in the section "Third-party services we use":

• Your IP address
• Your browser type and version
• Your operating system
• The pages you visit on the Site and the time spent on each
• The website or source that referred you to the Site
• Device and screen information
• Approximate geographic location derived from your IP address (country and region level, not street level)
• Interaction data such as mouse movements, clicks, and scroll behaviour (only if you have consented to analytics cookies)

We do not collect special category personal data (racial or ethnic origin, political opinions, religious beliefs, health information, or similar) through the Site, and we do not ask you to provide such information.

How we use your personal information

We use the information we collect for the following specific purposes:

• To respond to your Request a Review submission and arrange a qualification call
• To determine whether your business is a likely fit for our service
• To understand how visitors use the Site so we can improve it
• To identify and fix technical issues with the Site
• To comply with our legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not use your personal information to send you promotional emails or newsletters unless you have explicitly subscribed to them (and the Site does not currently offer any subscription of this kind). We do not use your personal information to create profiles for advertising targeting.

Third-party services we use

The Site uses the following third-party services, each of which may collect and process personal information according to their own privacy practices.

Vercel, Inc.hosts the Site and collects technical performance information through Vercel Speed Insights, including page load times, device type, and approximate location. Vercel Speed Insights is classified as essential performance monitoring and operates without requiring cookie consent. Vercel's privacy policy is available at vercel.com/legal/privacy-policy.

Formspree, Inc.processes Request a Review form submissions and forwards them to us by email. Formspree stores form submissions in its system. Formspree's privacy policy is available at formspree.io/legal/privacy-policy.

Google LLC provides several services we use:

• Google Analytics 4 measures website traffic and usage. Google Analytics uses cookies and collects anonymous usage statistics. Google Analytics cookies are only set if you consent to analytics cookies via the cookie banner on the Site. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on available at tools.google.com/dlpage/gaoptout.
• Google Search Console measures how the Site appears in Google search results and does not collect personal information about individual visitors.
• Google Workspace is used for our business email (hello@recursave.com) and document storage.
• Google Drive is used for secure file transfer during engagements, as described in our Data Handling page.

Google's privacy policy is available at policies.google.com/privacy.

Microsoft Corporationprovides Microsoft Clarity, which records anonymised session data including mouse movements, clicks, and scroll patterns to help us understand how visitors use the Site. Clarity does not record keystrokes in form fields or capture any data you type. Microsoft Clarity cookies are only set if you consent to analytics cookies via the cookie banner on the Site. Microsoft's privacy policy is available at privacy.microsoft.com.

Cookies

The Site uses cookies set by the third-party services listed above. Cookies are small text files stored on your device that allow websites to remember you between visits.

Essential cookies are set by Vercel to ensure the Site functions correctly. These do not require your consent.

Analytics cookies are set by Google Analytics and Microsoft Clarity to measure how the Site is used. These cookies are only set after you consent to them via the cookie banner that appears on your first visit. If you decline analytics cookies, Google Analytics and Microsoft Clarity will not load and no analytics cookies will be set.

No advertising or tracking cookies are set by the Site.

You can also control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is being set.

How we share personal information

We share personal information with third parties only in the following specific circumstances:

• With the service providers listed above, who process information on our behalf under contractual obligations to protect your personal data
• When required by law, such as in response to a valid legal request from a government authority, a court order, or to comply with regulatory requirements
• To protect our rights, such as to investigate or defend against legal claims

We do not share your personal information with any other third parties. We do not transfer your personal information to marketers, advertisers, or data brokers.

International data transfers

Because our service providers (Google, Vercel, Microsoft, Formspree) are based in the United States and operate globally, your personal information may be transferred to and processed in countries other than your own, including the United States. These transfers are protected by the standard contractual clauses approved by the European Commission or by equivalent safeguards, in accordance with GDPR Article 46.

How long we keep your personal information

We retain personal information only for as long as necessary for the purposes for which it was collected:

• Request a Review form submissions: retained for 24 months after submission, then deleted, unless you have become a client in which case the retention period is governed by our engagement with you
• Website usage data (analytics, logs): retained for 14 months in Google Analytics (the shortest available retention period), then automatically deleted
• Client engagement data: governed by the terms of our signed engagement agreement, with financial data deleted within 30 days of the end of the measurement window (see Data Handling page for details)

Your rights

You have the following rights over your personal information, regardless of which jurisdiction you are in:

• Right of access: you can ask us what personal information we hold about you
• Right of correction: you can ask us to correct personal information that is inaccurate or incomplete
• Right of deletion: you can ask us to delete your personal information, subject to our legal obligations to retain it
• Right of portability: you can ask us to provide your personal information in a structured, machine-readable format
• Right to withdraw consent: you can withdraw any consent you have given for us to process your personal information

If you are a California resident, you additionally have the rights provided under the CCPA, including the right to know what personal information we collect and the right to opt out of the sale of personal information (we do not sell personal information, so no opt-out is required).

If you are an EU or UK resident, you additionally have the rights provided under GDPR, including the right to lodge a complaint with a supervisory authority in your country.

To exercise any of these rights, contact us at hello@recursave.com. We will respond to your request within 30 days.

Data security

We protect your personal information using reasonable technical and organisational measures including encrypted data transmission (HTTPS), access controls on third-party services, two-factor authentication on all accounts that access personal information, and the principle of minimum data collection (we collect only what we need).

No method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Children's privacy

The Site is intended for business owners and operators and is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated through a notice on the Site. Continued use of the Site after changes constitutes acceptance of the updated policy.