Privacy Policy

How Wowzer Technologies Inc. collects, uses, and protects your personal information.

About This Policy

Wowzer Technologies Inc. ("Wowzer Technologies", "we", "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and disclose personal information in connection with the WOW Backup and Restore service and related services (together, the "Services").

This Policy applies to:

• Subscribers and account holders who use the Services.
• Individuals whose personal information is contained within data processed by the Services ("End Users" or "Clients").
• Visitors to our website.

Information We Collect

Subscriber Account Information

When you register for an account, we collect:

• Name, email address, billing address
• Payment information (processed by our payment provider — we do not store full card details)
• Other information you provide in connection with your account

Usage Data

We collect information about how you use the Services, including:

• Log data (IP address, browser type, pages visited, timestamps)
• Feature usage patterns
• Performance and diagnostic data

Customer Data

In providing the Services, we process data you provide or that is retrieved from your connected accounting platforms (e.g., Xero, QuickBooks) under your instruction. This data may include financial records and other information about your clients ("Customer Data"). We process Customer Data as a data processor on your behalf.

AI-Assisted Features

Where you activate AI-assisted features, certain Customer Data fields may be submitted to our AI inference sub-processor (Anthropic, PBC) for the purpose of generating the requested output. This processing occurs only when you activate the relevant feature. Data submitted to the Anthropic inference API is not retained by Anthropic beyond the processing window required to generate the response.

Service Improvement

We may use aggregated, de-identified data derived from usage of the Services to improve and enhance our Services. This data does not identify you or your clients individually.

Disclosure of Personal Information

When We May Disclose

We may disclose your personal information in the following circumstances:

• To provide you with the Services, including transmission to sub-processors listed in this Policy.
• To provide you with communications about the Services.
• For purposes that you consent to, or for a related purpose where you would reasonably expect such disclosure.
• As required by applicable law or directed by legal process.
• To any industry body, tribunal, court or otherwise connected with any complaint regarding our services.

Sub-Processors

We use the following third-party service providers and sub-processors:

Cross-Border Data Transfers

Some of our sub-processors, including Anthropic PBC, are located in the United States. When Customer Data is transferred outside your country of residence in connection with the Services, we take steps to ensure appropriate protections are in place.

Australia

Cross-border disclosures are made on the basis that Wowzer Technologies has taken reasonable steps consistent with Australian Privacy Principle 8 to ensure recipients handle personal information in a way substantially similar to the APPs. By using the Services you consent to cross-border disclosure on this basis.

New Zealand

Cross-border transfers are made consistent with the New Zealand Privacy Act 2020. By using the Services you consent to cross-border disclosure on this basis.

Canada

Personal information may be transferred to and processed in the United States by our sub-processors. You acknowledge that personal information transferred to the United States may be subject to access by US government authorities under US law. Such transfers are made consistent with PIPEDA accountability principles.

United Kingdom

Transfers are made on the basis of appropriate safeguards as required by UK GDPR Article 46, including where applicable the use of International Data Transfer Agreements (IDTAs). A copy of applicable transfer safeguards is available on request.

United States

Where personal information of California residents is processed, Wowzer Technologies acts as a service provider under the CCPA/CPRA and does not sell or share personal information for cross-context behavioural advertising.

Your Privacy Rights by Jurisdiction

Australia and New Zealand

You have the right to access personal information we hold about you and to request correction of inaccurate information. We will respond within a reasonable timeframe.

Canada

Under PIPEDA you have the right to access personal information we hold about you, to know how it is used and disclosed, and to challenge our compliance. You may withdraw consent at any time subject to legal or contractual restrictions.

United Kingdom

Under UK GDPR you have the following rights:

• The right to access your personal data.
• The right to rectification of inaccurate personal data.
• The right to erasure (the "right to be forgotten") in certain circumstances.
• The right to restriction of processing in certain circumstances.
• The right to data portability in certain circumstances.
• The right to object to processing based on legitimate interests.
• The right to lodge a complaint with the Information Commissioner's Office (ICO).

United States

Depending on your state of residence, you may have rights under applicable state privacy law, including:

• The right to know what personal information we collect.
• The right to delete personal information.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information (we do not sell or share personal information).
• The right to non-discrimination for exercising privacy rights.

Security

We take our security obligations seriously. Your personal information is regarded as confidential. We will take all reasonable steps to safeguard your information so that it is not misused, lost, modified, accessed by unauthorised persons, or disclosed without authorisation.

We are committed to responding to data breaches in accordance with applicable privacy legislation, including:

• The Australian Notifiable Data Breaches scheme
• New Zealand Privacy Act 2020
• PIPEDA breach of security safeguards requirements
• UK GDPR Article 33
• Applicable US state breach notification laws

Data Retention

We will retain Customer Data for the duration of your agreement with us and will delete or return Customer Data no later than two (2) years following the end of our agreement with you, unless otherwise required by applicable law.

Personal data submitted to Anthropic's inference API is not retained by Anthropic beyond the processing window required to generate the requested response.

Account and administrative personal information is retained for as long as necessary to fulfil the purposes for which it was collected.

Complaints and Inquiries

If you have a complaint or questions about this Privacy Policy, please contact us at: support@wowzer.tech

If you are not satisfied with our response, you may escalate your complaint to the relevant privacy authority in your jurisdiction:

• Australia: Office of the Australian Information Commissioner — www.oaic.gov.au
• New Zealand: Office of the Privacy Commissioner — www.privacy.org.nz
• Canada: Office of the Privacy Commissioner of Canada — www.priv.gc.ca
• United Kingdom: Information Commissioner's Office — www.ico.org.uk
• United States: Relevant state Attorney General or data protection authority.