Privacy Policy

PoolAxis is operated by Virtuality Ltd, a New Zealand company. We are committed to protecting your personal information in accordance with the New Zealand Privacy Act 2020.

1. What we collect

• Account information — company name, administrator name, email address, and password (stored as a one-way hash).
• Business data — pool records, client contact details, chemical readings, treatment logs, and job photos uploaded through the app.
• Location data — technician starting address and GPS coordinates, used only when the route optimisation feature is active.
• Usage data — application logs used for debugging, support, and service improvement. These logs do not include the content of pool records.

2. How we use it

• To provide and operate the PoolAxis web portal and mobile application.
• To send transactional emails — job completion reports to pool owners, technician invites, and password resets.
• To calculate and optimise technician routes via the Google Maps API.
• To process subscription payments via Stripe.
• To respond to support requests.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-party services

We use the following services to deliver PoolAxis. Each is bound by its own privacy policy and data processing terms.

• Supabase — database and authentication. Data is stored in AWS ap-southeast-2 (Sydney, Australia).
• Railway — API server hosting.
• Vercel — web application hosting.
• Resend — transactional email delivery.
• Stripe — subscription billing and payment processing.
• Google Maps Platform — route optimisation. Addresses passed to Google Maps are not linked to individual pool owner identities.

4. Data retention

We retain your data for as long as your account is active. If you close your account, data is retained for 90 days and then permanently deleted, unless we are required by law to retain it longer.

5. Security

Passwords are hashed and never stored in plain text. All data in transit is encrypted via TLS. Access to production data is restricted to authorised personnel.

6. Your rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information, subject to any legal retention obligations.

To exercise these rights, contact us via our support form and we'll respond within five business days.

7. Cookies

The PoolAxis web portal uses a single session token stored in browser local storage for authentication. The marketing website (poolaxis.app) uses Vercel Analytics, which collects anonymised, aggregated page view data with no cross-site tracking.

8. Changes to this policy

We may update this policy from time to time. We will notify account holders by email at least 14 days before material changes take effect. The current version is always available at poolaxis.app/privacy.

9. Contact

Privacy enquiries: send us a message.
Virtuality Ltd, New Zealand