Privacy Policy

Effective date: September 7, 2025

AutoReports is operated by Exploding Labs ("we", "our", "us"). This policy explains how we collect, use, store, and disclose personal information when you use AutoReports.

1. Contact Details

For privacy questions, access or correction requests, or complaints, email support@autoreports.app.

2. Personal Information We Collect

• Contact details you provide, such as your name and email address.
• Xero account details made available during sign-in or connection, such as your Xero user identifier, name, and email address.
• Xero organisation details, including organisation identifiers, names, settings, and connection metadata.
• Xero invoice, contact, and transaction information needed to prepare customer reports.
• Email recipient details, report content, delivery status, and related email metadata.
• Settings you configure in AutoReports, including Cc, Bcc, reply-to, and report preferences.
• Usage, analytics, diagnostic, security, and error-log information, including IP address and browser information where collected by our systems or service providers.
• Billing information if paid features are used. Full card numbers are handled by payment providers and are not stored by us.

3. How We Collect Information

• Directly from you when you enter information into AutoReports or contact us.
• From Xero when you or an authorised Xero account holder connects a Xero organisation.
• Automatically from your use of AutoReports, including logs, analytics, and security systems.
• From service providers that help us operate AutoReports, such as hosting, email delivery, analytics, and payment providers.

4. How We Use Information

• To provide and operate AutoReports.
• To connect to Xero and prepare and send customer reports.
• To authenticate users and manage access to connected organisations.
• To show report history, report content, delivery status, settings, and related account information.
• To provide customer support and respond to requests.
• To monitor, secure, debug, and improve AutoReports.
• To communicate service updates, account information, and important operational notices.
• To meet legal, accounting, security, and compliance obligations.

5. Disclosure and Service Providers

We do not sell personal information.

We may disclose or make information available to:

• Xero, where needed to connect your organisation and operate the Xero integration.
• Hosting and infrastructure providers, including Hetzner and Cloudflare.
• Analytics providers, including Umami.
• Email delivery providers used to send service emails and reports.
• Payment providers, if paid features are used.
• Professional advisers, regulators, or authorities where required by law or needed to protect our rights, users, or systems.

6. Overseas Storage and Disclosure

AutoReports may store or process information outside Australia. Our hosting is provided by Hetzner in the European Union, and Cloudflare may process traffic and security data through its global network. Xero, analytics, email, and payment providers may also process information in countries where they operate.

7. Data Retention

We keep personal information for as long as needed to provide AutoReports, maintain records of reports and delivery status, support connected organisations, resolve disputes, meet legal or accounting obligations, and protect our systems.

If you disconnect AutoReports from Xero or request deletion, we will delete or de-identify personal information where reasonably possible, unless we need to retain it for legal, security, accounting, backup, or legitimate business reasons.

8. Security

We use reasonable technical and organisational safeguards to protect personal information, including HTTPS encryption in transit, access controls, and operational monitoring. No internet service can be guaranteed to be completely secure.

9. Access, Correction, and Deletion

You may request access to, correction of, or deletion of your personal information by emailing support@autoreports.app. We may need to verify your identity before responding. In some cases, we may be unable to delete information that we are required or permitted to retain.

10. Complaints

If you believe we have mishandled your personal information, email support@autoreports.app with details of your concern. We will review your complaint and respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

11. Changes to This Policy

We may update this policy when our information handling practices change. The updated policy will be published on this page with a new effective date.