Privacy policy

Last updated 10 November 2026

The short version

We only collect what’s needed to run PriceIt: your name and email from Google, and the quotes, rates and settings you enter.
Your business’s data is only visible to people in your business. We don’t sell it, share it for marketing, or use it for advertising.
There are no advertising trackers. The only cookie keeps you signed in. We count visits with Cloudflare’s cookie-free web analytics.
You can ask to see, correct or delete your information at any time.

Who we are

PriceIt is a quoting app for painting and decorating businesses, run by George Ricketts in New Zealand. In this policy “we” means George Ricketts. We follow the New Zealand Privacy Act 2020. If you have a question or request about your information, email grickettsnz@gmail.com.

What we collect

When you sign in and use PriceIt, we hold:

Your account: your name, email address and Google account ID, which Google provides when you choose “Sign in with Google”. We don’t receive your Google password or access anything else in your Google account.
Your business’s data: the quotes, rooms, measurements, prices, paint products, rates and settings you enter – including your business details (name, phone, email, address, GST number).
Your customers’ details: the names, addresses, phone numbers and email addresses you put on quotes.
Photos: pictures you take in the app of rooms and the outside of buildings, with any captions you add. They’re for your business only and aren’t put on quotes.
Quotes you email: when you email a quote from PriceIt, we keep who it was sent to, when, and whether it was delivered or bounced. The email’s message and attached PDF are passed to our email provider to send, not kept by us.
Team details: who belongs to your business and their role, and the email addresses of people you invite.
Sign-in records: when you signed in and when your sign-in expires. We store a scrambled (hashed) version of your sign-in token, not the token itself.
Technical logs: our hosting provider keeps short-term logs of requests to our servers (such as time, address requested and IP address) for security and fixing faults.
Visit statistics: we use Cloudflare Web Analytics to count page visits and see how fast pages load. It doesn’t use cookies, doesn’t identify you, and doesn’t follow you across other websites.

We don’t collect payment details, your location, your contacts or anything from your device beyond what you type into PriceIt.

Your customers’ information

When you add your customers’ details or photos of their property, you are responsible for that information under the Privacy Act – you collected it, and you decide how it’s used. Avoid photographing people or personal belongings you don’t need. We store and process it only so that PriceIt works for you. We only contact your customers when you choose to email them a quote from PriceIt, and we don’t use their details for anything else.

How we use it

To sign you in and keep you signed in.
To store your business’s data and sync it between your devices and your team.
To give the people you invite access to your business (they join when they sign in with the invited email address).
To email quotes to your customers, and work out travel, when you ask it to.
To keep the service secure, find and fix faults, and answer your questions.

We don’t sell personal information, share it with advertisers, or use it to profile you.

Where it’s stored

On your device: the app saves your data in your browser’s storage so it works offline. Signing out removes your business’s data from that device.
On our servers: we use Cloudflare to host PriceIt, its database and photo storage. Both are located in the Oceania region, but Cloudflare runs a global network and may process data in other countries, including the United States.
Emailing quotes: quotes you email are sent by Resend, which receives the customer’s email address, your message and the quote PDF in order to deliver them. Resend is based in the United States.
Travel: when you work out travel, your business address and the site address are sent to Google Maps to get the driving distance and time, under the Google Privacy Policy.
Google sign-in: when you sign in, Google’s sign-in button is loaded from Google and Google handles that step under the Google Privacy Policy.

Cloudflare, Google and Resend are overseas organisations. We use them because they protect information in ways comparable to the safeguards in the New Zealand Privacy Act, and we only give them what’s needed to provide the service.

Who can see it

People in your business – the owner and anyone they invite – can see and change the business’s data. Other PriceIt businesses can’t.
We don’t look at your business’s data except when you ask us to help, when needed to fix a fault or keep the service secure, or when the law requires it.
Our admin tools show account details (names, email addresses, business names, sign-in dates) and counts such as how many quotes a business has. To help with support or fix a fault, our administrator can open a business’s data in a read-only view – it can’t be changed that way, and every time it’s opened is recorded.
We may disclose information if required by law, or to prevent a serious threat to someone’s life, health or safety.

Cookies and local storage

We use one cookie, pq_session, which keeps you signed in for up to 180 days and renews while you use the app. It’s essential for signing in and isn’t used for tracking. The app also uses your browser’s storage to work offline. We don’t use advertising or tracking cookies; our visit statistics (Cloudflare Web Analytics) work without cookies.

How long we keep it

Your business’s data is kept while your account is active, or until you ask us to delete it.
When you delete a quote, its contents are removed; a small marker that it was deleted is kept so the deletion reaches your other devices.
When you delete a photo (or the room or quote it belongs to), it’s removed from our storage the next time your device syncs.
Our database provider keeps restore points so data can be recovered after a fault. Deleted information can remain in these for up to 30 days.
Technical logs are kept for a short period, normally a few days.

Keeping it safe

Everything is sent over encrypted connections (HTTPS). Each business’s data is kept separate and is only available to signed-in members of that business. Sign-in tokens are stored in scrambled form. If a privacy breach is likely to cause serious harm, we will tell you and the Privacy Commissioner as the law requires.

Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and your business’s data. Email grickettsnz@gmail.com and we’ll respond within 20 working days. You can also download a backup of your data at any time from the app’s Settings.

If you’re not happy with how we’ve handled your information, please tell us first. You can also complain to the Office of the Privacy Commissioner.

Children

PriceIt is a business tool and isn’t intended for children.

Changes to this policy

If we change this policy we’ll update the date at the top. For significant changes we’ll let signed-in users know in the app.