Privacy policy

Who we are

This website and the cyrenRPM software are run by cyrenRPM, an Australian business based in New South Wales, Australia. When this policy says “we” or “us”, that’s who it means.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

If you join the beta list

• Your name, email address, business name and how many people work there.
• A scrambled code made from your internet address and email, used only to stop spam and repeated sign-ups. We can’t turn it back into your internet address.
• Any emails you send us, and our replies.

If you use cyrenRPM

• Your account details, such as your name, email address and the business you work for.
• The information you and your team put into cyrenRPM, such as leads, client contact details, quotes, projects, notes, time entries and invoices.
• Basic technical records needed to keep the service secure and working, such as sign-in times and error logs.

Website analytics (only if you say yes)

When you first visit our public website, we ask whether we can use Google Analytics. If you say no, it isn’t loaded. If you say yes, Google receives details such as your browser and device type, an approximate region and a random analytics identifier, along with which of our public pages you visited and which buttons you clicked. We never send what you type into forms, anything from inside the cyrenRPM app, or full web addresses. Advertising features are switched off. You can change your answer at any time using the “Analytics settings” button at the bottom of the page.

How we use it

• To contact you about the beta and, if you’re invited, to set up your workspace.
• To run cyrenRPM: saving your work, sending the quotes, invoices and notifications you ask it to send, and keeping your account secure.
• To answer your questions and give support.
• To understand how people use our website so we can make it clearer.

We don’t sell personal information, and we don’t use it for advertising.

Your clients’ information

If your business uses cyrenRPM, the details you store about your own clients belong to your business. We keep that information on your behalf, only use it to provide the service to you, and don’t contact your clients for our own purposes. Your business is responsible for having its own privacy policy for the information it collects.

Who we share it with

We use a small number of trusted service providers to run cyrenRPM. They only get the information they need to do their job:

• Supabase: our database, hosted in Sydney, Australia.
• Vercel: hosts the website and app. Our app servers run in Sydney; pages may be delivered from servers closer to you.
• Resend: sends our emails (for example, beta confirmations, quotes and invoices). Email content passes through its servers, which may be in the United States.
• Google Analytics: website analytics, only if you agree. Google may process this information outside Australia.
• Stripe and Xero: only if your business chooses to connect them, for payments and accounting.

Some of these providers may store or process information overseas, including in the United States. We choose providers with strong security and privacy commitments. We may also share information if the law requires it.

Keeping it safe

Information is sent over encrypted connections, access inside each business’s workspace is controlled by sign-in and user permissions, and our own access to your data is limited to what we need to support you and keep the service running.

How long we keep it

We keep beta list details until the beta ends or you ask us to remove them. We keep workspace information while your business uses cyrenRPM, and then for as long as the law requires (for example, tax records) or until your business asks us to delete it.

Seeing, fixing or deleting your information

You can ask to see the personal information we hold about you, ask us to correct it, or ask to come off the beta list at any time. Just email hello@cyrenrpm.com. We’ll reply within 30 days.

Complaints

If you’re unhappy with how we’ve handled your information, please tell us first at hello@cyrenrpm.com and we’ll try to fix it. If you’re still not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

If we make important changes, we’ll update the date at the top of this page and, where it matters, let people on the beta list or using cyrenRPM know.