Who is responsible
JustiPhi Technologies Limited runs Layer Zero and is responsible for the personal information it holds. Questions and requests go to privacy@justiphi.co.nz. We follow the New Zealand Privacy Act 2020, and the GDPR where it applies to you.
What we keep
- Your account: your email address, the name you give (if any), your password (only as a one-way hash), whether two-factor sign-in is on, your recovery codes (also hashed), which version of these terms you accepted and when, and the sign-up code you used, if any.
- Your sign-in history: when you signed in and how, and changes to how you sign in, so you can spot anything you don't recognise. It doesn't record your IP address.
- Workspace records: what you and your team enter: printers, sites and places, print hours, maintenance tasks, and service records, which include the name of the person who did the work and any notes. These belong to the workspace.
- Invitations: the email address someone was invited with, the role offered, and who sent it.
- A change history: security-relevant changes in a workspace (members, roles, invitations, voided records), naming people by an internal ID, not their email.
- Technical logs: each request's address, result and timing, kept for a short time to find faults. Your IP address is used, without being stored with your account, to limit repeated sign-in attempts and to check sign-up isn't automated.
Why
Only to run the service for you: to sign you in and keep your account safe, to show your workspaces' records to the people in them, to send the emails the service needs (confirming your email, invitations, password resets and security notices), and to fix problems. We don't sell personal information, show advertising or use it for profiling.
Who can see it
- The members of a workspace see its records, and each other's names and email addresses.
- We see it only to help when you ask, to keep the service safe, or when the law requires it.
- Companies that run parts of the service for us, under contract and only for that purpose: Neon (the database), Resend (sending email) and Cloudflare (the bot check on sign-up, and protecting the site). We'll update this list before adding another.
Where it's kept
The database and the server run in Australian data centres. Email and the bot check pass through our providers' networks, which may be in other countries; they handle only what they need for that one job.
Cookies and browser storage
Only the ones the service needs to work: one to keep you signed in, one that protects forms from being submitted by other sites, one that remembers which workspace you chose, and a short-lived one while you confirm it's you. The bot check on sign-up may set Cloudflare's own. When you open an invitation before signing in, your browser keeps it until you've signed in or signed up, then forgets it. Light or dark mode follows your device's setting without storing anything. There are no analytics or advertising cookies, so there's no banner to accept.
How long
- Your account and sign-in history: while you have an account.
- Workspace records: while the workspace exists. They are kept as they were recorded, so when someone's account is closed, the work they recorded keeps the name it was recorded under. On a valid privacy request, we can replace that name across a workspace's records.
- Technical logs: a short time, for troubleshooting. Backups: a limited time, after which they're overwritten.
Your rights
You can ask to see the personal information we hold about you, to correct it, or to delete it. Your name and email address can be changed in account settings. To close your account, or for anything else, email privacy@justiphi.co.nz. If you're not happy with our answer, you can complain to the New Zealand Privacy Commissioner, or your local data protection authority.
Children
The service isn't meant for anyone under 16.
Changes
When this policy changes, its version changes too, and the app asks you to accept the new version before you carry on.