Your numbers are yours.

The Numbers Room is a trading name of Stevee Devonda, a sole trader based in New Zealand. We're responsible for the personal information collected through this site. New Zealand's Privacy Act 2020 applies to us. Australia's Privacy Act 1988 may apply to us too, and we follow the Australian Privacy Principles either way: this page is how we do it. For anything to do with your information, email hello@thenumbersroom.co.

The figures you enter in a tool are saved in your own browser's storage on that device, so they're there next time you open it. They're never sent to us. Files you load into a tool, such as a profit and loss export, are read on your device and never uploaded. The free checks work out their answer on your device too.

Your browser also keeps a few small things for this site: your cookie choice, that you've opened the free checks (with the email and first name you gave, so "Email me this number" knows where to send), and that you've opened the samples. They stay on that device and are gone when you clear this site's data.

To clear a tool's figures, use "Start blank" in that tool. To remove everything, clear this site's data in your browser settings. Once cleared they're gone for good, so use "Download a copy" first if you want to keep them.

At the bottom of some tools, "Need a hand?" opens the contact form with the tool's name and a short note of what it showed already filled in. That only reaches us if you press Send.

Almost everything comes straight from you, through the forms on this site. Purchase details come from Stripe, and, only if you tap OK on the cookie bar, visit details come from the analytics tools below. You can browse the site without telling us who you are. To open a free check or a sample, buy a tool or hear back from us, we need an email address. We don't collect sensitive information, such as health details, and we don't want it: please leave it out of messages.

• When you buy: Stripe takes your payment. It collects your card and billing details, and tells us your name, email address, country, what you bought and what you paid. We use that to open your tools, send your access link, send fresh links later (by checking with Stripe what that email address has paid for), keep our business and tax records, and answer your questions. We never see your card number.
• Access emails: your access link, and any fresh link you ask for on the My tools page, are emailed to the address you paid with.
• The sign-in cookie: when you pay, the device you paid on is signed in straight away. On any other device, opening your access link (good for 7 days) signs that one in. Signing in sets one cookie on the device. It holds your email address and a list of what you own, signed so it can't be altered. It can't be read by scripts on the page, is only sent over a secure connection, and lasts 180 days or until you use "Sign this device out" on the My tools page. It's essential: without it your tools can't open.
• The free checks and the tool samples: your email, your first name if you give it, which check or sample you opened and the page you were on. We use them to open the check or sample, to let us know someone opened it, and, if you tap "Email me this number", to email you the result figure the check showed (that one figure, nothing else you typed). You only join our mailing list if you tick "Also send me the odd email".
• The contact form: your name, email, business name if you give it, what it's about, your message and the page you sent it from. It's emailed to us so we can reply.
• The early access list, the launch list and "Tell me when it's ready": your email, your first name and the kind of business you run if you give them, what you were looking at, and that you signed up from the Australian site. The form tells you what you're signing up for: the email you asked for, plus the odd email about the tools, offers and running a salon on the numbers.
• Visiting the site: Vercel Web Analytics counts page views: which pages are viewed, the site you came from, your country, and your browser, device and operating system. It doesn't use cookies and doesn't identify you.
• Google Analytics: only if you tap OK on the cookie bar. It records the pages you view and how you move between them, what you click, how far you scroll, your device and browser, and your rough location (worked out from your IP address). It sets cookies so it can tell a returning browser from a new one. We use it to see which pages help and which don't. It's linked to our Google Ads account too, so Google can tell us when someone who clicked one of our ads signs up or buys, and can show our ads to people who've visited. If you tapped OK before you bought, Google also gets your email scrambled one way, so it can't be read back, to match the sale to the ad that led to it. If you're signed in to Google with personalised ads turned on, Google can also connect your visits across your devices. If you tapped OK before you tapped buy but your thank-you page couldn't tell Google Analytics about the purchase (a closed tab, an ad blocker), our server tells it instead: what you bought, the amount, Google Analytics' own ids for your browser and visit, and your email scrambled one way. Never your email itself, your name or your card. How Google uses this: policies.google.com/technologies/partner-sites. To block it everywhere: tools.google.com/dlpage/gaoptout.
• Microsoft Clarity: only if you tap OK on the cookie bar. It records the pages you view, what you click and tap, how far you scroll, your device and browser, and your rough location, plus a replay of each visit (clicks, taps, scrolling and mouse movement) and heatmaps of where people click. What you type into forms, and the answers the free checks show you, are masked on your device, so Clarity never sees them. It sets cookies too. Microsoft's privacy statement: privacy.microsoft.com/privacystatement.
• Where you came from: Only if you tap OK on the cookie bar, we give your browser a random visitor id (a cookie named nr_vid, with a copy in your browser's storage). It isn't your name or email and says nothing about you on its own. When you arrive from an ad, a link or another site, we note against that id the link's tracking tags, Meta's or Google's ad click id, the page you landed on, the site that sent you (without the rest of its address) and the date. If you sign up or buy, that note goes with it, so we can see which ads and pages lead to sign-ups and sales. When you tap a buy button we also keep your IP address and browser details for 7 days, for the purchase report to Meta below. Tap No thanks and the id is deleted from your browser.
• The Meta pixel: tells Meta (Facebook and Instagram) which pages you visited, and when you signed up, clicked a buy button or bought, so we can measure our ads and show them to people likely to find the tools useful. It never gets your name, email address or anything you type into a form. It uses cookies and only loads once you tap OK on the cookie bar. If you tapped OK before you tapped buy, our server also tells Meta about that purchase once you've paid: what you bought, the amount, the pixel's two cookies (or the ad click you arrived with), your visitor id and your email scrambled one way so they can't be read back, and the IP address and browser details from your tap. Without that OK, nothing about your purchase goes to Meta or Google. It never sends your name or card. Meta's privacy policy: facebook.com/privacy/policy, and its cookie policy: facebook.com/privacy/policies/cookies. You can change how Meta uses this for ads in your Meta ad preferences.
• Never inside the paid tools: Google Analytics, Microsoft Clarity and the Meta pixel only run on the public pages of this site. They're not in the calculators you buy, so they never see the figures you put in them.
• Technical details: like every website, our host briefly handles your IP address and browser details to deliver pages, keep the site secure and stop the forms being abused.

We set two cookies ourselves: the sign-in cookie above, only once you've paid or opened an access link, and the visitor id under "Where you came from", which follows your choice on the cookie bar. Visitor numbers are counted without cookies.

We ask first. Google Analytics, Microsoft Clarity and the Meta pixel set their own cookies, but only after you tap OK on the cookie bar at the bottom of the page. Until you do, or if you tap No thanks, they don't load at all, and nothing about your visit or your purchase goes to Google, Microsoft or Meta from this site. Your choice is remembered in this browser's storage on this device, so the bar doesn't ask on every page. If your browser won't store it, the bar asks again on your next visit.

Changed your mind? Cookie settings clears your choice and shows the bar again, so you can choose again. It's at the bottom of every page too. Saying no after a yes stops them on this site and clears the cookies they set here. We can't reach cookies Google, Microsoft or Meta set on their own sites; your browser settings or the links above can.

We never sell your information or give it to anyone for their own marketing. We share it only with the service providers that run the site for us, and only what each one needs:

• Vercel hosts the site and runs its sign-in, forms and email sending, and counts visits. Its servers for this site run in Sydney, Australia; Vercel is a United States company and pages are delivered from its servers around the world. Privacy policy.
• Stripe takes payments and holds the record of what you bought. United States and other countries. Privacy policy.
• Resend sends the site's emails: access links, the free check numbers you ask for, and your form messages on to our inbox. United States. Privacy policy.
• Upstash holds our own records: sign-ups and orders (with your email scrambled one way, never the email itself), and, if you tapped OK, the visitor id and where you came from, in a database used only for this site. Sydney, Australia (Upstash's ap-southeast-2 region).
• Brevo holds our mailing list: the early access list, the launch list, "Tell me when it's ready", and anyone who ticked "Also send me the odd email" on a free check or sample (your email, your first name and kind of business if you give them, what you signed up for, that you're in Australia, and, if you tapped OK on the cookie bar, your visitor id and where you first came from). We use it to send the emails you asked for, with an unsubscribe link in every one. France (European Union). Privacy policy.
• ImprovMX, a United States company, forwards email sent to hello@thenumbersroom.co. It holds a message only briefly, on servers in France, while passing it on through France and the United States. Google (Gmail) is where we read and keep it, in the United States and other countries.
• Google Fonts supplies the typeface. Your browser fetches it from Google when a page loads, so Google sees your IP address and browser details. United States.
• Google runs Google Analytics and Google Ads, only if you tap OK. United States and other countries.
• Microsoft runs Clarity, only if you tap OK. United States and other countries.
• Meta runs the pixel and receives the purchase reports above, only if you tap OK. United States and other countries.

We also give information to anyone the law requires us to, and to a bookkeeper or accountant if we use one for our tax and accounts.

Information sent overseas. We're in New Zealand, so what you give us comes to New Zealand. Our providers store or process it in Australia (Vercel's and Upstash's Sydney servers), the United States (Vercel, Stripe, Resend, Gmail and Google Fonts), the European Union (Brevo and ImprovMX, in France), and the other countries Stripe and Google work in. Stripe, Vercel, Resend, Brevo and Upstash work for us under data protection terms that bind them to handle your information the way we've described here, and we stay responsible for what we hand them. Google, Microsoft and Meta are different: once their tools are running, what they record is held by them in the United States and other countries under their own privacy policies (linked above), not under our control. They only run if you tap OK, and No thanks stops them.

We only send marketing emails to people who've said yes to them: the early access list, the launch list, "Tell me when it's ready", and anyone who ticked "Also send me the odd email" on a free check or sample. Opening a free check or a sample doesn't put you on the list by itself. If you've bought a tool, we'll also email you when an Australian rate changes in it, because that's part of what you paid for; if one of those emails also mentions other tools or offers, it has an unsubscribe link like any marketing email. Every marketing email says who it's from, gives you a way to reach us, and has an unsubscribe link. To stop them, use that link, reply "stop", or email hello@thenumbersroom.co, and we stop within five business days, as Australia's Spam Act 2003 requires. Access emails, receipts, the free check number you asked for and replies to you aren't marketing.

• Purchase records stay with Stripe and in our accounts for seven years, because New Zealand tax law says business records must be kept that long. They're also how we send you a fresh link.
• The sign-in cookie lasts 180 days, or until you sign the device out.
• Messages, enquiries and free check or sample sign-ups are kept while we're dealing with them and for up to two years after we last hear from you. We clear them out at least once a year.
• The mailing list: until you unsubscribe or ask us to remove you.
• Where you came from: the visitor id and its notes are deleted automatically after 13 months; the IP address and browser details from a buy tap after 7 days. Tap No thanks to delete the id from your browser.
• Analytics: what Google Analytics, Microsoft Clarity and the Meta pixel record is kept for the retention periods set in those services, then deleted. Their cookies stay on your device until they expire, you clear them, or you say no in Cookie settings.
• Your calculator figures stay on your device until you clear them. We never had them.

Access links and the sign-in cookie are signed, so they can't be forged or altered, and the cookie can't be read by page scripts. The site only runs over a secure connection. Card details go straight to Stripe. We keep as little as we can: we don't run a customer database of our own. Stripe is the record of who bought what, and Brevo holds the mailing list. No system is perfectly secure, but we take reasonable steps to protect what we hold, and we delete or de-identify what we no longer need.

The only decision a computer makes about you here is whether a signed-in device can open your tools, based on what that email address has paid for, as recorded by Stripe. Nothing else about you is decided by a program, and no one is profiled or priced differently.

If a data breach happens that is likely to cause serious harm, we'll tell the people affected as soon as we can, and the Office of the Australian Information Commissioner (OAIC) and New Zealand's Privacy Commissioner.

You can ask what personal information we hold about you and for a copy of it, and ask us to correct anything that's wrong, out of date or incomplete. You can also ask us to delete it, and we will, unless the law says we have to keep it (tax records, for example) or you own tools and we need your email to keep them open and send you fresh links. Email hello@thenumbersroom.co. We'll check it's really you, there's no charge, and we'll reply within 20 working days. If we can't do what you ask, we'll tell you why in writing and how to complain, and if we don't agree a correction is needed you can ask us to keep a note of your view with the information. What Google, Microsoft and Meta hold about your visits is in their hands; their privacy settings (linked above) explain how to manage it.

Tell us first at hello@thenumbersroom.co and we'll do our best to put it right. We'll acknowledge your complaint within a few days and give you a full answer within 20 working days. If you're not satisfied, or you haven't heard back in 30 days, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. You can also go to New Zealand's Office of the Privacy Commissioner at privacy.org.nz, the regulator for New Zealand businesses like ours. For an unwanted marketing email, you can report it to the ACMA at acma.gov.au.

We'll update this page when what we collect or who we use changes, and the date at the top shows when it last changed.