Privacy

Your numbers are yours.

This privacy statement is being finalised. Questions about your information? Use the contact page.

Last updated 14 October 2026.

The short version

  • What you type into a calculator stays on your device. It's never sent to us and we can't see it.
  • We collect only what we need to sell you tools, send your access link, reply to you, and send the emails you asked for.
  • A handful of service providers help us do that. We never sell your information.

Who we are

The Numbers Room is a trading name of Stevee Devonda, a sole trader based in New Zealand. We're responsible for the personal information collected through this site, and we handle it under the Privacy Act 2020. For anything to do with your information, email hello@thenumbersroom.co.

What you type into a calculator

The figures you enter in a tool are saved in your own browser's storage on that device, so they're there next time you open it. They're never sent to us. Files you load into a tool, such as a profit and loss export, are read on your device and never uploaded. The free checks work out their answer on your device too, and don't save anything.

To clear a tool's figures, use "Start blank" in that tool. To remove everything, clear this site's data in your browser settings. Once cleared they're gone for good, so use "Back up numbers" first if you want a copy.

At the bottom of some tools, "Need a hand?" opens the contact form with the tool's name and a short note of what it showed already filled in. That only reaches us if you press Send.

What we collect, and why

  • When you buy: Stripe takes your payment. It collects your card and billing details, and tells us your name, email address, what you bought and what you paid. We use that to send your access link, to send fresh links later (by checking with Stripe what that email address has paid for), to keep our business and tax records, and to answer your questions. We never see your card number.
  • Access emails: your access link, and any fresh link you ask for on the My tools page, are emailed to the address you paid with.
  • The sign-in cookie: opening your access link sets one cookie on that device. It holds your email address and a list of what you own, signed so it can't be altered. It can't be read by scripts on the page, is only sent over a secure connection, and lasts 180 days or until you use "Sign this device out" on the My tools page. It's essential: without it your tools can't open.
  • The contact form: your name, email, business name if you give it, what it's about, your message and the page you sent it from. It's emailed to us so we can reply.
  • The launch list and "Tell me when it's ready": your email, your first name if you give it, and what you were looking at. Used to send you one email when sales open or that item is ready.
  • The free AI guide: your first name, email and what kind of business you run. Used to send you the guide, and the odd useful email after it.
  • NZ rate updates: your email, used to send a short note when NZ rates change.
  • Services: when you book an audit, a Build Day or monthly reports, Stripe tells us your name, email, what you booked and what you paid, and we use the details you then send us to do the work. See monthly reports below.
  • Visiting the site: Vercel Web Analytics counts page views: which pages are viewed, the site you came from, your country, and your browser, device and operating system. It doesn't use cookies and doesn't identify you.
  • Technical details: like every website, our host briefly handles your IP address and browser details to deliver pages, keep the site secure and stop the forms being abused.

Cookies

We set one cookie: the sign-in cookie above, and only once you open an access link. Visitor numbers are counted without cookies.

Who we share it with

We never sell your information or share our lists. We share it only with the service providers that run the site for us, and only what each one needs:

  • Vercel hosts the site and runs its sign-in, forms and email sending, and counts visits. United States.
  • Stripe takes payments and holds the record of what you bought. United States and other countries.
  • Resend sends the site's emails: access links, the guide, booking confirmations, and your form messages on to our inbox. United States.
  • Our business email provider holds the messages and sign-ups that come to hello@thenumbersroom.co.
  • Google Fonts supplies the typeface. Your browser fetches it from Google when a page loads, so Google sees your IP address and browser details. United States.

We also give information to our accountant for our own tax and accounts, and to anyone the law requires us to.

Information stored overseas. These providers store or process information outside New Zealand, mostly in the United States. Where that counts as sending it overseas under the Privacy Act (information privacy principle 12), we rely on their terms and data protection commitments, which give safeguards comparable to New Zealand's.

Marketing emails

We only send marketing emails to people who asked for them: the free guide and its follow-ups, NZ rate updates, and the launch list. The launch list and "Tell me when it's ready" get one email, the day it opens, and nothing else. Access emails, receipts and replies to you aren't marketing.

Every marketing email says who it's from and how to stop: reply "stop" and you're off the list, within five working days, as the Unsolicited Electronic Messages Act 2007 requires.

How long we keep it

  • Purchase records stay with Stripe and in our accounts for seven years, because New Zealand tax law says business records must be kept that long. They're also how we send you a fresh link.
  • The sign-in cookie lasts 180 days, or until you sign the device out.
  • Messages and enquiries are kept while we're dealing with them, and for up to two years after we last hear from you, then deleted.
  • The launch list and "Tell me when it's ready": until that email has gone, then deleted, unless you've signed up for something else too.
  • The guide and rate updates: until you tell us to stop.
  • Your calculator figures stay on your device until you clear them. We never had them.

Keeping it safe

Access links and the sign-in cookie are signed, so they can't be forged or altered, and the cookie can't be read by page scripts. The site only runs over a secure connection. Card details go straight to Stripe. We keep as little as we can: there's no customer database, and Stripe is the record of who bought what. No system is perfectly secure, but we take reasonable steps to protect what we hold.

If something goes wrong

If a privacy breach happens that has caused, or is likely to cause, serious harm, we'll tell the people affected and the Privacy Commissioner as soon as we practicably can, as the Privacy Act 2020 requires.

Monthly reports and advisory clients

For services like monthly reports and advisory, you send us business information, which can include sales, wages and client details. We use it only to do that work, never name your clients and never share your figures. How report files are sent, stored and deleted is set out in the terms before monthly reports go on sale. Our private workspace for preparing that work is open only to us.

Seeing, correcting or deleting your information

You can ask what personal information we hold about you, ask for a copy, and ask us to correct it. You can also ask us to delete it, and we will, unless the law says we have to keep it, such as tax records. Email hello@thenumbersroom.co. There's no charge, and we'll reply within 20 working days.

Not happy?

Tell us first and we'll do our best to put it right. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Changes to this statement

We'll update this page when what we collect or who we use changes, and the date at the top shows when it last changed.