Beljay Labs
beljay labs
back to snapshot

Privacy Policy

Last updated: December 2025

This Privacy Policy describes how Beljay Labs ("we", "us", "our") collects, uses, and protects your information when you use our Carbon Snapshot and Carbon Reporting Platform ("Service").

1. information we collect

1.1 Xero Account Data

When you connect your Xero account, we access:

  • Organization name and details
  • Chart of accounts (ledger names and codes)
  • Transaction data (purchases, expenses, sales)
  • Contact/supplier information (names, categories)
  • Invoice attachments (when using Invoice Intelligence features)

1.2 Usage Data

We collect information about how you use the Service, including:

  • Classification corrections you make (to improve accuracy)
  • Reports generated and features used
  • Technical logs for troubleshooting

2. how we use your information

We use your data exclusively to:

  • Provide the Service: Calculate carbon footprint estimates and generate reports
  • Improve accuracy: Train our classification system based on your corrections
  • Support you: Respond to inquiries and troubleshoot issues
  • Enhance the Service: Develop new features and improve existing ones

3. data sharing

We do not sell your data. We may share data only in these circumstances:

  • Service providers: Cloud hosting (Render), database services (PostgreSQL), and AI processing (for invoice analysis) - all bound by confidentiality agreements
  • Legal requirements: When required by law or to protect our rights
  • Aggregated data: We may publish anonymized, aggregated statistics (e.g., "average emissions by industry") that cannot identify individual organizations

4. data security

We implement appropriate security measures including:

  • Encryption in transit (HTTPS/TLS)
  • Secure database storage with access controls
  • OAuth 2.0 for Xero authentication (we never see your Xero password)
  • Regular security reviews and updates

5. data retention

We retain your data as follows:

  • While connected: Data is retained to provide the Service
  • After disconnection: We delete your transaction data within 30 days
  • Aggregated insights: Anonymized patterns may be retained indefinitely

6. your rights

You have the right to:

  • Access: Request a copy of your data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data
  • Disconnect: Revoke access at any time via Xero's settings

7. cookies and tracking

We use essential cookies only for session management and authentication. We do not use advertising cookies or third-party tracking.

8. international transfers

Your data is processed and stored in Australia. If you access the Service from outside Australia, your data will be transferred to and processed in Australia.

9. children's privacy

Our Service is intended for business use and is not directed at children under 18. We do not knowingly collect data from children.

10. changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page.

11. contact us

For privacy-related inquiries:

Email: privacy@beljay.com.au
Address: Brisbane, Queensland, Australia

view terms of service →