Last updated: June 16, 2025

WEBSITE PRIVACY POLICY

This Privacy Policy applies to all personal information collected by Eggz Pty Ltd (we, us or our) via the website located at eggz.ai (Website).

1. What information do we collect?

The kind of Personal Information that we collect from you will depend on how you use the website. The Personal Information which we collect and hold about you may include:

Identity and contact data such as your name, email address, telephone number, address or social-media handle. We source this directly from you, automatically or from third parties. Account data such as your login and profile information, including your password, and subscription details. We source this directly from you or from third parties. Payment data such as truncated credit or debit card details, bank account details, payment method, billing address and other details of services that you have received from us. We source this directly from you, automatically or from third parties. Communications data such as feedback on our services and other communications with us or with our service providers, competition and survey entries, chat, email or call history, and call recordings if you consent to them. We source this directly from you, automatically, or from third parties. Marketing and advertising data such as interests based on your use of our services, survey responses, promotions you enter, communication preferences, preferences for particular services, and subscription details. We source this directly from you, automatically or from third parties. Device data such as data collected using tags and pixels, including your IP address, ISP, the browser you use to visit our websites, device type and location, operating system, device identifiers and advertising identifiers. We source this automatically. Service usage data such as information about your use of and interaction with our services, including third party services you have integrated. This includes page views and searches, login information, clicks, content interaction, length of visits, and other functional information on service performance. It also includes service utilisation, such as features you buy and use, as well as (if you are a subscriber) how you manage organisations and invited users within your subscription. We source this automatically. Uploaded content such as any personal data in photographs, videos or audio recordings that you upload on our websites, apps, services or social media (where you allow us). We source this directly from you or from third parties.

2. Types of information

The Privacy Act 1998 (Cth) (Privacy Act) defines types of information, including Personal Information and Sensitive Information.

Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable:

(a) whether the information or opinion is true or not; and

(b) whether the information or opinion is recorded in a material form or not.

If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as "Personal Information" and will not be subject to this privacy policy.

Sensitive Information is defined in the Privacy Act as including information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

Sensitive Information will be used by us only:

(a) for the primary purpose for which it was obtained;

(b) for a secondary purpose that is directly related to the primary purpose; and

3. How we collect your Personal Information

(a) We may collect Personal Information from you whenever you input such information into the Website, related app or provide it to Us in any other way.

(b) We may also collect cookies from your computer which enable us to tell when you use the Website and also to help customise your Website experience. As a general rule, however, it is not possible to identify you personally from our use of cookies.

(d) Where reasonable and practicable we collect your Personal Information from you only. However, sometimes we may be given information from a third party, in cases like this we will take steps to make you aware of the information that was provided by a third party.

4. Purpose of collection

(a) We collect Personal Information to provide you with the best service experience possible on the Website and keep in touch with you about developments in our business.

(b) We customarily only disclose Personal Information to our service providers who assist us in operating the Website. Your Personal Information may also be exposed from time to time to maintenance and support personnel acting in the normal course of their duties.

(c) By using our Website, you consent to the receipt of direct marketing material. We will only use your Personal Information for this purpose if we have collected such information direct from you, and if it is material of a type which you would reasonably expect to receive from us. We do not use sensitive Personal Information in direct marketing activity. Our direct marketing material will include a simple means by which you can request not to receive further communications of this nature, such as an unsubscribe button link.

(d) You can manage your marketing preferences through your account settings or by contacting our Privacy Officer. We will process opt-out requests within 5 business days and maintain records of your preferences. Marketing communications will not exceed 10 messages per month, and each communication will clearly display preference management options. If you choose to opt-out, we will retain minimal Personal Information necessary to ensure compliance with your request.

5. Security, Access and correction

(a) We store your Personal Information in a way that reasonably protects it from unauthorised access, misuse, modification or disclosure. When we no longer require your Personal Information for the purpose for which we obtained it, we will take reasonable steps to destroy it, or to anonymise or de-identify it.

How long we keep your information. We keep the information in your eggz account for as long as you have an account with us, and for a period afterwards where we still have a business or legal reason to keep it. We don't set a single fixed period, because different records have different obligations attached to them. Where a record is covered by an obligation like that, we keep it for at least as long as the obligation lasts.

Deleting your information. You can ask us to delete your information at any time by emailing support@eggz.ai, and you can delete individual records yourself from within eggz at any time. When you ask us to delete your account we will remove your information from our live systems, except for anything we're required by law to keep. Deleted information may remain in routine encrypted backups for a short period until those backups are cycled out, after which it's gone.

Where your information is held. We don't run our own data centres. Your information is held on servers operated by established cloud providers on our behalf, protected by encryption, access controls and audit logging. When we delete information, we do so through those providers' standard deletion processes.

(b) The Australian Privacy Principles:

(i) permit you to obtain access to the Personal Information we hold about you in certain circumstances (Australian Privacy Principle 12); and

(ii) allow you to correct inaccurate Personal Information subject to certain exceptions (Australian Privacy Principle 13).

(c) Where you would like to obtain such access, please contact us in writing on the contact details set out at the bottom of this privacy policy.

6. Complaint procedure

If you have a complaint concerning the manner in which we maintain the privacy of your Personal Information, please contact us on the contact details set out at the bottom of this policy. All complaints will be considered by our Privacy Officer and we may seek further information from you to clarify your concerns. If we agree that your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.

7. Overseas transfer

Your Personal Information may be transferred to recipients located in Australia, United States of America, Singapore and Japan. You consent to us transferring your Personal Information to Australia, United States of America, Singapore and Japan in the knowledge that if your Personal Information is mishandled in that jurisdiction, we disclaim responsibility and you will not have a remedy under Australian law.

8. GDPR

In some circumstances, the European Union General Data Protection Regulation (GDPR) provides additional protection to individuals located in Europe. The fact that you may be located in Europe does not, however, on its own entitle you to protection under the GDPR. Our website does not specifically target customers located in the European Union and we do not monitor the behaviour of individuals in the European Union, and accordingly the GDPR does not apply.

9. How to contact us about privacy

If you have any queries, or if you seek access to your Personal Information, or if you have a complaint about our privacy practices, you can contact us through: support@eggz.ai.

BROWSER EXTENSION PRIVACY POLICY

Last updated: 1 August 2026

This section is about the eggz Tab Manager browser extension for Chrome. It sits alongside the website policy above rather than replacing it.

The short version

Your workspaces and your saved tabs stay on your own computer. Nothing about your tabs or your browsing is sent anywhere until you sign in to eggz and use one of the features that needs eggz. When something is sent, it goes to one place: the eggz app at app.eggz.ai. There is no analytics in it, no advertising, and no other company involved.

What stays on your computer

Your workspaces and folders, and the tabs saved in them: names, page titles, web addresses and icons. Your settings, including any sites you have told it never to suspend. Session snapshots, taken every five minutes of the window you are working in, keeping the last fifty so you can go back to how things were. A short list of up to fifty sites you have been to recently, used to work out when to offer to save a bill, which your browser clears when you close it. Layout preferences, like how wide you dragged the panel.

None of that is sent to us. It sits in your browser's own extension storage. Tabs in incognito windows are never saved.

What gets sent, and when

All of this happens only while you are signed in to an eggz account.

There is one exception, because it is how the extension finds out whether you are signed in at all. When you open it, and again when you switch back to it, it asks the eggz app whether your browser still has a live eggz session. The answer is yes or no. Nothing about your tabs, your browsing or the page you are on goes with that question. Like any request to eggz, your browser attaches its eggz cookie if it still has one, which is how the question gets answered at all.

If you have not signed in during this browsing session, that check is the only request the extension makes. Nothing else.

There is one more case, and it only applies if you were signed in earlier and your session has since ended. The extension remembers you were signed in, and until the check answers it carries on doing the things it does for someone who is: asking what is waiting on your approval, loading your recent conversation with the assistant, and checking how many assistant messages are left on your account. Those are questions, not uploads. None of them carry anything about your tabs, your browsing or the page you are on, and they stop as soon as the extension learns the session is over.

When you use the assistant. Every time you send a message, the extension includes the titles and web addresses of the tabs you have open, up to two hundred of them, so the assistant knows what you are working on. It does not include what is on those pages. Incognito tabs are left out, and so are browser pages like chrome:// and files you have opened from your own disk.

When the assistant needs to read a page. It has to ask you first. A card appears naming the page it wants, and nothing is read or sent until you press Approve. If you approve, the extension sends that page's address, title and its text. You are asked every single time, and approving once does not approve the next one.

When the assistant looks something up in eggz. To answer a question like whether a bill has already been entered, it may need your accounting records or your email history from your eggz account. Each of those is a separate request that appears on screen for you to approve or refuse. Those lookups run on our servers. The extension does not read your accounting software or your mailbox itself.

When you save a bill or receipt. Pressing "Save to eggz" uploads that document to your eggz account. If you are looking at a PDF, the PDF itself goes up, so a long invoice does not get cropped. Otherwise it sends a picture of what is on the screen. You can also pick a file from your computer instead. Nothing is uploaded unless you press the button.

When you ask it to organise your tabs. It sends the titles and web addresses of your open tabs so it can work out sensible groups. You see the suggestion before anything moves.

Approvals. The approvals inbox is off unless you turn it on, and while it is off the extension never asks your eggz account about approvals at all. If you switch it on in Settings, the extension then checks your eggz account about once a minute for automation decisions that are waiting on a person, and sends your Approve or Deny back when you make one. Switching it off stops those checks. The setting is remembered against the eggz account that turned it on, so it does not carry over to someone else signing in on the same computer.

Signing in. Your name, email address and organisation come back from eggz so the extension can show who is signed in. Your session is a cookie your browser holds, which the extension cannot read. It stores no passwords, no access tokens and no API keys.

Who else gets your data

Nobody. The extension talks to one address, app.eggz.ai. There are no analytics tools, no advertising networks, no crash reporters and no tracking in it. We do not sell your data, we do not use it for advertising, and we do not use it to work out whether to lend you money.

There is one request worth naming because it does not go to us. When you save a bill that happens to be a PDF, the extension downloads that PDF from the site you are already looking at, so it has the real file to upload. It is an ordinary request to a site you are already on, it carries no cookies, and nothing about you is sent to that site.

What the extension does not do

It does not read your pages in the background, it does not record what you type, and it does not build a profile of where you go.

There is one thing it looks at without being asked, and it is worth explaining because it sounds worse than it is. To know whether to offer you the "save this bill" bar, it reads the first two thousand characters of the page you are on and counts a few telltale words. That happens inside your browser. The text it read is thrown away, and none of it is sent anywhere. What it keeps is only whether the page looked like a bill.

Why it asks for the permissions it does

Chrome shows you a list at install time, and two of the entries sound alarming.

"Read your browsing history" is the wording Chrome uses for the ability to see your tabs' titles and addresses. That is the whole product: a workspace is a saved set of tabs, so it has to be able to read them to save them and reopen them.

"Read and change all your data on all websites" is the wording for being able to work on whatever page you are on. It needs that because the panel is drawn over the page you are reading, because a bill can be on any supplier's website, and because reading a page for the assistant means reaching into that page. It is used for those things and nothing else.

Keeping it and deleting it

What is on your computer stays there until you delete it. Removing the extension removes it. Inside the extension, Settings has a "Wipe all data" button that permanently deletes your workspaces, folders, saved links and settings, and an "Export backup" if you want a copy first, which you can put a password on.

Documents you saved into eggz, and anything the assistant recorded in your account, live in your eggz account rather than in the extension. They are kept and deleted under the eggz privacy policy above. To have them removed, contact us using the details below.

If this changes

If we change what the extension collects, or where it sends it, we will update this page and tell you in the extension before the change takes effect.

Chrome Web Store Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

How to contact us about the extension

For any privacy question about the extension, including a request to have data removed, contact us through: support@eggz.ai.