Privacy

What Pottle does

You log in to your supermarket account and Pottle acts on your behalf to add items to your trolley. Pottle never checks out, pays, or places an order. You review and pay on the supermarket's own site.

What we collect

We collect personal information from you, including information about your name, your contact information, your computer or network, your interactions with us (your messages, your trolley, your saved regular buys, and your shopping history), your supermarket connection, and any photos you choose to send, such as a receipt or a shopping list, which we read to find the grocery items.

We collect this information directly from you. When you connect a supermarket account, we also collect information from that account on your instruction, such as your trolley and your purchase history. The first time you connect a supermarket, we read up to 6 months of your past orders on that account to learn what you usually buy. This imported history is kept and deleted with the rest of your shopping history.

Why we collect it

We collect your personal information in order to fill your supermarket trolley from your messages, show you prices, specials, and delivery or pickup times, keep your supermarket connection working, and keep the service reliable, secure, and within fair usage limits. We only collect information that relates to these purposes.

Your password

Your supermarket password is entered once on our secure connect page and sent to Pottle over an encrypted connection. Pottle then types it into the supermarket's real login inside a hosted browser. The password passes through Pottle and the hosted browser provider during that login. It is never stored, never written to logs, and never read by a person. What we keep is the encrypted signed-in session, the same thing your own browser keeps when you stay logged in to a website.

Who we share it with

Besides our staff, we share this information with your supermarket (Woolworths, New World or Pak'nSave) in order to act on your own account as you instruct, such as filling your trolley. We also share it with the messaging service you contact Pottle through in order to deliver your messages and our replies, an AI service provider in order to understand your messages and write replies, a hosted browser provider in order to sign in to your supermarket for you, and our hosting and database providers in order to run and store the service securely.

Some of these providers process information in Australia and the United States, where privacy laws may differ from New Zealand's. We take reasonable steps to make sure your information is protected to a comparable standard wherever it is processed. We do not sell or rent your information, ever.

How we keep it safe

We keep the personal information we hold safe by storing your supermarket connection encrypted, never storing your password at all, and keeping everything else in access controlled systems that only the people running Pottle can reach. Everything travels over secure connections.

How long we keep it

We keep your information for as long as you have a Pottle account. When you close your account, we delete it permanently, straight away, except for short lived service logs that age out on their own and anything the law requires us to keep. You can also delete parts sooner at any time. Log out of one supermarket, leave a shared household, or delete your whole account and everything in it, just by telling Pottle.

Your choice

Providing some information is optional. If you choose not to connect a supermarket login, we cannot fill a trolley or check prices on your account, though you can still ask general questions. If you choose not to send photos of receipts or shopping lists, everything works exactly the same, you can just type the items instead.

Seeing and correcting your information

You have the right to ask for a copy of any personal information we hold about you, and to ask for it to be corrected if you think it is wrong. If you would like to ask for a copy of your information, or to have it corrected, please contact us at hello@pottle.co.nz.

Complaints

If you have a concern, email hello@pottle.co.nz and we will do our best to put it right. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz.

Contact

hello@pottle.co.nz