Privacy Policy

Who we are

In this Privacy Policy, "us", "we" or "our" means Hey Dawn Pty Ltd. We are committed to respecting your privacy. This Privacy Policy sets out how we collect, use, store and disclose your personal information.

Because of the small business exemption in the Privacy Act 1988 (Cth), we are not currently required to comply with the Australian Privacy Principles. We have written this policy to them anyway, and we intend to keep doing that as we grow past the threshold.

By providing your personal information to us, you consent to our collection, use and disclosure of it in accordance with this Privacy Policy and any other arrangements that apply between us. We may change this Privacy Policy from time to time by publishing the change on this page and moving the date at the top.

Personal information means information or an opinion about an individual who is reasonably identifiable. It includes your name and contact details, and it can include information about how you use our website and app.

What kinds of personal information do we collect?

We may collect the following types of personal information:

• your name, your email address, and a password if you set one;
• which mailbox you connect — Gmail or Outlook — and the access credential that lets Dawn read it;
• basic details about messages in that mailbox, including the sender, recipients, subject, date, selected message headers, and attachment names and file details;
• where Dawn has reason to think a message may be something you need to pay, the email body and the contents of any attachment Dawn opens;
• the details Dawn extracts from those documents: supplier, amount, currency, due date, invoice number, and the payment details printed on the bill;
• your history with each supplier, and the record of every decision Dawn made about each bill and why;
• your settings, including any standing rules you write for Dawn to follow;
• where you connect a payment method, the limited details our payment provider returns to us — we never receive or store a full card number;
• your device and browser, IP address, approximate location derived from it, and which pages and screens you use.

Personal information about other people

Bills are written by other people, so reading a mailbox necessarily collects information about the businesses and individuals who sent them — a name, an email address, an ABN, bank or payment details, and what they have billed you before.

We collect that information from you, in the course of providing the service to you. We use it only to show you the bill, help you deal with it, tell you when something about a supplier has changed, and keep the original material available for you to check. We do not use it to market to those people, we do not build a profile of them for anyone else, and we do not sell it.

How do we collect personal information?

We collect personal information:

• directly from you, when you join the early-access list or create an account;
• from the mailbox you connect, once you have authorised that connection with Google or Microsoft;
• from attachments Dawn opens while checking a possible bill;
• directly from you again, whenever you change a setting or correct something; and
• automatically, when you use our website or app.

When you join the early-access list, we also record which country the request came from — the country only, and not the IP address it was worked out from.

We do not buy lists, and we do not collect personal information about you from data brokers.

What Dawn does, and does not do, in your mailbox

Dawn checks as little of your mailbox as it can. It starts with basic details about each message, such as the sender, recipients, subject, date and attachment names. It reads the email body only when those details suggest it could be something you need to pay, and it opens an attachment only when there is a reason to inspect that file.

Its access is read-only. Dawn does not send email as you, reply to anyone on your behalf, or delete, archive or label anything in your mailbox. We ask for the narrowest access that lets Dawn do its job, and it is asked for in the open: the permission is named on the screen where you grant it — when you sign in with Google or Microsoft, or when you connect a mailbox from inside Dawn — and declining it leaves your account working.

You can disconnect a mailbox at any time from your settings, or revoke our access directly with Google or Microsoft. Disconnecting stops Dawn reading anything new and does not change how you sign in.

Why do we collect, hold, use and disclose personal information?

We may collect, hold, use and disclose your personal information:

• to create and administer your account, and to let you sign in;
• to find what needs paying in the mailbox you connect and show it in Dawn;
• to pull out the details of each bill, and to keep the original email and any attachment Dawn opened available for you to check;
• to compare a bill against your history with that supplier, so we can tell you when a payment detail or an amount has changed;
• to let you deal with a bill, and to follow any standing rules you have written;
• to send you service and administrative messages about your account and your bills;
• to operate, protect, improve and optimise our website, our app and the service;
• to measure our own usage and costs; and
• to comply with our legal obligations and resolve disputes.

We do not use your personal information for any other purpose, and we do not send you anything you did not ask for.

How we use artificial intelligence

AI helps Dawn read your bills and pull out their details. The content of those documents is sent to our AI providers for that purpose and for no other. They are engaged on terms that do not permit them to train their models on your content.

AI does not decide whether money moves. A new supplier, changed bank details, or an amount that does not fit your history always comes back to you before anything happens.

Do we use your personal information for direct marketing?

The emails we may send you before you have an account — the welcome note and any early-access invitation — are marketing under the Spam Act 2003 (Cth), even though they are written by a person and read like notes. You opt in by entering your address on this website.

You can opt out at any time. Reply to either email with "unsubscribe" in the subject line, or write to privacy@heydawn.ai, and we will action it within five working days. We do not supply your personal information to anyone else for their marketing.

Service messages about your own account and your own bills are not marketing, and stopping marketing does not stop those.

To whom do we disclose your personal information?

We may disclose your personal information to:

• third party suppliers and service providers who help us run the service — in particular Neon, which hosts our database; Vercel, which hosts our website and app, stores the evidence behind each entry, and routes our AI requests; Anthropic, whose models read your bills; Resend, which sends our email; and PostHog, which measures how our website and app are used;
• Google or Microsoft, when you sign in, when a mailbox is connected, and when we read from it;
• our payment provider, where you choose to connect a payment method;
• professional advisers;
• anyone to whom our assets or business, or any part of them, are transferred; and
• other persons, including government agencies, regulatory bodies and law enforcement agencies, or as required, authorised or permitted by law.

We do not disclose your personal information to advertisers, data brokers or list buyers, and we do not sell it to anyone for any purpose.

Disclosure of personal information outside Australia

The service providers named above are United States companies. Your personal information may be stored in, or accessed from, outside Australia — including the United States — even where the servers themselves are in Australia.

We will take reasonable steps to ensure that any overseas recipient deals with your personal information in a way that is consistent with the Australian Privacy Principles. We have deliberately not asked you to consent to overseas disclosure on terms that would release us from responsibility for what those recipients do with it.

Using our website and cookies

We may record certain information about your use of our website and app, such as which pages you visit, the time and date of your visit, and the internet protocol address assigned to your device.

We may also use cookies or similar technologies that help us understand how the site is used and remember your preferences. Cookies are small files stored on your computer, phone or other device. You can disable them through your browser, but parts of our website and app may not work as intended if you do.

There is no advertising cookie and no ad network on this site.

Security

We hold your personal information in electronic form, in a database and object store run by the providers named above. We take reasonable steps to protect it from misuse, interference and loss, and from unauthorised access, modification or disclosure. Those steps include encryption in transit and at rest, access controls, and keeping mailbox credentials separate from the rest of your data.

No system is perfect. If a data breach ever occurs that is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner about it.

How long we keep it, and what happens when you leave

While you have an account, we keep what we hold for as long as the account exists. We do not currently run a shorter retention schedule, and we would rather say so than describe one nothing enforces.

You can export everything Dawn holds about your bills at any time, from your settings.

Account closing is not self-serve yet. Write to privacy@heydawn.ai if you want to close your account. You can disconnect your mailbox at any time while we handle the request, which stops Dawn reading anything new.

Before we close the account, we will explain what will be erased and what, if anything, must be kept. We will not call it a deletion if any account data will remain.

Accessing or correcting your personal information

You can access the personal information we hold about you by contacting us at privacy@heydawn.ai, or by exporting it yourself from your settings. Sometimes we may not be able to give you access to all of it, and where that is the case we will tell you why. We may need to verify your identity first.

If you think any personal information we hold about you is inaccurate, tell us and we will take reasonable steps to correct it. Where Dawn extracted something wrongly from a bill, correcting it adds a corrected version rather than overwriting what was there — both stay visible to you.

Making a complaint

If you think we have breached the Privacy Act, or you want to complain about how we have handled your personal information, write to privacy@heydawn.ai. Include your name, your email address, and a clear description of the complaint. We will acknowledge it and respond within 30 days.

If you think we have not resolved it properly, you can refer the complaint to the Office of the Australian Information Commissioner at oaic.gov.au. We would rather you did that than let it go.

Contact us

Privacy enquiries, access and correction requests, and complaints: privacy@heydawn.ai.