Privacy Policy

coglog is operated by Invenimus Pty Ltd, ABN 38 699 418 418, Melbourne, Victoria. Contact us at hello@coglog.com.au.

• Account details: your name, email address, password (stored only in encrypted, hashed form), your venue's name and details, and the team members you invite.
• Invoices and receipts you upload or forward: these contain your suppliers' names and details, item descriptions, quantities and prices. They may also include personal information that appears on the document, such as a supplier contact's name, a delivery address or a sales rep's email.
• Billing details: your plan, billing history and invoices. Card payments are handled by our payment provider (Stripe). We never see or store your full card number.
• Usage and device information: pages visited, actions in the app, browser and device type, IP address and error logs. We use these to run, secure and improve coglog.
• Free price checker: the invoices you upload, and your email address if you choose to give it.
• Free supplier price audit: your name, venue, contact details, the invoices and logo you send us, and the report we prepare from them.
• Messages: anything you send us, for example to hello@coglog.com.au.

• To provide coglog: reading your invoices, working out unit prices, building your price history and charts, and sending price-rise alerts and digests.
• To manage your account, team, subscription and payments.
• To contact you about your account and the service, for example sign-in emails, alerts you've switched on, billing notices and important changes.
• To keep coglog secure, prevent abuse (including bot checks on the free checker) and fix problems.
• To improve coglog, using usage data and aggregated information.
• To send you marketing emails, but only if you've agreed. You can unsubscribe at any time.

We don't sell your personal information or your invoice data. Your venue's prices are visible only to your venue's members. We don't share one customer's prices with another, and we won't use your data for price benchmarking across venues without asking you first.

If you request a free price audit, we collect your contact and venue details, the invoices you upload or forward, and an optional logo. We use them only to prepare your audit report and to follow up about it. Audit data is kept separately from customer accounts and is deleted automatically 30 days after we send your report (or 30 days after you submit it, if no report is sent). If you later sign up, your audit invoices are copied into your account only if you choose to import them.

To read your invoices, we send the document to an AI service provider that extracts the text and line items. This happens only to provide the service to you. Unit conversions and price calculations are done by coglog's own software.

We use trusted service providers to run coglog:

• cloud hosting, database and file storage
• email delivery
• payments (Stripe)
• bot protection (Cloudflare)
• AI document processing

They may only use your information to provide their services to us. We may also disclose information if the law requires it, or to protect our rights or the safety of others.

Your information is stored on secure cloud infrastructure. Some of our providers store or process data outside Australia, including in the United States and other countries. We take reasonable steps to make sure they protect it in line with the Australian Privacy Principles.

We protect your information with:

• encryption in transit
• private file storage with short-lived access links
• strict access rules, so each venue can only see its own data
• restricted internal access: our admin tools show usage counts, not your invoices or prices

No system is completely secure. If a data breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner (OAIC) as the law requires.

• Account data: we keep it while your account is active. If you delete your account, we delete your invoices and personal information within 30 days.
• Billing and tax records: we keep these for as long as the law requires, generally 5 years.
• Free checker uploads: these are deleted after 7 days.
• Price audits: deleted 30 days after the report is sent, or 30 days after submission if no report is sent, unless you import them into an account.
• Backups: may keep data for a short extra period before being overwritten.

You can:

• see and correct your account details in Settings;
• export your data;
• change or turn off alerts and digests;
• unsubscribe from marketing;
• delete your account.

You can also ask us for access to, or correction of, the personal information we hold about you by emailing hello@coglog.com.au. We'll respond within 30 days.

We use essential cookies and similar storage to keep you signed in and the site working. We don't use advertising or cross-site tracking cookies.

If you have a privacy concern, email hello@coglog.com.au and we'll try to resolve it within 30 days. If you're not satisfied, you can contact the OAIC at oaic.gov.au.

We may update this policy. If we make significant changes, we'll let you know by email or in the app before they take effect.