How MeterBack collects, uses, protects and retains personal information and customer data.
MeterBack is a trading name operated by a New Zealand sole trader. This notice explains how MeterBack handles personal information and customer data when providing Recovery Snapshots, audits, recovery support, correspondence and related services.
MeterBack is intended to comply with the New Zealand Privacy Act 2020. Where Australian privacy law applies to a particular activity or customer, MeterBack will also handle personal information consistently with applicable requirements of the Australian Privacy Act 1988 and Australian Privacy Principles.
Information may include:
Please do not provide passwords, API keys, private keys, authentication secrets, source code, unrelated personal records or customer content unless MeterBack has specifically requested them and they are necessary for the engagement.
MeterBack requests only information reasonably necessary for the review. Where practical, customers may redact irrelevant personal information or replace employee names with internal identifiers.
MeterBack may use AI and automated systems to extract, compare, classify and analyse supplied material. Material financial findings are not treated as proven merely because an AI system identifies them; they are subject to evidence checks, deterministic calculations and/or independent review.
MeterBack does not intentionally use identifiable customer source documents to create public datasets or train a public MeterBack model. Where third-party AI or document-processing providers are used, MeterBack uses business services and controls intended to protect customer information and will not knowingly authorise general public-model training on customer confidential material without agreement.
MeterBack may use reputable cloud hosting, business email, file storage, AI, document-processing and security providers. Depending on the provider and service configuration, information may be processed or stored in New Zealand, Australia, the United States or other locations used by those providers.
MeterBack will take reasonable steps appropriate to the service and applicable law when information is disclosed or processed outside the customer's country.
Customer information is not sold. MeterBack may disclose information only where reasonably necessary to deliver the service, where the customer authorises disclosure, where a professional adviser is engaged under confidentiality, or where disclosure is required by law.
MeterBack uses access-controlled business systems and aims to minimise the number of locations in which customer information is stored. No internet or cloud service can be guaranteed completely secure, but reasonable administrative and technical safeguards are used for the nature of the information handled.
Customer source files are normally retained for the duration of the engagement and for up to 90 days after the engagement is closed, unless a longer period is agreed or retention is reasonably required for an unresolved recovery action, legal obligation, dispute, accounting record or security purpose.
Deletion from active systems does not necessarily remove information immediately from encrypted backups or provider recovery systems, which may expire on their normal retention cycle.
Where applicable, individuals may request access to personal information held about them and ask for inaccurate information to be corrected. Requests can be sent to hello@meterback.com.
Please send privacy concerns first to hello@meterback.com so they can be investigated. Individuals may also have the right to complain to the New Zealand Office of the Privacy Commissioner or, where Australian privacy law applies, the Office of the Australian Information Commissioner.
This notice may be updated as MeterBack's systems, providers or jurisdictions change. The current version will be published on this website.