We build in your own accounts
Your flow runs in your job system (ServiceM8, Fergus, Simpro, Cin7 or Unleashed), your Xero, and your own automation account on Make, n8n or Zapier. The accounts are in your name and you pay the providers directly.
That means your customer and job data stays in tools you already chose, under their terms. We don’t run your flow on a platform of our own, and you don’t need us to keep it running. At handover you get the credentials and a plain-English runbook.
Which AI providers we use, and when
Most of a flow is plain automation: when this happens in one tool, do that in another. No AI is involved in those steps.
We only use AI where the input is messy. For example, reading a free-text enquiry to pull out the job details, or drafting a reply or a quote for you to approve. When we do:
- it goes through a business API account, set up in your name where possible, not a free chat app;
- we use settings where the provider does not train its models on your data;
- before the build, we tell you in writing which provider we’ll use and where it’s hosted; and
- anything a customer will see waits for you to approve it first.
What we can see
To build and look after a flow we need access to the tools it connects. We have that access during the build and, if you choose Flow Care, while it runs. We remove it whenever you ask.
We don’t copy your client data into our own systems. The exception is the small amount we need to fix a fault, such as the details of one failed step.
Under section 11 of the Privacy Act 2020, we hold any personal information we see on your behalf, and only use it to do the work you’ve asked for. Our terms set this out in full.
How long things are kept
Each provider sets its own retention period, and they vary. Some AI providers keep requests for a set period to check for misuse, then delete them. Where we have a choice, we pick providers and settings with short retention, and we note each one in your runbook so you know what’s kept and for how long.
The Privacy Act and IPP3A
You’re still responsible for how your business uses personal information. Since 1 May 2026, IPP3A in the Privacy Act 2020 means that when you collect information about someone from somewhere other than them, you usually have to tell them. Some flows do that kind of collecting, so we’ll point it out when one does, and you can update your privacy notice before it goes live.
Our guide AI and the Privacy Act: what IPP3A means for your AI tools explains the rule in plain English. It’s our reading, not legal advice.
The free online check
The free Readiness Check on this site is separate from client work. It runs on Google’s Gemini, through Google’s paid API. Our privacy page covers exactly what it sends, who sees it and how long it’s kept.
Ask us
If you want to know where a particular piece of data goes, or want our access removed, email Miro at hello@evenodds.co.nz or book a free 20-minute call. We’ll answer in plain English.