This page explains what information Even Odds collects, why, who else sees it, and how long we keep it. It covers this website, the AI Readiness Check, the contact form and our paid work.
Even Odds Limited is a New Zealand company. We follow the Privacy Act 2020. If you have a question about anything here, email Miro at hello@evenodds.co.nz.
The short version
- The AI Readiness Check runs on Gemini, Google's AI, through Google's paid API. Your answers are sent to Google to run the check. Google doesn't use them to train its AI, and keeps them for 55 days to catch misuse. Please still leave names and customer details out of the check.
- When you finish the check, a copy of your answers and results is emailed to us, so we can follow up if you ask us to.
- We use Google Analytics to count visits. It doesn't get your answers or your email address.
- We don't sell your information, and we don't use it for advertising.
- You can ask to see, correct or delete what we hold about you at any time.
What we collect and why
When you use the AI Readiness Check
What you tell it. Your answers in the chat, such as what your business does, how many people work in it, roughly how many hours go on admin, the software you use and what you struggle with. If you use the "try it now" step, also the text you paste in (up to about a page).
Why. To work out your score and write your report. We also get a copy (see below) so we can understand what businesses need and follow up if you ask us to.
Your IP address. Our server holds it for up to 45 minutes while your check is running, and in a separate counter for up to one hour, to stop people overloading the check. It is not sent to the AI provider and not emailed to us.
Your email address, only if you ask us to email your report. We use it to send you the report. We also keep a copy of that email, so we know who asked.
You don't have to give us anything. The check works without your name or email. If you don't answer a question, your report will be less specific.
When you use the contact form
Your name, email address, business name (optional), what your message is about, and the message itself. We use them to reply to you and, if you go ahead, to do the work. If you leave out your name, email or message, we can't reply, so the form won't send.
When you book a call
The booking calendar on our contact page is run by Cal.com. It collects your name, email address and the time you pick, and sends us a calendar invite. Cal.com handles this directly under its own privacy policy.
When you become a client
To quote, invoice and do the work, we collect contact details for the people we deal with, billing details for your business, and information about how your business runs. Some of our work involves your systems, which may hold personal information about your staff or customers. When that happens we handle it on your behalf, only to do the job you've asked for (see "Information about your customers" below).
When you browse the site
We use Google Analytics to see how many people visit, which pages they read, and which buttons they press (for example "started the check" or "finished the check", with the score). Google Analytics uses cookies. It doesn't store your IP address; Google uses it briefly to work out your rough location (city or region) and then discards it. We don't send Google your check answers, your name or your email address.
To opt out, you can block cookies in your browser or install Google's opt-out add-on: tools.google.com/dlpage/gaoptout.
The check also saves your progress in your browser tab, so a reload doesn't lose your place. That copy stays on your device and is cleared when you close the tab.
Who else sees your information
We use a few outside services to run the site. Each one only gets what it needs.
| Service | What it does for us | What it receives | Where |
|---|---|---|---|
| Google (Gemini API) | Runs the AI in the Readiness Check and the "try it now" step | Your check answers and anything you paste into the "try it now" box. Not your name, email or IP address, unless you type them into the chat. | Google data centres, mostly outside NZ |
| Resend | Sends emails from the site | The check summary and transcript, your email address if you ask for your report, and contact form messages | United States |
| Google Workspace | Our email inbox | Every email the site sends us, and your emails to us | Google's data centres (mostly outside NZ) |
| Cloudflare | Hosts the website and the check | Every request to the site, including your IP address. Short-term error logs. | Global network |
| Google Analytics | Visitor statistics | Pages viewed, buttons pressed, rough location, device type | United States |
| Cal.com | Booking calendar | What you enter when you book | United States |
We don't sell or rent your information, and we don't share it with anyone else unless the law requires us to.
About the AI provider, plainly
We use Google's paid Gemini API. Google says it doesn't use prompts or responses on the paid API to improve its products. It keeps them for 55 days, only to detect misuse of its service, and then deletes them. Google handles your answers only to run the check for us, not for its own purposes.
Google's servers are mostly outside New Zealand, so your answers leave the country while the check runs. If you'd rather that didn't happen, don't start the check. Email us instead and we'll talk it through with you directly.
Please don't put names, phone numbers, customer details, health information or anything confidential into the check or the "try it now" box. The check doesn't need them.
How long we keep it
| Information | How long |
|---|---|
| Your check session on our server (answers, IP address) | 45 minutes, then deleted automatically |
| Rate-limit counter (IP address) | 1 hour |
| Server error logs | Up to 7 days |
| Copies held by our email sending service (Resend) | About 30 days |
| Check summaries and contact form messages in our inbox | 12 months, then deleted, unless you've become a client or asked us to keep in touch |
| Client records (quotes, invoices, emails, project notes) | 7 years after the work ends, because tax law requires us to keep business records |
| Google Analytics data | Up to 14 months |
| Check answers held by Google | 55 days, then deleted by Google |
Information about your customers
When we work on your systems, we may see personal information about your customers or staff. We treat it as yours. Under section 11 of the Privacy Act we hold it on your behalf: we use it only to do the work you've asked for, we don't use it for our own purposes, and we don't send it to an AI tool that trains on it or keeps it. You remain responsible for telling your customers how their information is used, and we'll help you update your own privacy statement if the work changes that.
Keeping it safe
We send everything over encrypted connections, keep the check's data for 45 minutes, limit who can access our inbox and tools. No system is perfectly secure. If a privacy breach is likely to cause someone serious harm, we will tell the people affected and the Privacy Commissioner, as the law requires.
Your rights
You can ask us:
- what information we hold about you
- to correct it if it's wrong
- to delete it
Email hello@evenodds.co.nz. We'll reply within 20 working days, and usually much sooner. It's free. We may need to check it's really you before we hand anything over.
We can delete what we hold. Google deletes its copy of check answers after 55 days on its own schedule.
Complaints
If you're unhappy with how we've handled your information, please tell us first at hello@evenodds.co.nz and we'll try to put it right. If you're still not happy, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Changes to this page
If we change how we handle information, we'll update this page and the date at the top. If the change is significant (for example a new AI provider), we'll say so on the check page too.
Contact
Even Odds Limited
hello@evenodds.co.nz