Privacy notice

Last updated 21 September 2026.

Part 1: About this notice

Who we are

Formuly builds a financial modeling assistant delivered as a Microsoft Excel add-in. This notice explains how we handle personal information.

Formuly operates through two companies, referred to together in this notice as "Formuly", "we" and "us":

• Formuly Technologies Limited (New Zealand) builds and operates the Formuly product and website, and is responsible for personal information collected through them, including account information, and for information about its own personnel.
• Formuly Pty Ltd (Australia) is responsible for personal information collected through its Australian sales activity, and for information about its own personnel.

The two companies are related and share personal information with each other for the purposes described in this notice. Either company can be contacted about any matter in this notice, using the details in Part 6.

What this notice covers

It covers personal information we collect for our own purposes, from visitors to our website, people who contact us, prospective and current customers, and our own personnel. It does not cover personal information contained within the data our customers put into the Formuly product; Part 4 explains how that is handled.

The laws we follow

We handle personal information in accordance with the Privacy Act 2020 (New Zealand) and, where it applies to us, the Privacy Act 1988 (Cth) (Australia), together with other privacy, contractual, and regulatory requirements that apply to us.

Part 2: Information we collect for our own purposes

What we collect

Depending on how you interact with us, we may collect:

• Contact and identity information: name, email address, phone number, job title, and the organization you work for.
• Account information: the details needed to create and support a Formuly account.
• Correspondence: the content of inquiries, support requests, and other communications you send us.
• Website, landing page, and email information: technical and usage information, such as your IP address, browser and device type, the pages you view, how you reached us, and whether you open or click our emails, collected using cookies and similar technologies (see Part 3).
• Personnel information: for employees and contractors, the information needed to employ or engage you, pay you, and meet our employment and tax obligations. Additional privacy information may be provided to personnel where relevant to their employment or engagement.

We collect personal information only where it is reasonably necessary for a legitimate and lawful business purpose, or where collection is otherwise permitted or required by law, and we collect it by lawful and fair means. We do not ordinarily collect sensitive information; where we do, we collect it only with your consent or as otherwise permitted by law.

If you do not give us information we ask for, we may not be able to provide Formuly, respond to you, or employ or engage you. Some personnel information, such as tax details, is required by law.

How we collect it

Most personal information we hold is given to us directly, when you contact us, register for or use the Formuly product, attend a meeting or event with us, or apply to work with us.

We may also collect personal information indirectly, for example from your employer, from a colleague who refers you, or from publicly available sources such as a company website or professional network. Where we collect personal information about you from someone else, we take the steps required by law to make you aware of it, unless an exception applies.

Why we use it

We use personal information to:

• Provide and support the Formuly product, and improve it using information about how our website and services are used;
• Communicate with you, including responding to inquiries and providing service and security notices;
• Manage our customer and supplier relationships, including billing;
• Meet our legal, regulatory, contractual, and security obligations;
• Employ and engage our personnel; and
• Market our products to businesses that may be interested, where permitted by law. You can opt out of marketing communications at any time.

We use and disclose personal information for the purposes described in this notice, and for other purposes permitted or required by applicable law, contract, or your authorization.

Who we share it with

We share personal information with service providers who help us operate our business and deliver the Formuly product. We require service providers handling personal information to use and protect it in accordance with applicable contractual and legal requirements. They include providers of:

• Cloud hosting and infrastructure;
• Email, productivity, and collaboration tools;
• AI services, including tools that assist with drafting, analysis, and meeting notes;
• Analytics, marketing, and customer relationship management providers, including professional networking platforms (see Part 3);
• Payroll, accounting, and professional services;
• Customer support and security tooling.

We may use an AI tool to transcribe and summarize meetings and calls. We tell participants when we do, and you can ask us not to.

We may also disclose personal information where required or authorized by law, to protect our rights or the safety of others, or in connection with a sale or restructure of our business.

Part 3: Our website

This part explains how we handle personal information collected through our website, www.formuly.com, and our landing pages.

Analytics and advertising

When you accept cookies, three services help us understand how the site is used and how visitors find us:

• Google Analytics (Google): pages viewed, how you arrived, your device and approximate location. It sets first-party cookies whose names begin with _ga.
• Hotjar (Hotjar, part of Contentsquare): recordings of mouse movement, scrolling and clicks on our pages, and heatmaps built from them.
• LinkedIn Insight Tag (LinkedIn): measures whether visitors arrived from our LinkedIn advertising and lets us show relevant advertising on LinkedIn.

We also use cookies and similar technologies in our emails, to understand whether they are opened and clicked.

Your choices

Where the law requires it, we ask for your consent first. If your browser reports a European time zone, Google Analytics runs without cookies and neither Hotjar nor the LinkedIn Insight Tag loads until you choose Accept in the cookie banner. Google Analytics also withholds cookies from visitors it locates in the EU, EEA, UK or Switzerland until they accept. Elsewhere, these services run when you visit. None of them load on this notice or our terms of use.

You can decline, or change your choice, at any time using the Cookie settings link in the footer of our homepage. If your browser sends a Global Privacy Control signal, we treat it as a decline. You can also opt out directly with Google Analytics, Hotjar and LinkedIn, or block or delete cookies in your browser, although some parts of the site may not work as intended.

Booking a demo

If you book a demo, you do so through a booking calendar embedded from HubSpot (HubSpot, Inc.). The details you enter are stored in our HubSpot account so we can hold the meeting and follow up with you.

Where this information is processed

These providers may process personal information outside New Zealand and Australia, under their agreements with us and their own privacy policies. See Part 5.

Part 4: Customer data in the Formuly product

Personal information in customer data

Our customers use Formuly to build and analyze financial models. Those models and related material may contain personal information. Where personal information is contained in customer data and Formuly processes it on behalf of a customer, that processing is governed by our agreement with that customer, and the customer’s own privacy obligations govern how they collect and use that information. We do not use customer data for our own purposes except as our agreement permits.

If you believe an organization using Formuly holds your personal information and you want to access or correct it, please contact that organization directly. If you contact us instead, we will refer your request to them, unless the agreement or the law requires otherwise.

Sub-processors

Some of our service providers process personal information contained in customer data on our behalf. We call these sub-processors. The sub-processors for the Formuly product are:

We assess privacy and security risks associated with sub-processors before engagement, and review them at least annually and when their service or data handling materially changes. We tell customers about changes to this list.

AI and automated processing

The Formuly product uses AI services to assist customers with financial modeling. Outputs are presented to the customer for their review and judgment.

Formuly does not authorize customer content to be used to train AI models, except where expressly agreed with the customer.

Formuly does not make decisions about individuals based solely on automated processing.

Part 5: How we protect and manage information

This part applies to all personal information covered by this notice.

Sending information overseas

Formuly operates in New Zealand and Australia, and some of our service providers are located overseas. This means your personal information may be stored or processed outside New Zealand and Australia. Our service providers may process personal information in countries including the United States and member states of the European Union, depending on the service used.

Before we disclose personal information overseas we assess the disclosure against applicable cross-border privacy requirements and rely on a lawful basis for it, applying safeguards appropriate to the sensitivity of the information.

Keeping information secure

We protect personal information against loss, misuse, and unauthorized access, disclosure, alteration or destruction using access controls, encryption, and other measures appropriate to the sensitivity of the information.

No system is completely secure. If a privacy breach occurs, we assess it and, where it is notifiable, make the notifications required by applicable law within the required timeframes.

How long we keep it

We keep personal information only for as long as it is needed for the purposes described in this notice, or for as long as we are required to keep it by law or contract. When it is no longer required, we delete, destroy or anonymize it in accordance with our retention and backup processes, subject to applicable legal and contractual requirements.

Part 6: Your rights and contacting us

Your rights

You may ask us to give you access to the personal information we hold about you, and to correct it if you think it is wrong.

We will respond within the timeframes required by law. If we decline a request, we will tell you why and give you any other information the law requires. If we do not correct information as you have asked, you may ask us to attach a statement to it recording that you consider it inaccurate.

Contact us and complaints

Our Privacy Officer, a role held by our Chief Technology Officer or an authorized delegate, is the first point of contact for any privacy question, request or complaint. We will review privacy complaints and respond within a reasonable period, taking into account any timeframes required by applicable law.

• Email: privacy@formuly.ai
• Post, New Zealand: Privacy Officer, Formuly Technologies Limited, Smales Farm, 72-74 Taharoto Road, Takapuna, Auckland 0622, New Zealand
• Post, Australia: Privacy Officer, Formuly Pty Ltd, 131 Coolangatta Road, Coolangatta NSW 2535, Australia

If you are not satisfied with our response, you can complain to a privacy regulator:

• New Zealand: Office of the Privacy Commissioner, privacy.org.nz
• Australia, where applicable: Office of the Australian Information Commissioner, oaic.gov.au

Changes to this notice

We review this notice at least once a year, and update it when our handling of personal information materially changes or when the law requires. The date at the top shows when it was last updated.

Where we make a material change, including using personal information for a new purpose, we tell customers what has changed by email or in the product.