Short, because there is not much to say: the apps never send anything anywhere, and payments are handled by Lemon Squeezy.
Version 1.5 — 14 October 2026 (section 4 now says that we use Cloudflare Web Analytics, which sets no cookies, to count visits to the website. Version 1.4: section 2B now covers the licensed name only, because REX Paperworks and REX Visio2DXF are no longer tied to a computer, so no computer code is collected. Version 1.3 added the items the Office of the Privacy Commissioner (NZ) and the Office of the Australian Information Commissioner (APP 1.4) expect a statement to cover: what happens if you do not give us information, how we handle complaints, and which countries your information may go to.)
This statement explains what personal information Energy Conscious Design Limited, trading as REX Office Software ("ECD", "we"), collects from people who buy, trial or ask about REX software, and how we handle it. We are a small Auckland company and we collect very little. We comply with the New Zealand Privacy Act 2020 and, where it applies to us, the Australian Privacy Act 1988.
1.1 REX Accounts, REX Paperworks and REX Visio2DXF run entirely on your computer. They do not send your data, your usage, your licence key or your identity to us or to anyone else. There is no account, no telemetry, no analytics and no "phone home" in the software. (The website is covered in section 4.) Licence keys are checked on your computer without an internet connection.
1.2 Your books, documents and drawings stay on your computer. We cannot see them and we never ask for them. If you choose to email us a file for support, see clause 3.
1.3 Updates are downloaded from our website by you, in your browser, not by the software.
2.1 Card purchases. Payments are processed by Lemon Squeezy LLC (USA), which acts as merchant of record. Lemon Squeezy collects your name, email, billing country and payment card details, and sends us your name, email address, the company name you entered for the licence, the product bought, the order number and the date. We never see or store your card number. Lemon Squeezy's privacy policy at lemonsqueezy.com governs its own handling of your information.
2.2 Invoice or email orders. We collect your name, business name, email address, billing address if you need it on the invoice, and a record of payment received. We do not collect bank details beyond what appears on our own bank statement.
2.3 If you do not give us this information. We cannot issue, reissue or refund a licence without a company name and an email address to send the key to, and we cannot answer a support question without an address to reply to. Everything else (billing address, phone number) is optional.
2.4 Licence record. We keep a record of each licence key we issue: the company name (REX Accounts) or the licensed user's name (REX Paperworks, REX Visio2DXF) on the key, the email address it was sent to, the product and version, the order number and the purchase date. We need this to reissue keys, honour the 12-month update period and handle refunds.
2A.1 To get a free 60-day trial key for REX Accounts you give us, on our website, your name, your company or trading name, your email address and (optionally) your country, and you tick that you accept the Licence Agreement. We record those details with the date, the key's expiry date, the version of the agreement you accepted and the internet address the request came from, and we email the key to you.
2A.2 We use these details to issue and reissue the trial key, to answer your questions, to tell you when the trial is about to end, and, only if you tick the box, to let you know when REX Accounts is updated. Trial-ending and product-update emails come from us and every one of them tells you how to stop them (reply, or email [email protected]). We send no other marketing and never pass your details to anyone else for theirs.
2A.3 If you do not give us a name, company name and email address we cannot issue a trial key; you can still read the manual and buy a licence.
2A.4 The trial software itself, like the licensed software, runs entirely on your computer and does not report anything to us.
2B.1 These two products are licensed to one named user. When you buy, we make the key for the name you gave at checkout and email it to the address you bought with; we record that name, the email address, the order number and the date. When you enter your name, your company (optional) and the key in the software, they are stored in a small licence file on your own computer and shown at the bottom of the window and on the About page. The software never sends them to us, and we never see the company name you type in.
2B.2 We use the details we hold only to issue and reissue your key, to replace a user when a business asks, and to answer your questions. We send no marketing as a result.
2B.3 If you do not give us a name at checkout we cannot make a key for you, but you can still ask for a refund within the refund period.
3.1 When you email [email protected] we receive your email address, name, whatever you write and any attachments you send. We keep the correspondence so we can follow up and see history on later questions.
3.2 If you send us a data file, screenshot or document for troubleshooting, it may contain information about your business, customers or staff. Please remove or anonymise anything you do not need us to see. We use such files only to answer your question and delete them when the matter is closed.
4.1 rexofficesoftware.com is hosted on Cloudflare (Cloudflare, Inc., USA). Cloudflare records standard server-log information such as IP address, browser type and pages requested, and uses it for security and to deliver the site. We see only aggregate visitor figures, described in 4.2.
4.2 To learn how many people visit the site and which pages are useful, we use Cloudflare Web Analytics. It sets no cookies, does not use your browser's local storage, does not build a profile of you and does not follow you from one website to another. It reports only totals to us: page views and visits, the page and the website that referred the visitor, the country, the type of browser and device, and how fast pages load. Cloudflare processes that information for us as our service provider. We do not use Google Analytics or any advertising or tracking service.
4.3 The site uses no advertising, tracking or analytics cookies, only cookies that are strictly necessary for it to work, such as those Cloudflare sets for security. The Lemon Squeezy checkout sets its own cookies when you pay; those are governed by Lemon Squeezy's policy.
We use the information above only to: supply and activate your licence; send the key and receipt; provide support; honour refunds and the update period; keep accounting and tax records as the law requires; let you know about updates to the product you bought; and protect against fraud or misuse of licences. We do not send marketing other than product-update notices for products you own, and you can ask us to stop those at any time.
6.0 The trial-key service runs on a small server we operate (hosted by a provider in the United States or Australia); it holds the trial records described in clause 2A and nothing else.
6.1 Service providers that handle information for us: Lemon Squeezy (payments and receipts), our business email provider (sending and storing email), Cloudflare (website hosting and security) and our accountant (financial records). Each sees only what it needs for its job.
6.2 Some of these providers are outside New Zealand: Lemon Squeezy and Cloudflare are in the United States, and our email is hosted by a provider whose servers may be in the United States or Australia. We choose providers with published privacy commitments and we rely on those commitments as required by Information Privacy Principle 12 of the Privacy Act 2020 and Australian Privacy Principle 8. We do not send your information to any other country.
6.3 We do not sell, rent or share your information with anyone for their own marketing. We will disclose information if the law requires it or to protect against fraud.
Licence, activation and purchase records: for as long as the licence exists and at least seven years after purchase, because New Zealand tax law requires us to keep business records for seven years. Trial requests: two years after the trial expires, then deleted, unless you bought a licence (then they form part of the licence record) or asked us to delete them sooner. Support correspondence: up to three years after the last message, then deleted. Files you send for troubleshooting: deleted when the matter is closed, normally within 30 days. Server logs: handled by Cloudflare under its retention periods.
Our records are kept in password-protected business systems with two-factor authentication where available. Only ECD staff who need the information can see it. No method is perfect; if we become aware of a privacy breach that is likely to cause serious harm we will notify the Office of the Privacy Commissioner and affected people as the Privacy Act 2020 requires.
9.1 You may ask us what personal information we hold about you, ask for a copy, and ask us to correct it. Email [email protected]. We will respond within 20 working days as the Privacy Act 2020 requires, and we do not charge for this.
9.2 You may ask us to delete your information. We will do so unless we need to keep it for the licence to work, for tax records or for another legal reason, in which case we will tell you.
9.3 Complaints. If you think we have mishandled your information, email [email protected] with "Privacy complaint" in the subject. We will acknowledge it within five working days, look into it, and give you a written answer within 30 days (or tell you why we need longer). If you are not satisfied with our answer you can complain to the Office of the Privacy Commissioner, New Zealand (privacy.org.nz, 0800 803 909) or, in Australia, the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992). Both are free.
9.4 No automated decisions. We do not use computer programs or AI tools to make decisions about you from your personal information, and the REX software itself makes no decisions about anyone: it only records what you type into it.
REX is business software. We do not knowingly collect information from anyone under 16.
We will post any change to this statement on the website with a new version number and date. Changes apply from the date posted.
Privacy Officer, Energy Conscious Design Limited, Auckland, New Zealand. Email: [email protected].
Refunds are covered by clause 6 of the licence agreement and terms of sale: within 14 days of purchase, if the software does not do what its product page says on a computer that meets the system requirements and we cannot fix it within a reasonable time, we refund the price paid. REX Accounts has a 60-day free trial so you can test it first. Email [email protected] with your order details.