Privacy policy

Last updated 25 October 2026

VPO ("Voice Purchase Orders") is a service provided by Adroit Limited (NZBN 9429037404840), Auckland, New Zealand ("we", "us"). This policy explains what personal information VPO collects, why, who we share it with, and your rights under the New Zealand Privacy Act 2020.

Who this applies to

When a business uses VPO, that business decides whose details are loaded into it and how purchase orders are used. We process that information on the business's behalf.

What we collect

This website does not use cookies, analytics or advertising trackers.

How we use it

We don't sell personal information, and we don't use it for advertising.

Who we share it with

VPO is built on the services below. Each one processes information only so that VPO can work. Some are based overseas. Where information goes overseas, we choose providers bound by privacy and security obligations comparable to those in New Zealand.

ProviderWhat forWhere
Microsoft AzureHosting VPO and storing purchase orders and staff listsNew Zealand
Microsoft Azure Communication ServicesSending VPO's emailsAustralia
Microsoft 365Our mailboxes, including hello@vpo.co.nzAustralia / New Zealand
TwilioConnecting phone callsUnited States
ElevenLabsThe voice assistant: speech recognition, voice, and call transcriptsUnited States
Google (Gemini)Language processing for the voice assistant, through ElevenLabsUnited States
Sinch (MessageMedia)Sending text messagesAustralia

Purchase details are also shared with the people involved in each request: the approvers on the job, the requester, and the client's accounts team.

This website uses Google Fonts, so your browser fetches font files from Google.

How long we keep it

We keep purchase orders and staff details for as long as the client uses VPO, so they have a complete purchasing record. When a client stops using VPO, we return or delete their information within 90 days, unless they ask us to keep it longer or the law requires us to. Call transcripts are kept only as long as we need them to run and improve the service.

How we protect it

VPO runs in Microsoft Azure with encrypted connections throughout. Passwords and keys are held in a secure key vault, not in our code. Approval links are signed so they can't be guessed or altered, and approving or declining always needs a deliberate action, not just opening a link.

Your rights

You can ask to see the personal information we hold about you, and ask us to correct it. If you're a client's staff member, you can also ask your employer, who controls the staff list. Email hello@vpo.co.nz and we'll respond within 20 working days.

If you're not happy with how we've handled your information, please tell us first. You can also complain to the Office of the Privacy Commissioner.

Contact

Adroit Limited, Auckland, New Zealand
Email: hello@vpo.co.nz

Changes

We'll update this page if anything changes, and show the date of the last update at the top.