Key points
- Who we are. Nummbas is operated by Implemit Pty Ltd in Perth, Australia. See section 1.
- Hosting. Our servers and database are in Singapore, hosted by Render. See section 2.
- AI providers. Anthropic and Google process your questions and the business data needed to answer them. See section 2.
- Advertising. We do not send advertising or referral providers your customers' data. See section 3.
- Changes. We give notice before a new provider starts handling your customers' data, and you can object. See section 5.
About this list
Who we are. We are Implemit Pty Ltd (ABN 22 690 942 495, ACN 690 942 495), trading as Nummbas, Level 25 Capital Square Tower 3, 1 Spring St, Perth WA 6000, Australia.
What this page covers. Section 2 lists our "Subprocessors": the providers that handle personal data about your customers, suppliers, contractors and staff for you. Our Data Processing Addendum calls that data "Customer Personal Data". Section 3 lists the other providers we use. Nummbas-FO is our AI assistant. Nummbas Books is our bookkeeping feature, and anything about it applies where it is available on your account.
Subprocessors that handle Customer Personal Data
| Provider | What it does | Data involved | Location |
|---|---|---|---|
| Render | Hosts our servers, database and temporary data store | The Customer Personal Data we store | Singapore. Render says its primary processing operations are in the United States. |
| Cloudflare | Carries and protects traffic to Nummbas. Stores files you attach in Nummbas-FO, reports it generates and Nummbas Books documents. | Requests and responses in transit, with the sender's IP address and country. The stored files. | Worldwide network. Stored files are not restricted to one country. |
| Anthropic | AI provider for Nummbas-FO answers, briefs, opportunities and reports. Reads receipts and bills, and suggests categories for bank transactions. | Your questions, the business data needed to answer them, files you attach, receipts, bills and bank transaction details | Any region Anthropic operates in. It says stored data is kept in the United States. |
| AI provider (Gemini). Answers when Anthropic is unavailable, reads images and PDFs you attach, and reviews AI output. | Your questions, files you attach, the output reviewed and the business data behind it | Google says data may be stored temporarily in any country where it has facilities. | |
| Resend | Sends email, including purchase orders you send to suppliers and invoices and reminders you send from Nummbas Books. Receives email sent to your Nummbas Books receipts address. | Addresses, subjects, content and attachments, and delivery status, including bounces and spam reports | United States |
| Datadog | Monitors errors and performance | Request records and logs with user and business IDs. When a visitor's analytics tools are on, page performance, clicks and errors from their browser, including on invoice payment pages. | European Union (Germany, according to Datadog) |
| Crisp | Runs the support chat | What you type into the chat. Once you open it, Crisp's cookie and your IP address. | European Union (the Netherlands, according to Crisp). It says its relay servers in the United States, the United Kingdom and Singapore keep connection logs only. |
What the AI providers receive. The business data can include orders, bank transactions with payee names and, where you use Nummbas Books, contractor names and payments and the names of your customers and suppliers with amounts owed. We do not send shopper email addresses from your synced orders and payments. Our Privacy Policy covers AI training and retention.
Other providers we use to run Nummbas
What this table shows. These providers, like those in section 2, receive information about account holders and website visitors. "Analytics tools" and "marketing tools" are the optional groups in Cookie preferences, which our Privacy Policy explains.
| Provider | What it does | Data involved | Location |
|---|---|---|---|
| PostHog | Product analytics | When analytics tools are on: your user ID, name, email address, business name and plan, page views, clicks, errors and a session recording with page text and typing hidden. Whatever your cookie choice: product events from our servers, tied to your user and business IDs. | European Union (Germany, according to PostHog) |
| Expo, Apple and Google | Deliver mobile push notifications | A device code, your device platform and the notification text. The text can include business figures and the name you gave an alert, which can name a person. | Expo says it transfers information to the United States. See Apple's and Google's privacy policies. |
| Stripe | Takes payment for plans bought directly from us. Also acts on its own account for fraud prevention and legal compliance. | Card details and billing address, collected by Stripe. We do not store card numbers. The account owner's email address, the buyer's user ID, plan and business ID. | United States |
| Shopify, Wix and BigCommerce | Bill you when you buy your plan through their store | Store identifiers and your plan | Set by each platform |
| Google Ads, Meta, Microsoft Advertising, Reddit and OpenAI | Measure our advertising when marketing tools are on. None runs outside our website, the demo and the app's sign-in, sign-up and email verification pages. | Page visits and sign-up events (Microsoft Advertising: page visits only). Meta and Reddit also receive your email address (and Meta your name) in hashed form, your user ID, IP address and browser type, and one purchase event at your first payment if marketing tools were on when you started your plan, even if you later turned them off. | United States. See each provider's privacy policy. |
| FirstPromoter | Runs our partner program | When marketing tools are on, the referral that brought you to Nummbas. For a referred business, the owner's email address, business ID and payment amounts. It reads subscription payments from Stripe to work out commissions. | Its privacy policy names an operator in Romania and no server location. |
Services you connect or direct us to
Your choice. You choose the services you connect, such as your store, advertising and accounting services, and Plaid for bank connections. On your instruction, Nummbas Books also sends invoice payment details to your own payment provider and payout summaries to QuickBooks or Xero. Where UK VAT filing is available on your account, we send HM Revenue and Customs (HMRC), the United Kingdom tax authority, the VAT returns you submit, with the details the law requires about the person filing and their device. Each service handles data under its own terms and privacy policy and is not our Subprocessor.
Changes to this list
New Subprocessors. We update this page before a new Subprocessor starts, and give the notice the Data Processing Addendum describes, which also explains how you can object.
Language. The English version of this list controls.
Contact
Questions. Email customersupport@nummbas.com or write to the address in section 1. For transfer safeguards, see our Privacy Policy and the Data Processing Addendum, or ask us about a particular provider.