Legal
Privacy policy
This policy explains what personal information Janus collects, why we hold it, who else touches it, and what you can ask us to do with it. It is written to be read, not to be survived.
1. Who we are
Janus is visitor management software, built and operated from New Zealand. In this policy, "we", "us" and "Janus" mean the operator of the service reachable at gojanus.nz. For anything in this policy, write to privacy@gojanus.nz — a person reads that inbox, and we answer.
2. Two kinds of people
Customers — the workplaces that run Janus — give us account details: names, work emails, and workspace settings. Visitors — the people who sign in at a customer's site — give their details to that customer, not to us. For visitor records, our customer is the one deciding what is collected and why; Janus stores and processes it on their instructions.
3. What visitor records contain
Whatever the workplace's sign-in flow asks for: typically a name, sometimes an email, phone, company, photo, screening answers, induction results and agreement acceptances — plus the times of arrival and departure. Evacuation roll calls record who was marked safe, when, and by which warden.
4. Who else touches it
We use a small set of sub-processors to run the service: cloud hosting for the application and database, Cloudflare R2 for uploaded files, Postmark for email delivery, and a New Zealand SMS carrier (TNZ) for text alerts. Each receives only what its job requires — an email address to deliver an email, a phone number to deliver a text. We do not sell or trade personal information, full stop.
5. What you can ask
Customers can export their data from the app at any time — every list exports to CSV. A visitor can ask the workplace they visited (or us) to be anonymised: their personal details are genuinely erased from the visit history, not hidden behind a flag. Access and correction requests under the Privacy Act 2020 go to the address above.
6. Security
Data is encrypted in transit, passwords are hashed, evacuation PINs are hashed, and visitor lookups are designed never to reveal one visitor's details to another. If we ever have a breach that puts you at risk, we will tell you plainly and quickly.