Last updated: 30 October 2026
Privacy Policy
Based Limited (“MEXE”, “we”, “us”, “our”) is a New Zealand company. This policy covers this website and the MEXE app at app.mexe.co.nz. We are committed to protecting your privacy and complying with the Privacy Act 2020 and the thirteen Information Privacy Principles (IPPs).
1. What information we collect
On this website. The personal information we collect through this website is the information you voluntarily provide when you sign up or contact us:
- Your name
- Your company
- Your work email address
- The content of any message you send us
We do not use advertising cookies or third-party advertising pixels on this site. Standard server logs (such as IP address and request time) may be retained briefly for security and diagnostic purposes by our hosting provider.
We do use a privacy-focused product analytics tool (PostHog) to understand how the site is used, so we can improve it. This sets a first-party cookie and records anonymous usage data such as pages viewed, links clicked, how far through a video you watched, and how far down a page you scrolled. It also captures anonymised session replays of how visitors move through the site. All text entered into forms is masked and is never included in these recordings. This information is not linked to you personally unless you choose to submit a form, in which case we associate it with the details you provided so we can respond to your enquiry in context.
If you would prefer not to be included, you can enable “Do Not Track” in your browser or use any standard content blocker, and you can contact us at any time to request that we delete analytics data associated with you.
In the MEXE app. When your organisation gives you access to MEXE, we collect:
- Account details: your name, work email address, role and organisation. Passwords and multi-factor authentication are managed by Amazon Cognito and are not stored by us.
- Content you create: chat messages and prompts, files you upload, dashboards, reports, notes and other material you save in the app, and the responses our AI features generate.
- Usage and security data: sign-in times, IP address, browser and device details, and a record of actions taken in the app, which we keep for security, support and audit purposes.
- Business data your organisation connects, as described in section 2.
2. Business data we hold for our customers
When your organisation connects its systems to MEXE (for example its inventory, accounting, CRM or email systems), we hold and process that data on your organisation’s behalf, solely to provide MEXE to it under our agreement. Under section 11 of the Privacy Act 2020, personal information held this way is treated as held by your organisation, not by us. Requests about that information should be made to your organisation in the first instance, and we will help it respond.
3. Why we collect it
We collect this information to respond to your enquiry, provide, secure and support our services, and, where appropriate, follow up about our products. We will not use your information for any other purpose without your consent. We do not sell personal information, and we do not use it for advertising.
4. AI features
MEXE includes AI features, such as chat and automated document reading. To produce a response, the relevant prompt and the business data needed to answer it are sent to an AI model provider, which processes it and returns the result. We use these providers under commercial terms that do not permit them to use your data to train their models. We do not use data from your connected systems to train or fine-tune AI models. Forecasting models we build from your data are used only for your organisation. We keep records of AI requests and responses so we can check quality, investigate problems and support you. AI-generated output can be inaccurate, so please review it before relying on it.
5. How we store and protect it
Website submissions are stored in systems operated by us and reputable third-party service providers (for example, our email and CRM providers). The MEXE app and its data are hosted with Amazon Web Services in Sydney, Australia. Each customer’s data is kept separate, data is encrypted in transit, and access is limited to people who need it to run and support the service. We take reasonable technical and organisational steps to protect personal information from loss, misuse, and unauthorised access, disclosure, modification, or destruction.
6. Disclosure
We do not sell your personal information. We may share it with service providers who help us operate our business, and we may disclose it where required by law. These include:
- Amazon Web Services (Australia), for hosting, sign-in and some AI models;
- AI model providers, such as Anthropic and OpenRouter (United States), for AI features;
- PostHog (United States), for website analytics;
- our email, CRM and support providers, which may process data overseas.
Where personal information is disclosed outside New Zealand, we take reasonable steps to ensure it is protected by comparable safeguards, as required by IPP 12.
7. Retention
We keep your information only for as long as is reasonably necessary for the purposes set out above, after which it will be deleted or de-identified. Data held in the MEXE app is kept while your organisation’s agreement with us is active, and is then deleted or returned as that agreement sets out.
8. Your rights
Under the Privacy Act 2020 you have the right to request access to, and correction of, personal information we hold about you. To make a request, or to ask us to delete information you have provided, contact us at the address below. We will respond within 20 working days. For business data held on behalf of your organisation, see section 2.
9. Cookies and browser storage
The MEXE app uses browser storage to keep you signed in and remember your preferences. It is required for the app to work and is not used for advertising or tracking across other sites.
10. Children
Our website and the MEXE app are intended for businesses and are not directed at children under 16. We do not knowingly collect personal information from children.
11. Changes to this policy
We may update this policy from time to time. The “last updated” date above reflects the most recent revision. Material changes will be highlighted on this page.
12. Contact
Privacy queries, access and correction requests, or complaints can be sent to our privacy officer at:
Based Limited (NZBN 9429050896462)
28 Constellation Drive
Rosedale, Auckland 0632
New Zealand
info@baseddata.co.nz
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner at privacy.org.nz.
Terms of Use
These Terms of Use apply to this website and the MEXE app. By accessing or using either, you agree to these Terms. If you do not agree, please do not use them. Your organisation’s subscription is governed by the Customer Terms below, or by a signed agreement with us, which prevails over these Terms where they differ.
1. Use of the site
You may use this website and the MEXE app for lawful purposes only. You agree not to use them in any way that breaches any applicable law, infringes the rights of any other person, or interferes with their operation or any other user’s use of them.
2. Accounts
MEXE app accounts are created by your organisation’s administrator. You must keep your password and authentication device secure, you are responsible for activity under your account, and you must tell us promptly if you suspect unauthorised use. Your access ends when your organisation removes it or its agreement with us ends.
3. Acceptable use
You agree not to:
- copy, modify, reverse engineer or attempt to extract the source code of MEXE;
- access MEXE by automated means, except through the APIs and connectors we provide;
- bypass or test its security or access controls, or access data you are not authorised to see;
- upload malicious code or unlawful content;
- resell or share access to MEXE, or use it to build a competing product.
4. Your content and data
Your organisation keeps ownership of the data it connects and the content its users create in MEXE. It grants us a licence to host, process and display that data only as needed to provide and support the service. You are responsible for having the right to provide any data you upload or connect.
5. AI features
AI-generated answers, summaries and suggestions are produced automatically and may be incomplete or wrong. You are responsible for reviewing them before relying on them, particularly for financial, commercial or legal decisions.
6. Content and intellectual property
All content on this website and in the MEXE app, including text, graphics, logos, video, and code (but not your content and data), is owned by us or our licensors and is protected by New Zealand and international intellectual property laws. You may view and download website content for your own personal, non-commercial reference. You may not reproduce, republish, or commercially exploit any content without our prior written consent.
Store locations © OpenStreetMap contributors, available under the Open Database Licence.
7. Feedback
If you send us ideas or suggestions about MEXE, we may use them freely without any obligation to you.
8. Submissions
Information you submit through this website is handled in accordance with the Privacy Policy above. By submitting an enquiry, you confirm that the information you provide is accurate and that you are authorised to provide it.
9. No advice or offer
The content on this website is provided for general information only. It does not constitute professional, legal, financial, or technical advice, and it is not an offer to enter into a contract. Any engagement with us is governed by a separate written agreement.
10. Third-party services and links
The website may contain links to third-party sites, and the MEXE app can connect to third-party systems your organisation chooses. Those services are governed by their own terms. We are not responsible for their content, availability or practices.
11. Disclaimer and liability
The website and the MEXE app are provided on an “as is” and “as available” basis, except as your organisation’s agreement with us provides otherwise. To the maximum extent permitted by law, we make no warranties, express or implied, about their accuracy, completeness, or availability, and exclude all liability for any loss or damage arising from your use of, or inability to use, them. Nothing in these Terms limits any rights you have under the Consumer Guarantees Act 1993 where it applies and cannot be contracted out of.
12. Suspension and termination
We may suspend or end access to the website or the MEXE app if these Terms are breached, or where needed to protect the service, other users or our customers’ data.
13. Changes
We may update these Terms from time to time. The “last updated” date above reflects the most recent revision. Continued use of the website or the MEXE app after a change constitutes acceptance of the updated Terms.
14. Governing law
These Terms are governed by the laws of New Zealand. You and we submit to the exclusive jurisdiction of the New Zealand courts in respect of any dispute arising out of or in connection with the website, the MEXE app or these Terms.
15. Contact
Questions about these Terms can be sent to:
Based Limited (NZBN 9429050896462)
28 Constellation Drive
Rosedale, Auckland 0632
New Zealand
info@baseddata.co.nz
Customer Terms
These Customer Terms are the agreement between Based Limited (“we”, “us”) and the organisation that subscribes to MEXE (“you”). You accept them when you sign an order form, start a paid plan or agree to them in the app. The person accepting confirms they are authorised to bind your organisation. If you have a signed agreement with us, it prevails over these Customer Terms where they differ.
1. Users
Your administrators decide who can use MEXE and what each user can see and do. You are responsible for your users and their activity, and for making sure they follow the Terms of Use above.
2. Plans and fees
You pay the monthly fee for the plan agreed when you subscribe, plus AI usage. AI usage is charged at our provider cost plus 5%, based on the AI processing your users consume. Administrators can set AI spend limits for users, roles and the whole organisation. Prices are in New Zealand dollars and exclude GST, which is added for New Zealand customers.
If you pay by card, the plan fee is charged monthly in advance and AI usage is charged as it is used. If you pay by invoice, invoices are due by the date shown on them. We may change our prices by giving you at least 30 days’ notice.
3. Late or failed payment
If a payment fails, we will tell your administrators. If it is still unpaid after 30 days, we may archive your account. Archiving suspends access but keeps your data, and access is restored once the amount owing is paid.
4. Your data
You own your data. You grant us a licence to host, copy, process and display it only as needed to provide, secure and support MEXE for you. We do not sell your data, and we do not use data from your connected systems to train or fine-tune AI models. Personal information in your data is handled as described in section 2 of our Privacy Policy.
5. Connected systems
When you connect another system (such as Xero, Unleashed or Shopify), you authorise us to access it on your behalf. Your use of that system remains subject to its own terms. If a provider changes or withdraws its service, we may need to change or stop that connection.
6. Confidentiality
Each of us will keep the other’s confidential information confidential and use it only for this agreement, except where disclosure is required by law.
7. Security
We use reasonable, industry-standard technical and organisational measures to protect your data. If we become aware of a security incident affecting your data, we will tell you without undue delay and help you meet any notification obligations you have under the Privacy Act 2020. You must keep login details secure and tell us promptly about any unauthorised access.
8. Availability and support
We aim to keep MEXE available at all times, but there will be planned maintenance and occasional outages, and we do not guarantee uninterrupted service. Support is available by email during New Zealand business hours.
9. Term and cancellation
Your subscription runs month to month and renews automatically. Either of us can cancel by giving one month’s written notice. Fees already paid are not refunded, except where the law requires it. Either of us may end the agreement immediately by notice if the other seriously breaches it and does not fix the breach within 14 days of being asked, or becomes insolvent.
10. Your data after cancellation
For 30 days after your subscription ends, you can ask us for an export of your data. After that we will delete it within 90 days, except copies in backups (which expire on their normal cycle) and records we must keep by law.
11. Liability
Neither of us is liable for indirect or consequential loss, or for loss of profits, revenue or data, however caused. Our total liability under or in connection with this agreement is limited to the fees you paid us in the 12 months before the claim arose. Nothing in this agreement limits liability that cannot be limited by law.
12. Business use
You are acquiring MEXE for business purposes. To the extent permitted by law, the Consumer Guarantees Act 1993 and sections 9, 12A and 13 of the Fair Trading Act 1986 do not apply, and you agree it is fair and reasonable for this to be the case.
13. Changes
We may update these Customer Terms. We will give your administrators at least 30 days’ notice of any material change. If you do not agree, you may cancel before the change takes effect.
14. General
This agreement is governed by the laws of New Zealand, and the New Zealand courts have exclusive jurisdiction. Neither of us is liable for delays caused by events outside our reasonable control. You may not transfer this agreement without our consent. Notices may be given by email to your administrators or to the address below.
Based Limited (NZBN 9429050896462)
28 Constellation Drive
Rosedale, Auckland 0632
New Zealand
info@baseddata.co.nz
Parts of this page are adapted from legal templates by General Legal, released under CC0.