Privacy policy
PowerCAPEX is a capital-programme cost control and cashflow forecasting service provided by KPMO (New Zealand). The PowerCAPEX for Excel lets a person with a PowerCAPEX portal account insert tables of their project's PowerCAPEX figures into an Excel workbook and refresh them. This policy explains what information the add-in and the portal handle and why.
Who can use the add-in
The add-in works only for people who already hold a PowerCAPEX portal account issued by KPMO for a specific project. There is no self-service sign-up inside the add-in. Access is granted, changed and withdrawn by KPMO on the request of the project owner.
Information we handle
- Your sign-in identity. You sign in to your PowerCAPEX portal account, either with your Microsoft work or school account or with the username and password KPMO issued to you. With a Microsoft account we receive your name, email address and Microsoft account identifier and never see your Microsoft password; a portal password is stored by the portal only as a secure hash. We use your identity to match you to your portal account and its project permissions.
- Project data. When you insert or refresh a table, the add-in asks the PowerCAPEX portal which tables your project offers, then reads the one you chose from your project's PowerCAPEX database - with your own Microsoft sign-in, or, for some projects, through the portal - always within your project permissions, and writes it into Excel. The data then lives in your workbook, under your control. Nothing is sent from your workbook to KPMO.
- Usage records. The portal keeps an audit log of add-in activity: who requested which table for which project, and when; the project database also records who read it. This is used for support and security. It is not used for advertising or sold to anyone.
- Session tokens. After you sign in, the add-in keeps a short-lived token in Excel's storage for the add-in so you are not asked to sign in on every action. It expires within twelve hours and is removed when you sign out.
What we do not do
- We do not read anything else in your workbook: only the tables the add-in itself inserted.
- We do not sell or share personal information with third parties for their own purposes.
- We do not use advertising, tracking pixels or analytics services in the add-in.
Where information is held
Project databases are hosted in Microsoft Azure SQL in Microsoft's New Zealand North region. Some projects' reports are also hosted in Microsoft Fabric / Power BI in Microsoft's Australia East region. The PowerCAPEX portal, its account records and audit logs are hosted by Webslice in New Zealand (Auckland data centre), with a monthly copy of the audit logs kept in KPMO's Microsoft 365. Your Microsoft identity is managed by Microsoft Entra ID.
Retention
Account records are kept while your project access is active and removed on request when it ends. Audit logs are kept for 12 months on a rolling basis and older entries are deleted automatically. Data in your workbooks is yours and is not retained by us.
Your rights and contact
You can ask what personal information we hold about you, ask for it to be corrected or removed, or withdraw from the service at any time. Contact KPMO at support@kpmo.co.nz. We handle personal information in line with the New Zealand Privacy Act 2020.
Changes
If this policy changes, the new version is published at this address with a new date.