Legal

RentRight NZ is a New Zealand-based platform helping renters make informed decisions about landlords. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the New Zealand Privacy Act 2020. If you have any questions about this policy, contact us at hello@rentrightnz.co.nz

We collect information in the following ways: INFORMATION YOU GIVE US: • Email address (when you sign up or join the waitlist) • Name (when you create a landlord or property manager account) • Review content (when you submit a review) • Location/property details (when you create a landlord profile) • Payment information (when you upgrade to a paid plan — processed securely by Stripe, we never store card details) INFORMATION COLLECTED AUTOMATICALLY: • Browser type and device information • Pages you visit on our platform • IP address (for fraud prevention only) • Cookies (see Section 7) INFORMATION FROM PUBLIC SOURCES: • Tenancy Tribunal records (publicly available from Ministry of Justice) • Property ownership records (from LINZ public register)

We use your information only for the following purposes: • To operate and improve the RentRight NZ platform • To send you account-related emails (verification, password reset) • To notify you of updates to the platform (if you opt in) • To investigate disputes about reviews • To prevent fraud and misuse of the platform • To comply with legal obligations We will NEVER: • Sell your personal information to third parties • Use your information for advertising by other companies • Share your information without your consent (except where legally required) • Display your name publicly alongside reviews you submit

Reviews submitted on RentRight NZ are published anonymously. Your name is never displayed next to your review. However, we do retain a record of who submitted each review internally. This is necessary to: • Investigate disputes from landlords • Prevent the same person leaving multiple reviews • Comply with court orders or legal requests In the event of a valid court order or legal process, we may be required to disclose reviewer identity to authorities. We will always notify you if this occurs, unless prohibited from doing so by law.

Under the New Zealand Privacy Act 2020, you have the right to: • ACCESS your personal information — request a copy of all data we hold about you • CORRECT your information — request we fix any inaccurate data • DELETE your information — request we remove your account and associated data • OBJECT to processing — ask us to stop using your data in certain ways • COMPLAIN to the Privacy Commissioner if you believe we have mishandled your data To exercise any of these rights, email hello@rentrightnz.co.nz with the subject "Privacy Request". We will respond within 20 working days as required by law. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner at privacy.org.nz

Your data is stored securely using Supabase, a trusted database platform with enterprise-grade security. Data is encrypted at rest and in transit. We take reasonable steps to protect your information from unauthorised access, disclosure, or loss. However, no internet transmission is 100% secure, and we cannot guarantee absolute security. We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

We use essential cookies only — these are required for the platform to function (for example, keeping you logged in). We do not use advertising cookies or tracking cookies from third-party advertisers. You can disable cookies in your browser settings, but this may affect your ability to use the platform.

We use the following trusted third-party services to operate our platform: • Supabase — database and authentication (supabase.com) • Vercel — website hosting (vercel.com) • Resend — transactional emails (resend.com) Each of these services has their own privacy policy and security standards. We only share the minimum data necessary with these services. We do not use Google Analytics, Facebook Pixel, or any advertising tracking tools.

RentRight NZ is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has submitted information to our platform, please contact us and we will remove it immediately.

We may update this Privacy Policy from time to time. We will notify registered users by email of any significant changes. The "Last updated" date at the top of this page will always reflect the most recent version. Your continued use of RentRight NZ after changes are made constitutes acceptance of the updated policy.