PRIVACY POLICY
Overview
We are committed to protecting your privacy in accordance with the Privacy Act 2020 (NZ).
Information We Collect
We may collect:
- Name, email and contact details
- Account credentials
- Device and usage data
- Open banking transaction data via Akahu
- Encrypted document uploads
- Metadata relating to modelling tools
How We Collect Information
- Directly from you
- Through use of the App
- Through Akahu integration
- Through cookies (web version)
How We Use Information
We use information to:
- Operate the App
- Provide modelling tools
- Improve performance
- Send system notifications
- Send system notifications
We do not sell personal data.
Data Storage & Hosting
Server-side infrastructure is hosted on Microsoft Azure.
Data is encrypted in transit and at rest.
Encrypted documents cannot be accessed without your passphrase.
Third-Party Services
We use:
- Akahu for open banking feeds
- Microsoft Azure for hosting
Third parties may process data under contractual safeguards.
Cross-Border Transfers
If data is hosted outside New Zealand, we ensure appropriate safeguards consistent with the Privacy Act 2020.
Retention
We retain account data for as long as your account remains active and as required by law.
Encrypted documents remain inaccessible without your passphrase.
Security
We implement:
- Encryption in transit
- Encryption at rest
- Role-based access controls
- Security monitoring
However, no system is completely secure.
Your Rights
Under the Privacy Act 2020, you may:
- Request access to your personal information
- Request correction
- Lodge a complaint
Contact: kevinl@staircase.co.nz
Changes to Policy
We may update this Privacy Policy from time to time.