Privacy Policy
Last updated: 5 May 2026
This policy describes how Notified (Notified Limited, the operator of notified.co.nz) collects, uses, stores and discloses your personal information. It is written in compliance with the New Zealand Privacy Act 2020 and the Information Privacy Principles (IPPs).
1. Who we are
Notified is a New Zealand property-feasibility SaaS operated by Notified Limited (referred to below as "we", "us" or "Notified").
Registered address: 332 Three Mile Bush Road, Te Kamo, WhangΔrei 0185, New Zealand
Privacy contact: privacy@notified.co.nz
2. What information we collect
2.1 Information you give us directly
- Account information β your email address, and any optional profile details (such as a display name).
- Payment information β your name, billing address, and partial card details are collected and held by our payment processor (Stripe). We never see or store your full card number or CVV.
- Property briefs β New Zealand property addresses you enter, the strategy you choose (Develop / Buy & Hold / Trade & Flip / Multi-Room Convert), and any specifics or notes you provide when requesting a report.
- Deal notes and calendar entries β any private notes you add to reports or properties in the dashboard, and any scheduled events that you create or that our AI extracts from those notes.
- Uploaded files β documents, images, or other files you attach to your owned properties (for example, LIM reports or inspection photos).
- Conversations with our AI assistant β messages you send to the Notified chat assistant, both on the marketing site and inside the subscriber dashboard.
- Support communications β emails you send to us, including feedback and support requests.
2.2 Information we collect automatically
- Usage data β pages visited, features used, report-generation activity, log-in times, and approximate location derived from your IP address.
- Device and browser data β device type, operating system, browser type and version, and screen size.
- Cookies and similar technologies β we use a small number of first-party cookies to keep you signed in, remember your preferences, and collect anonymised analytics through Google Analytics. You can disable cookies in your browser settings but some features will not work without them.
2.3 Information about the properties you research
When you request a feasibility report for an address, we query authoritative public data sources β including Land Information New Zealand (LINZ), local council GIS services, fee schedules, and (once approved) Trade Me listings β to compile the report. This data is primarily about the property and is already publicly available. We do not sell or share this data with third parties. Some of those records may also contain personal information about people connected with the property; section 2.4 explains how we treat that under Information Privacy Principle 3A.
2.4 Information we collect about third parties β IPP 3A notice
Some public property records we query, including LINZ title records and local council property or rates records, may contain personal information about people connected with a property, such as the registered owner. When you research a property you do not own, that information may relate to someone other than you.
We collect and use this information only to the extent reasonably necessary to generate feasibility reports for our subscribers. Where registered-owner information is not required for that purpose, we do not intentionally include it in reports or AI prompts.
Information Privacy Principle 3A of the Privacy Act 2020 (which commenced on 1 May 2026) requires agencies that collect personal information indirectly to take reasonable steps to make the individual concerned aware of certain matters, unless an exception applies. This clause is our indirect-collection notice for that purpose.
We collect this information from publicly available property records, including LINZ and relevant local council records. We use it to identify, analyse, and generate feasibility reporting for the property requested by our subscriber. The information may be disclosed to:
- the subscriber who requested the report; and
- the service providers listed in this Privacy Policy who process information on our behalf, including cloud hosting, database, document-generation, email, analytics, payment, and AI-processing providers.
Some of those providers may process information outside New Zealand, as described in section 4.
There are no direct consequences for a property owner if this information is not provided by them. However, if we cannot access relevant public property information, we may be unable to generate a complete report for that property.
Notified Limited is the agency collecting and holding this information. Our contact details are set out in section 12. If you are a property owner and would like to know whether we hold personal information about you, or you wish to exercise your access or correction rights, please contact privacy@notified.co.nz.
3. How we use your information
We use the information we collect for the following purposes:
- To provide, maintain and improve the Notified service.
- To generate, store and deliver the feasibility reports you request.
- To authenticate you and maintain the security of your account.
- To process payments and manage your subscription.
- To send you transactional emails (login links, report-ready notifications, trial-ending reminders, payment receipts, and service updates).
- To respond to your support requests and communicate with you about the service.
- To monitor the performance and usage of the service and to prevent abuse, fraud, and security incidents.
- To comply with our legal obligations, including taxation, consumer protection, and law-enforcement requests made under valid legal process.
We will not send you marketing emails you have not consented to. You can opt out of any non-essential emails at any time.
4. Who we share your information with
Notified is built on top of several carefully chosen service providers. They process your information only on our instructions and under contractual obligations to keep it secure and confidential.
| Provider | What they do for us | Location |
|---|---|---|
| Supabase | Authentication, database, file storage | Sydney, Australia |
| Cloudflare Workers | Application runtime and edge processing | Global edge (primary: Auckland) |
| Stripe | Payment processing, subscription billing, invoicing | United States / Ireland |
| Resend | Transactional email delivery | United States |
| Anthropic | AI analysis (Claude models) for generating reports and extracting calendar events from notes | United States |
| PDFMonkey | PDF rendering of finished reports | European Union |
| Mapbox | Static map tiles embedded in Develop-strategy reports | United States |
| Netlify | Static hosting of notified.co.nz | Global edge |
| Google Analytics | Anonymised visitor analytics | United States |
We do not sell your personal information to any third party, and we do not share it for marketing purposes. We may disclose information where required by law or valid legal process (for example, a court order or a request from the New Zealand Police acting under statutory authority).
5. Where your information is stored (international transfers)
Some of our providers process your information outside New Zealand (principally in Australia, the United States, and the European Union). Before using a provider that processes personal information offshore, we assess whether the receiving jurisdiction provides comparable privacy safeguards (as required by the Privacy Act 2020), and we enter into contracts that bind the provider to appropriate confidentiality and data-protection obligations.
6. How long we keep your information
We keep your information only for as long as is reasonably necessary for the purposes described above, or as required by law. Typical retention periods are:
- Account and subscription data β while your account is active, plus 7 years after closure to meet New Zealand tax record-keeping obligations.
- Property briefs, reports, notes, and calendar events β while your account is active. You can delete individual reports and notes at any time from your dashboard. When you close your account, we delete your data within 30 days unless we are required to retain it by law.
- Payment records β retained by Stripe under their own retention policy and by us where required for tax or accounting purposes.
- Support and server logs β typically retained for 90 days for security and troubleshooting purposes.
7. Your rights under the Privacy Act 2020
Under the New Zealand Privacy Act 2020 you have the right to:
- Access the personal information we hold about you.
- Correct any personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
- Delete your account and associated personal information (subject to any legal retention obligations).
- Withdraw consent for any non-essential processing, and opt out of marketing communications.
- Lodge a complaint with us, and if not satisfied, with the Office of the Privacy Commissioner.
To exercise any of these rights, email privacy@notified.co.nz. We will respond within 20 working days, as required by the Privacy Act.
8. Security
We take the security of your information seriously. Measures we have in place include:
- Encryption in transit (HTTPS/TLS) across every connection to notified.co.nz and our API.
- Encryption at rest for data stored in Supabase and Supabase Storage.
- Row-level security (RLS) on our database so that each subscriber can only read their own data.
- Strong authentication via passwordless magic-link login, with all API endpoints requiring a valid session token.
- Short-lived secrets, scoped access controls, and regular review of third-party integrations.
No system is 100% secure. If we become aware of a privacy breach that is likely to cause serious harm, we will notify affected users and the Privacy Commissioner in accordance with the Privacy Act.
9. AI-generated reports
Feasibility reports on Notified are generated by an AI system using publicly available data. Reports are indicative only and are not financial, legal, planning, or investment advice. Always engage qualified professionals before making any property decision. See our Terms of Service for more detail.
When our AI processes your property brief or notes, the content is sent to Anthropic (the operator of the Claude AI models) under a commercial agreement that requires your data not to be used for Anthropic's own model training.
10. Children
Notified is not intended for use by children under 18 and we do not knowingly collect information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will notify you by email or through a prominent notice in the subscriber dashboard at least 30 days before the changes take effect. The "Last updated" date at the top of this page always reflects the date of the most recent changes.
12. How to contact us
If you have any questions about this Privacy Policy or how we handle your information, please contact:
Notified Limited
332 Three Mile Bush Road, Te Kamo, WhangΔrei 0185, New Zealand
Email: privacy@notified.co.nz
You can also contact the Office of the Privacy Commissioner directly: privacy.org.nz Β· 0800 803 909.