Privacy policy

PropertyKete (“we”, “us”) operates propertykete.co.nz, a New Zealand property intelligence platform. We are subject to the New Zealand Privacy Act 2020 (“Privacy Act”).

Contact us: privacy@propertykete.co.nz

Search queries

When you search for a property address, we process the address string to return results. Anonymous searches are not linked to your identity. We log the query string, timestamp, and IP address as standard infrastructure logs.

Account information

If you create an account (via magic link or OAuth), we collect and store your email address. We do not collect your name, phone number, or physical address unless you provide them voluntarily in a support request.

Payment information

Payments are processed by Stripe. We receive a transaction ID, the amount paid, and your email address from Stripe. Your card details, bank account, and full billing address are handled exclusively by Stripe and never pass through our systems.

Generated reports

When you save a property report, we store the address ID, the scoring result snapshot, and the timestamp. Saved reports are associated with your account.

Feedback

Any text you submit through a feedback form or support email is stored and used to improve the service. Do not include sensitive personal information in feedback.

Infrastructure logs

Our hosting provider and error monitoring service (Sentry) may collect IP addresses, browser user-agent strings, and request timestamps as part of standard server operation.

• To deliver the property intelligence service you requested.
• To maintain your account and saved reports.
• To process payments and send receipts.
• To diagnose errors and improve the platform.
• To comply with legal obligations.

We do not use your personal information for advertising, profiling, or sale to third parties.

We use the following service providers:

• Supabase— authentication and database hosting (ap-southeast-2 region, Australia/NZ).
• Stripe— payment processing (PCI DSS Level 1 certified).
• Resend— transactional email (receipts, magic-link logins).
• Sentry— error monitoring (may capture request context).
• Axiom— structured application logs (no personal content).
• Vercel / Cloudflare— web hosting and CDN.
• Google— Tag Manager and Analytics (site measurement). See section 6 for what Google receives before and after you accept analytics.

Each provider processes data only as needed to deliver their service and is bound by their own privacy policies. We do not sell or share your data with advertisers.

We group cookies and similar browser storage into two categories. Necessary storage keeps you signed in (via Supabase Auth), keeps the site secure, and remembers your cookie choice. It cannot be switched off, because the site does not work without it. Analytics storage helps us understand which pages people use and where the site is confusing.

Analytics cookies are off until you turn them on. We use Google Tag Manager together with Google Consent Mode. Until you accept analytics, Google tags are told that analytics storage is not allowed: they do not set or read analytics cookies, and they do not build a persistent identifier for your browser.

This does not mean Google receives nothing. Google’s tags still load and still send limited cookieless measurement. Google states that in this mode no first-party Analytics cookies are set, accessed, or read, and that the resulting Analytics events are anonymised and not used to identify you. Google documents that these cookieless pings may include your browser’s user agent, your screen resolution, and your IP address, and that Google Analytics does not store or log IP addresses. The Google tag also transmits measurement data about the page itself, such as its address.

A site can also configure Google Analytics to send extra fields, which would still be transmitted while analytics storage is denied. We do not: PropertyKete does not configure Google Analytics to transmit a user ID, custom dimensions, or custom user properties. Our tag container holds one tag — the standard Google Analytics tag — with no additional parameters configured. What Google does with what it does receive is governed by Google’s own privacy policy.

If you accept analytics, we signal that analytics storage is allowed and Google tags may then set analytics cookies. If you later turn analytics off, we send that signal immediately and Google tags return to the cookieless behaviour described above. Turning analytics off stops analytics cookies; it does not stop the limited cookieless measurement.

If you would rather Google received nothing at all from this site, use a browser setting, extension, or network-level blocker that blocks requests to Google Tag Manager and Google Analytics.

We do not run advertising or marketing tags, and advertising consent signals stay denied. We do not sell your personal information.

You can change or withdraw your choice at any time using the Cookie preferences link in the footer of every page. Your choice is stored in your browser only — it records the categories you chose, a version number, and the date and time. It contains nothing that identifies you, and it is not sent to us.

Under the New Zealand Privacy Act 2020, you have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of your account and associated personal data (subject to legal retention obligations, such as payment records, and a minimal consent record we keep as proof you agreed to our terms).
• Lodge a complaint with the Office of the Privacy Commissioner if you believe we have not handled your information appropriately.

To make a privacy request, use our privacy request form, or email privacy@propertykete.co.nz with the subject line “Privacy request”. We will respond within 20 working days as required by the Privacy Act 2020.

We use industry-standard security controls: HTTPS, encrypted-at-rest database storage via Supabase, row-level security policies, and PCI DSS-compliant payment processing via Stripe. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

We may update this policy from time to time. The effective date at the top of the page reflects the date of the most recent revision. Continued use of the service after a revision constitutes acceptance of the updated policy.

Privacy enquiries: privacy@propertykete.co.nz
General enquiries: kiaora@propertykete.co.nz