Privacy Notice

1. Introduction

UnitHub Limited ("we", "us", "our") is committed to protecting your privacy. This Privacy Notice explains how we collect, use, disclose, and safeguard your personal information when you use our property management platform and related services.

This notice complies with the New Zealand Privacy Act 2020 and applies to all users of UnitHub's services, including property managers, landlords, and tenants.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, phone number, and password
• Property Information: Property addresses, lease details, rental amounts
• Tenant Information: Tenant names, contact details, lease terms
• Financial Information: Payment records, transaction history (we do not store credit card details)
• Documents: Uploaded leases, receipts, inspection reports, photos
• Communication Records: Manually entered messages and interactions
• Usage Data: Log data, IP addresses, browser information, device identifiers

3. How We Use Your Information

We use your information to:

• Provide and maintain our property management services
• Process rent payments and financial transactions
• Generate AI-powered insights and automation (maintenance categorization, lease extraction)
• Send service notifications, payment reminders, and account updates
• Improve our platform through analytics and user feedback
• Comply with legal obligations and prevent fraud
• Provide customer support and respond to inquiries

4. Third-Party Services

We share your information with trusted third-party services to operate our platform:

• Stripe: Payment processing (subscription billing, PCI-compliant)
• OpenAI: AI processing for maintenance categorization and lease extraction
• Supabase: Database hosting and authentication (data stored in secure cloud infrastructure)
• Vercel: Application hosting and CDN delivery
• Google Maps & Mapbox: Property address geocoding and imagery
• Resend: Transactional email delivery

All third-party services are bound by strict data protection agreements and process data only as necessary to provide services on our behalf.

5. Data Security

We implement industry-standard security measures to protect your information:

• All data transmitted over HTTPS (TLS/SSL encryption)
• Passwords hashed using bcrypt or similar strong algorithms
• Row-level security (RLS) policies to isolate user data
• Secure token encryption at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication for all services

6. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data (subject to legal retention requirements)
• Export: Download your data in a machine-readable format
• Withdraw Consent: Opt out of communications at any time
• Complaint: File a complaint with the Office of the Privacy Commissioner

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain information for up to 7 years to comply with legal obligations (e.g., tax records, dispute resolution).

8. International Data Transfers

Your data may be stored and processed in data centers located outside New Zealand (including AWS/GCP data centers used by Supabase and Vercel). We ensure that all international transfers comply with New Zealand privacy laws and that service providers maintain adequate safeguards.

9. Changes to This Notice

We may update this Privacy Notice from time to time. We will notify you of material changes by email or through a prominent notice on our platform. Continued use after changes indicates acceptance of the updated notice.

10. Contact Us

If you have questions about this Privacy Notice or wish to exercise your rights, please contact us: