Privacy Policy
Last updated: 9 October 2026
This Privacy Policy explains what personal information HectareWise ("we", "us", "our") collects when you use the HectareWise website and application (the "Service"), why we collect it, and what your rights are. We are a New Zealand-based service and this Policy is written with reference to the New Zealand Privacy Act 2020.
1. Information We Collect
Account information
During the private beta, accounts are created by invitation. We hold your email address and, if you add them, your first and last name. Your password is handled by our authentication provider, Supabase, which stores it only as a one-way hash. We never see it.
Land and analysis data
When you use the Service, we collect the location and boundary of land areas you draw or search for, the area in hectares, your selected region, and the analysis options you choose. If you save a property, we store the property name, any notes you add, and the generated analysis and investment results.
Usage data
We use Google Analytics to understand how the Service is used. It records which pages you visit and a few key actions, such as running an address search, signing up, logging in, or exporting a PDF, along with general device and browser information. It does not receive your name, your email address, or the addresses you search for.
Technical data
Like most websites, our servers and third-party providers (described below) may log standard technical information such as IP address, browser type, and device information as part of normal web traffic handling.
2. How We Use Your Information
- To provide the Service - running your analyses, saving your properties, and signing you in;
- To communicate with you - primarily sign-in links, and service-related notices;
- To maintain and improve the Service - diagnosing errors, understanding which features are used;
- To meet legal obligations, where applicable.
We do not sell your personal information, and we do not use your land or analysis data to train third-party AI models or share it with data brokers.
3. Third-Party Services We Use
We rely on the following third-party service providers to operate the Service. Each processes some data on our behalf as part of providing their service to us:
| Provider | Purpose | What they may see |
|---|---|---|
| Supabase | Authentication and database hosting | Your account details and saved property data |
| Google Analytics | Website usage analytics | Pages visited, general device/browser information |
| Vercel | Hosting the website and application | Standard request information, such as IP address and browser type |
| OpenStreetMap (Nominatim) | Address search, and naming the area you select | The addresses you search for and the coordinates of land you select |
| Esri / OpenStreetMap | Satellite and map imagery | Map tile requests (standard for any map-based service) |
| Cloudflare, jsDelivr, unpkg, Google Fonts | Delivering fonts, icons, and library code the Service depends on | Basic request metadata, as with any website that loads external resources |
These providers may process data outside New Zealand as part of their own infrastructure. We choose providers with established security and privacy practices, but we encourage you to review their own privacy policies if you'd like more detail.
We do not currently process payments, so we do not collect or store any payment card information.
4. Cookies and Local Storage
We use your browser's local storage to keep you signed in and to save app preferences and cached data on your device. Google Analytics sets its own cookies to distinguish visitors. You can clear local storage and cookies at any time through your browser settings, though this will sign you out and clear locally cached data.
5. Data Retention
We keep your account and saved property data for as long as your account is active. If you delete your account, we delete your personal information and saved data, other than what we're required to retain for legal or accounting purposes.
6. Your Rights
Under the Privacy Act 2020, you have the right to:
- Access the personal information we hold about you;
- Correct information that's wrong or out of date;
- Request deletion of your account and associated data.
To exercise any of these rights, email us at support@hectarewise.co.nz. We'll respond within the timeframes required by the Privacy Act 2020.
7. Data Security
We rely on our infrastructure providers' security practices (including encryption in transit) to protect your data. No online service can guarantee absolute security, but we take reasonable steps appropriate to the type of data we hold.
8. Children's Privacy
The Service is not directed at, and we do not knowingly collect information from, children under 16.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above.
10. Contact Us
Questions about this Policy, or want to exercise your privacy rights? Email us at support@hectarewise.co.nz. You can also make a complaint to the Office of the Privacy Commissioner if you're not satisfied with our response.