Privacy Policy
Effective Date: 04/03/2025 (Updated Version)
Nurture Tech Australasia Limited (NZBN 9429051383893), trading as Konnect (“We”, “Our”, “Us”), values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use the Konnect software and services (“the Services”).
By using our Services, you agree to this policy and our Terms of Service. If there is any conflict between this Privacy Policy and the Terms of Service, the Terms will prevail.
1. Who We Are
Konnect is a New Zealand-based technology company providing software solutions to real estate agents for prospecting and client engagement. We are the data controller for the personal data we collect and process through our platform.
2. What Information We Collect
Information You Provide:
- Account registration details (name, email, agency info)
- Billing and payment information
- Uploaded homeowner contact data (e.g., names, phone numbers, property addresses)
- Communications with customer support
- Participation in surveys, demos, or promotions
Information We Collect Automatically:
- IP address and browser/device metadata
- Log files and usage data (e.g., feature usage, login times)
- Cookies and session tracking
3. How We Use Your Information
We use your data for the following purposes:
- To provide, manage, and improve the Services
- To deliver onboarding, customer support, and account management
- To personalise your experience and communication
- To comply with legal obligations
- To deliver marketing content (where permitted by law)
- For billing, payment processing, and fraud prevention
4. Legal Basis for Processing (GDPR Compliance)
Where applicable under the General Data Protection Regulation (GDPR), we rely on the following lawful bases:
- Contract performance (e.g., providing services you request)
- Consent (e.g., optional marketing emails)
- Legal obligations (e.g., accounting and compliance)
- Legitimate interest (e.g., product improvement, security)
5. Security Measures
We implement technical and organizational safeguards to protect your data:
- Encryption in Transit: All data transmitted to and from our servers is encrypted using TLS (Transport Layer Security).
- Encryption at Rest: All stored data is encrypted using AES-standard mechanisms via our Supabase PostgreSQL infrastructure.
- Authentication & Access Control: We use JWT-based authentication and role-based access controls (RBAC) to ensure only authorized access.
- Admin Restrictions: Admin-level features are accessible only to authorized internal personnel, with audit trails.
- Real-Time Monitoring & Logging: We monitor platform activity and maintain logs for security auditing. Logs are retained for 30 days.
6. Data Breach Notification
In the event of an actual or suspected data breach:
- We will assess and contain the incident immediately.
- Affected users will be notified within 72 hours of confirmation, in compliance with the NZ Privacy Act and GDPR (if applicable).
- We will fully cooperate with investigations and provide transparent reporting.
7. Data Retention and Deletion
We retain your personal data only as long as necessary to:
- Deliver the Services
- Fulfill contractual or legal obligations
- Resolve disputes
Upon account cancellation or written request, all user and uploaded data will be permanently deleted within 10 business days, unless required otherwise by law.
8. Data Ownership & Client Responsibilities
- Clients retain full ownership of all uploaded data (e.g., homeowner contacts).
- We process that data only to deliver the agreed services and do not use it for any other purpose.
- Clients must ensure they have the legal right to upload and use personal data within Konnect.
9. Sub-Processors & Hosting
We use trusted third-party providers (sub-processors) to operate our platform securely:
- Supabase – for database, authentication, and file storage (hosted on AWS Sydney)
- Vercel – for app deployment and hosting
- Inngest – for background processing and workflows
All sub-processors are contractually bound to adhere to equivalent data protection standards.
10. Children’s Privacy
Our services are not intended for users under the age of 16. We do not knowingly collect data from individuals under this age. If we become aware of such data, it will be deleted immediately.
11. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your data
- Correct inaccuracies
- Request deletion
- Export your data
- Object to certain processing
To exercise any of these rights, please contact us using the details below.
12. International Data Transfers
If your data is transferred outside New Zealand, it is done so in compliance with relevant privacy laws, using appropriate safeguards such as standard contractual clauses or processing agreements.
13. Complaints
If you believe your data has been mishandled, please contact us at benh@konnect-app.io. You may also file a complaint with the New Zealand Privacy Commissioner or relevant regulatory authority in your country.
14. Changes to This Policy
We may update this Privacy Policy as our services evolve. Material changes will be communicated via email or in-app notification.
15. Contact Us
If you have any questions, concerns, or data access requests:
Nurture Tech Australasia Limited (Konnect)
Christchurch, New Zealand
Email: benh@konnect-app.io