Privacy Policy

1. What information we collect

We collect only what is necessary to operate the platform:

Information you provide directly

• Name and email address (when you register or sign in via Google)
• Profile photo (from your Google account, if you choose to use one)
• Phone number and bio (optional, added to your profile)
• Room listing details you submit (address, photos, description, price)
• Service listing details you submit (category, description, contact details)
• Messages and inquiries you send to other community members
• Feedback you submit via the feedback widget

Information collected automatically

• Authentication session data (managed via Supabase — stored in secure cookies)
• Room view counts (aggregate only — we do not track which users viewed which rooms)

We do not use advertising trackers, sell data, or collect payment information. The platform is entirely free.

2. How we use your information

We use your information solely to operate the platform:

• To create and display your profile to other community members
• To publish room and service listings you create
• To facilitate contact between community members (e.g. inquiry messages)
• To send transactional emails (e.g. inquiry notifications, listing status updates)
• To moderate listings and maintain platform safety
• To respond to your feedback or support requests

We do not use your information for marketing, profiling, or any automated decision-making.

3. Who we share your information with

We use a small number of trusted third-party services to run the platform:

• Supabase — our database and authentication provider. Stores your profile, listings, messages, and session data. Data is hosted in their cloud infrastructure. See Supabase's Privacy Policy.
• Cloudinary — used to store and serve images you upload (room photos, service photos). See Cloudinary's Privacy Policy.
• Resend — used to send transactional emails (e.g. inquiry notifications). Your email address is passed to Resend only when sending a relevant notification. See Resend's Privacy Policy.
• Google OAuth — if you sign in with Google, Google provides us with your name, email address, and profile photo. See Google's Privacy Policy.

We do not sell, rent, or otherwise disclose your personal information to any other party, except where required by NZ law.

4. Publicly visible information

The following information is visible to anyone visiting the platform (including non-logged-in users):

• Your display name and profile photo on listings you create
• Room listings you publish (title, description, location, price, photos)
• Service listings you publish — including any contact details (email, phone, WhatsApp) you choose to add

Please only add contact details to a service listing that you are comfortable sharing publicly with anyone.

5. Data retention

We retain your personal information for as long as your account exists or as needed to operate the platform.

• If you delete a listing, it is removed from public view immediately and deleted from our database.
• If you delete your account, your profile and associated data are deleted. Some anonymised records (e.g. inquiry history) may be retained briefly for operational reasons before permanent deletion.
• Authentication session cookies expire after your browser session ends or when you sign out.

6. Your rights under the NZ Privacy Act 2020

Under the Privacy Act 2020, you have the right to:

• Access your personal information that we hold
• Correct any personal information that is inaccurate or out of date
• Delete your account and associated data by contacting us
• Complain to the Office of the Privacy Commissioner if you believe we have breached the Act

To exercise any of these rights, contact us at privacy@nepaleseinnewzealand.co.nz. We will respond within 20 working days as required by the Act.

7. Cookies

We use a single authentication cookie (managed by Supabase) to keep you signed in during your session. We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.

You can disable cookies in your browser settings, but doing so will prevent you from signing in to the platform.

8. Children's privacy

This platform is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact us

For any privacy questions, data requests, or concerns: