Privacy Policy
Last updated: March 17, 2026
1. Information We Collect
We collect information you provide directly: name, email, phone number, property listing details, and messages sent through our platform. We also collect usage data including page views, browser type, and IP address.
2. Privacy Officer
As required by the New Zealand Privacy Act 2020, TidalListings has appointed a Privacy Officer responsible for ensuring compliance with our privacy obligations. For any privacy-related enquiries or complaints, contact our Privacy Officer at privacy@tidallistings.com.
3. IPP3A — Indirect Collection Notice
In accordance with the New Zealand Privacy Amendment Act 2025 (effective May 1, 2026), where we collect personal information about you indirectly — for example through your use of our platform, analytics, or third-party services — we will take reasonable steps to ensure you are aware of: what information is being collected, why it is being collected, who will receive it, and your right to access and correct it. This notice, alongside our full Privacy Policy, satisfies this requirement.
4. How We Use Your Information
We use your information to: operate and maintain the Service, process listing subscriptions, facilitate communication between buyers and sellers, send transactional emails, and improve the Service.
5. Information Sharing
We share data with the following third-party services: Stripe (payment processing), Supabase (database and file storage, US East), Vercel (web hosting), OpenAI (AI content moderation — listing descriptions and messages are sent to OpenAI's API for automated screening). We do not sell your personal information. We may disclose information if required by law.
6. Data Security
We implement industry-standard security measures including encrypted data transmission (HTTPS), row-level security on our database, and secure authentication via Supabase Auth.
7. Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.
8. Your Rights
You may request access to, correction of, or deletion of your personal data by contacting us. You may delete your account at any time through the Settings page.
9. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, your personal data is anonymised within 30 days, except where we are required by law to retain it longer. Listing data and message history are soft-deleted and purged after 90 days.
10. Your Rights by Region
Depending on your location, you may have additional rights:
- New Zealand users are protected under the Privacy Act 2020 and may contact the Office of the Privacy Commissioner at privacy.org.nz.
- EU/EEA users have rights under GDPR including access, rectification, erasure, and data portability.
- US users in applicable states have rights under relevant state privacy laws.
To exercise any of these rights, contact privacy@tidallistings.com.
11. Governing Law
This Privacy Policy is governed by the laws of New Zealand. TidalListings is operated from New Zealand.
12. Contact
For privacy questions or to exercise your data rights, contact privacy@tidallistings.com. For New Zealand Privacy Act complaints, you may also contact the Office of the Privacy Commissioner.