Privacy policy

Last updated 30 October 2026. This policy explains how certify.nz, operated by 0 Digital, handles personal information under the Privacy Act 2020.

What we collect

• Account details: name, email, phone, company and IQP registration details.
• Building information you enter, including contacts for owners, managers and contractors.
• Inspection results, notes, photos and signatures.
• Technical information such as IP address and log-in times, for security.

Why we collect it

To provide the service: recording inspections, producing and sending reports, verifying reports, securing accounts and supporting you. We do not sell personal information or use it for advertising.

Who can see it

People in your company account, according to their role. People you send reports to. Our hosting and email provider (Hostinger, with servers in Indonesia and backups in Singapore), who stores it on our behalf and may not use it for any other purpose. Anyone holding a verify code can see a report's issuer and date, not its contents.

AI help

certify.nz has optional AI help: reading business cards, BWOF and compliance schedule photos, gauges and check sheets; tidying spreadsheet imports and site notes; filling checks from spoken or typed notes; drafting defect descriptions from photos, owner summaries and covering emails; checking a report before it is issued; and answering questions about your own buildings. When you use one of these, what it needs (the photo, the rows, the note, or the report details, which can include owner names, emails and phone numbers) is sent to our AI provider, Anthropic (United States), only to do that task. We don't keep the photos sent for reading, and Anthropic doesn't use any of it to train its models. You see and confirm every suggestion before anything is saved. A company admin can switch AI help off in Settings, and everything works without it.

Payments

Payments are handled by Stripe (United States). Card details go straight to Stripe and are never stored by certify.nz; we receive the plan, payment status and invoice details.

Website analytics and cookies

We use Google Analytics (Google, United States) to count visits and see which pages help people, for example how many visitors start a trial. It uses cookies and collects details such as pages viewed, device type and approximate location; it doesn't store IP addresses. We don't use it for advertising. You can block these cookies in your browser settings or with Google's opt-out add-on (tools.google.com/dlpage/gaoptout). The app also stores inspections on your device so you can work offline.

Overseas providers

Some of our providers are overseas: Hostinger (Indonesia and Singapore), Stripe, Google and Anthropic (United States). We only use providers that are required to protect personal information in ways comparable to the Privacy Act 2020, and they may only use it to provide their service to us.

Security

Information is encrypted in transit. Site access codes are encrypted at rest. Photos and reports are stored privately and only served to signed-in users. Changes are recorded in an audit log.

If something goes wrong

If a privacy breach is likely to cause serious harm, we will tell the people affected and the Privacy Commissioner as soon as practicable, as the Privacy Act 2020 requires.

Keeping and deleting

We keep information while your account is active and as long as needed for issued reports and legal record-keeping. You can ask us for a copy, a correction or deletion at any time.

Your rights

You can access and correct your personal information. Email our privacy officer at hello@certify.nz or contact us; you can also contact the Office of the Privacy Commissioner (privacy.org.nz).