Privacy Policy

Last updated: [DATE] · Orlin Limited, NZBN 9429053657794

⚠️ DRAFT — NOT READY TO PUBLISH.

Every bracketed item below is an unresolved fact, and the technical claims must be checked against the app as actually built before this goes live. A privacy policy that describes something the app does not do is both an App Store Guideline 5.1.1 rejection and a misrepresentation under the Privacy Act. Finish the security pass first, then fill this in.

1. Who we are

EveryStop is operated by Orlin Limited (NZBN 9429053657794), a company registered in New Zealand. In this policy, “we” and “us” mean Orlin Limited, and “the app” means EveryStop.

We are the agency responsible for personal information held in EveryStop under the Privacy Act 2020.

2. The two kinds of information in EveryStop

This distinction matters, because the two are treated differently.

a. Information about you, our customer

Your name and email address, used to create and secure your account
The name of your run or business
Contact details you give us when enquiring or arranging setup
Records of support conversations
[Billing details — confirm what is stored by us vs by the payment provider]

b. Information about the stops on your run

To do its job, EveryStop holds information about the addresses you deliver to. Depending on what you and your drivers record, this can include:

Addresses, and the locations of gates, boxes and drop points
Names and phone numbers of people at those addresses
Access information such as gate codes and entry instructions
Hazard notes, including dogs on the property
Delivery preferences and instructions
Delivery history — what was delivered to which stop, and when

This information belongs to your business. You decide what goes in, you can correct or delete it, and you can ask us for a copy of it at any time. We do not sell it, share it with other customers, or use it to build any product other than your own instance of EveryStop.

⚠️ GET LEGAL ADVICE ON THIS SECTION SPECIFICALLY.

The people living at the stops on a run are not users of the app and have not agreed to anything. Recording their names, phone numbers, gate codes and hazard notes is collection of personal information about identifiable individuals, and IPPs 1–4 of the Privacy Act apply to it — including collecting directly from the person concerned and making them aware of the collection. This policy needs to state honestly who is responsible for that: most likely you as the contractor are the collecting agency and Orlin processes it for you, which is a materially different arrangement from the one described above. This is the single highest-risk item in the product and it needs a New Zealand privacy lawyer, not a template.

3. Where information is stored

Run data is stored in our database, hosted by Supabase in the [Sydney, Australia — CONFIRM] region. Storing it outside New Zealand is permitted under the Privacy Act where the receiving jurisdiction provides comparable safeguards; Australia does.

A copy is also held on each device that uses the app, so the app keeps working where there is no mobile coverage. This is what makes the app usable on a rural run, and it means run information is physically present on your and your drivers’ phones and tablets.

⚠️ Blocked on task #4 (on-device encryption decision). If the local database is encrypted at rest, say so and name the mechanism. If it is not, this section must say plainly that the on-device copy relies on the device’s own lock screen and platform encryption. Do not claim encryption that is not implemented.

4. Who can see your information

You and the drivers you invite. Access is enforced at the database, not merely hidden in the app, so a user cannot reach another business’s run data.
Us, only when necessary — to set your run up, to investigate a fault you have reported, or where the law requires it.
Nobody else. We do not sell personal information, and we do not share it with other customers or with New Zealand Post.

EveryStop is an independent product. It is not affiliated with, endorsed by, or connected to New Zealand Post, and it does not connect to their systems.

5. Service providers we rely on

Supabase — database, authentication and file storage
PowerSync — keeps the on-device copy in step with the database
Google Maps Platform — maps, geocoding and directions. [CONFIRM what is sent: coordinates and addresses, not names]
Cloudflare — this website
[Payment provider — to be added]
[Email provider for enquiries — to be added]

6. How long we keep it

Run data is kept for as long as your subscription is active. Daily delivery history is kept as a record of the run and is not overwritten.

If you stop using EveryStop, we will keep your data for [RETENTION PERIOD] so it can be restored if you return, then delete it. You can ask us to delete it sooner.

7. Your rights

Under the Privacy Act 2020 you can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong. We will respond within 20 working days, which is the statutory time limit.

To make a request, email samgraham@orlin.nz.

8. Security

Information is transmitted over encrypted connections and access is controlled per business at the database level. [Describe the actual measures once the security pass is complete — do not overstate them.]

If a privacy breach occurs that is likely to cause serious harm, we will notify the affected people and the Office of the Privacy Commissioner, as the Privacy Act requires.

9. Children

EveryStop is a tool for businesses and is not intended for use by children.

10. Changes to this policy

If we change this policy we will update the date at the top, and tell you directly if the change is significant.

11. Contact and complaints

Email: samgraham@orlin.nz
Company: Orlin Limited, NZBN 9429053657794
Location: Waikato, New Zealand

If you are not satisfied with how we handle a privacy issue, you can complain to the Office of the Privacy Commissioner.