Privacy Policy

1. Introduction

This Privacy Policy explains how Caffeine ("we", "us", "our") collects, uses, stores, and discloses information in connection with the Caffeine Aotearoa New Zealand Startup Databank, accessible at databank.caffeinedaily.co (the "Service").

We are committed to protecting personal information in accordance with the New Zealand Privacy Act 2020 and the Information Privacy Principles. By using the Service, you agree to the collection and use of information in accordance with this policy.

The Service is a private, access-controlled database. Access is restricted to authorised users only.

2. Information we collect

2.1 Information about authorised users (account holders)

When you sign in to the Service, we collect:

• Your name and email address, provided through your authentication method (Google sign-in or email/password).
• Authentication and session data necessary to keep you securely logged in.
• Basic usage information relating to your access to the Service.

We use a third-party authentication provider (Supabase Auth) and, where you choose Google sign-in, Google's OAuth service. When you sign in with Google, we receive your basic Google profile information (name and email address) as permitted by the scope you approve. We do not receive your Google password.

2.2 Information about companies and individuals in the database

The Service is a database of New Zealand startup companies. It contains:

• Company information (such as name, website, location, founding year, size, funding, and related business data), compiled from publicly available sources.
• Information about individuals associated with those companies (such as founders', directors', and key personnel's names, roles, and business contact details), compiled from publicly available sources.

This information is collected from public sources including company websites, public registries, news media, and other publicly accessible records, and may be enriched or verified using automated tools and third-party services.

3. How we use information

We use the information we collect to:

• Authenticate users and provide secure access to the Service.
• Operate, maintain, and improve the database and its features.
• Compile, verify, enrich, and present information about New Zealand startups.
• Communicate with authorised users about the Service.
• Comply with our legal obligations.

4. Disclosure of information

We do not sell personal information. We may disclose information:

• To service providers who help us operate the Service (such as hosting, database, authentication, and data-enrichment providers), bound by appropriate confidentiality and data-protection obligations.
• Where required by law or to respond to lawful requests from public authorities.
• To protect the rights, property, or safety of Caffeine, our users, or others.

5. Third-party services

The Service relies on third-party providers, which may process information on our behalf, including:

• Supabase — database hosting and authentication.
• Google — OAuth sign-in (where selected).
• Automated data-enrichment and verification services used to compile and validate database content.

These providers process data under their own privacy policies and our agreements with them. Some providers may store or process data outside New Zealand; where this occurs, we take reasonable steps to ensure comparable protection of personal information.

6. Data retention

We retain authorised-user account information for as long as your account is active and as needed to provide the Service. We retain company and individual database records for as long as they remain relevant to the purpose of the database, subject to the rights described below.

7. Your rights

Under the New Zealand Privacy Act 2020, individuals have the right to:

• Access the personal information we hold about them.
• Request correction of personal information that is inaccurate, out of date, incomplete, or misleading.
• Request removal of their personal information from the database.

This applies both to authorised users and to individuals whose information appears in the database (for example, founders or company personnel). If you wish to access, correct, or request removal of personal information about you, please contact us using the details in Section 11. We will respond in accordance with the Privacy Act 2020.

8. Security

We take reasonable technical and organisational measures to protect information against unauthorised access, use, modification, or disclosure. Access to the Service requires authentication, and access to underlying data is restricted at the database level to authorised users. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Cookies and similar technologies

The Service uses cookies and similar technologies that are necessary for authentication and to keep you securely signed in. These are essential to the operation of the Service.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, where appropriate, notify authorised users. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact us

For any questions about this Privacy Policy, or to exercise your rights under it, contact:

Caffeine
Email: hello@caffeinedaily.co

If you are not satisfied with our response, you have the right to complain to the Office of the New Zealand Privacy Commissioner (www.privacy.org.nz).