Privacy Policy
Our commitment to your privacy
1. Introduction
At Afterburner (NZBN: 9429049190839), we prioritise protecting your privacy and ensuring the safe handling of your personal information, in compliance with New Zealand’s Privacy Act 2020.
2. What Information We Collect
We collect the minimum amount of personal information necessary for providing our services, including:
Uploaded Data: Client data and documents submitted for analysis.
Technical Information: Usage data such as IP addresses and browser types to enhance the platform’s performance.
Cookies: We use cookies to improve user experience and collect analytics for service enhancement.
3. How We Use Your Information
The information we collect is used to:
Provide Services: Facilitate the delivery of Afterburner’s features and functions.
Platform Optimisation: Improve our platform based on user data to ensure seamless functionality.
Compliance: Ensure compliance with legal requirements and service obligations.
Uploaded data is processed and immediately deleted unless specifically shared with our development team for feedback. After processing, the data cannot be retrieved or recovered.
4. Data Security
We use robust encryption methods to secure all communication between your device and our servers:
HTTPS Encryption: All data exchanged between your system and ours is encrypted using HTTPS.
WebSockets Authentication: Secure, token-based authentication between your device and the server prevents unauthorised access.
OpenAI Integration: We use OpenAI for AI analysis, and all data shared with OpenAI is encrypted in transit and at rest. No training on user data occurs, and OpenAI may retain information for up to 30 days before secure deletion.
5. Third-Party Services
We collaborate with third-party providers such as OpenAI for AI analysis. OpenAI follows stringent privacy policies to ensure that any data processed is encrypted and handled securely. They may retain data for a maximum of 30 days for abuse monitoring, after which it is deleted.
We do not share your data with third parties for marketing or any other purposes unless legally required.
6. Cookies and Tracking Technologies
We use cookies to improve your experience on our platform by:
Enhancing functionality
Collecting performance data to tailor services
You can disable cookies via your browser settings, but this may impact some features of our platform.
7. Information Sharing
We do not sell, rent, or trade your personal information. Your data is only shared with third parties when necessary for service provision (e.g., OpenAI) or to meet legal obligations.
8. Your Rights
Under the New Zealand Privacy Act 2020, you have the right to access and correct your personal information. You may contact us at any time to request corrections or updates to your data. If you wish to exercise these rights, please reach out to us via the contact details provided.
8.1 Data Deletion Requests (“Right to Deletion/Erasure”)
You can formally request deletion of your personal information (“Data Deletion Request”) as follows:
How to submit a request:
Email us at: privacy@afterburner.co.nz with the subject line: “Data Deletion Request”; or
Use any in-product or web forms we provide for privacy or data requests (where available).
What to include in your request:
Your full name and contact email address;
The organisation or account you are associated with (if applicable);
A description of the data you would like deleted (for example, account profile, organisation workspace, specific project, or support history);
Any relevant context that will help us locate the data.
Verification:
We may request additional information to verify your identity or authority (for example, confirming control of the email address associated with the account, or verifying that you are authorised to act on behalf of an organisation).What we will delete:
Subject to legal and contractual obligations, we will delete or irreversibly anonymise:account and profile information associated with you;
Uploaded Data and associated artefacts that we still hold;
associated logs and metadata that can reasonably be linked to you, where these are not required for security, audit, or legal compliance.
Because Uploaded Data is generally deleted shortly after processing, there may be cases where no remaining copies of specific uploads exist at the time of your request.
What we may retain:
We may need to retain certain limited information where we have a lawful reason to do so, including:records necessary for tax, accounting, and audit;
security, fraud-prevention, and abuse-monitoring logs, where retention is strictly necessary;
information required to comply with legal obligations or to establish, exercise, or defend legal claims.
Where we retain data for these reasons, we will restrict its use to those purposes only.
Backups and disaster recovery:
Personal information may continue to exist in backup archives for a limited period until those backups are overwritten or deleted in the ordinary course of business. If we restore a backup, any personal information restored relating to you will be re-subjected to our deletion processes.Response timeframe:
We aim to respond to Data Deletion Requests within 30 days of receipt of a complete and verified request, and will inform you of the outcome or the reasons why we are unable to fully comply (for example, due to legal retention requirements).
9. Data Retention
We retain personal information only for as long as it is reasonably necessary for the purposes described in this Policy, including:
providing and maintaining the services;
operating and improving our platform;
complying with legal, tax, accounting, and regulatory obligations;
resolving disputes and enforcing our agreements.
In particular:
Uploaded Data: As described above, Uploaded Data is processed and generally deleted shortly after processing unless you expressly agree that we may retain it for longer (for example, for product feedback or support). Once deleted, it cannot be retrieved.
Account and Contact Information: We retain account information for as long as your account is active and for a reasonable period thereafter (for example, to maintain records of your transactions, comply with legal obligations, or resolve disputes).
Technical Logs and Analytics: We retain technical and analytics data for the period reasonably necessary to support security, troubleshooting, capacity planning, and service improvement, after which it is deleted or anonymised.
If you request deletion of your personal information, we will process your request in accordance with section 8.1 of this Policy.
10. Data Transfer and International Storage
Afterburner utilises servers and cloud infrastructure that may be located in various jurisdictions. When personal information is transferred outside of New Zealand, we take appropriate steps to ensure that it is protected with safeguards that are comparable to the protections under the New Zealand Privacy Act 2020 and any other applicable data protection laws. These measures may include contractual protections, technical safeguards, and due diligence on our service providers.
11. Contact Us
If you have any questions about this Privacy Policy, or if you would like to exercise your privacy rights (including submitting a Data Deletion Request), please contact us at:
Email: privacy@afterburner.co.nz
Postal address: City Works Depot Shed 4/90 Wellesley Street West, Auckland Central, Auckland 1010
If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority, such as the Office of the Privacy Commissioner in New Zealand.
