Privacy Policy
Version 1.0 · Updated 23 August 2026
HomeStation is operated by Nova Horizon Limited (NZBN 9429053863584, company number 9449257), a company registered in New Zealand, trading as HomeStation (“we”, “us”). This policy explains how we collect, use, store, and protect your personal information under the New Zealand Privacy Act 2020. Questions or requests: hello@homestation.co.nz.
1. What we collect
Account information — your name, email address, and buyer type (first home buyer / mover / investor). If you sign up with email and password, the password is stored as a hash by our authentication provider and is never visible to us. If you sign in with Google, we receive your name and email address from Google; we never receive your Google password.
Journey information — your progress through the home-buying journey: stations completed, checklist items ticked, deadlines you set, and notes you write.
Property and document information — property addresses and nicknames you add; the documents you upload (such as LIM reports and builder’s reports); the text extracted from those documents; and the AI-generated summaries, findings, and insights produced for you. We store the original file you upload, so that you can download it again later.
Usage and device information — aggregate analytics (pages viewed, features used), approximate location derived from IP address, browser and device type. We use this to understand what works and fix what doesn’t.
We collect this directly from you, or automatically when you use the Service. We do not buy data about you from anyone.
2. Why we collect it
We use your information to: provide the Service (the map, tracking, document storage and analysis); process payments when paid features launch; send service emails (verification, password reset, important notices); improve the Service using aggregated usage patterns; meet our legal obligations; and protect the Service from abuse.
We do not: sell your personal information; share it with real estate agents, banks, or insurers; use your documents to train AI models; or show advertising against your data.
3. Who processes your information
We use a small number of service providers to run HomeStation:
| Provider | Role | Where |
|---|---|---|
| Supabase | Database, authentication, and file storage | Hosted on AWS in Sydney, Australia |
| Anthropic | AI analysis of document text via API | United States — Anthropic does not use API data to train its models |
| Vercel | Website and application hosting | Global CDN, US-based provider |
| Vercel Analytics | Aggregate usage analytics | Same |
| Resend | Sending service emails | United States |
| Zoho Mail | Receiving email sent to our contact address | Operated from outside New Zealand |
| Optional “Sign in with Google” authentication | Global | |
| Stripe | Payment processing — not yet active; will apply when paid features launch | Global; we never see or store your card details |
Some of these providers are outside New Zealand. Where information is disclosed overseas, we take reasonable steps to ensure it is protected by safeguards comparable to the NZ Privacy Act, including each provider’s contractual data-protection commitments.
4. How we protect it
Your information is encrypted in transit (HTTPS) and at rest. Access to your documents, files, and findings is restricted to your own account and enforced at the database and file-storage level (row-level security), not just in the app interface. Founder access to production systems is protected by multi-factor authentication.
5. How long we keep it
We keep your information while your account is active.
You can delete an individual document, a property, or your entire account at any time. When you do, we delete the associated information — including the original uploaded file — from our live systems promptly. Where residual copies exist in routine system backups or operational logs held by our infrastructure providers, they are removed in the ordinary course of those systems’ retention cycles.
We may retain minimal records where required by law, for example payment records for tax purposes once paid features launch.
6. Your rights
Under the Privacy Act 2020 you may: access the personal information we hold about you; ask us to correct it; and ask us to delete your account and data. Email hello@homestation.co.nz — we respond within 20 working days, and usually much faster.
If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
7. If something goes wrong
If a privacy breach occurs that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected users as required by the Privacy Act 2020, promptly and plainly: what happened, what information was involved, what we have done, and what you should do.
8. Cookies and analytics
We use essential cookies to keep you signed in, and Vercel Analytics to understand which pages and features are used. Vercel Analytics does not use cookies to identify you across sites. We do not use advertising cookies or cross-site tracking.
9. Children
The Service is intended for adults (18+) navigating a property purchase and is not directed at children.
10. Changes
We may update this policy. For material changes we will notify you in the Service or by email before they take effect. The “Last updated” date at the top always reflects the current version.
HomeStation · Nova Horizon Limited (NZBN 9429053863584), Auckland, New Zealand · hello@homestation.co.nz