Privacy
How NewRide handles your information under the Privacy Act 2020.
We only collect what we need to run the marketplace. The table below sets out the categories of personal information we hold, examples, and the purpose of collection.
| Category | Examples | Purpose |
|---|---|---|
| Identity & contact | Email, NZ mobile number, dealer NZBN/RMVT number | Account creation, verification, notifications |
| Listing data | Vehicle plate, photos, price, description, location | Published listings (visible to other users as you choose) |
| Communications | Message threads between buyers and sellers | Running the in-app messaging service |
| Usage & engagement | Watchlist saves, searches, view events, notification state | Marketplace features (alerts, saved searches, analytics) |
| Payment records | Upgrade purchases, subscription invoices, lead-reveal charges | Processing and reconciling paid features |
| Trust & safety | Moderation queue entries, audit logs, scam-prevention signals | Protecting buyers and sellers from fraud |
We do not sell your information. The processors below handle data on our behalf under data-processing agreements; each is bound to use it only to provide the service we engage them for.
| Processor | Purpose | Data shared | Jurisdiction |
|---|---|---|---|
| Supabase | Database, authentication, file storage (listing photos) | Account, listings, messages, photos, analytics aggregates | AWS Sydney (ap-southeast-2) — Australia |
| Stripe | Payment processing (seller upgrades, dealer subscriptions, lead metering) | Card tokens, billing details, subscription state | Stripe global infrastructure (PCI-DSS compliant) |
| Resend | Transactional + notification email delivery | Email address, message content for notifications | United States |
| Twilio (Verify) | SMS one-time-code verification for NZ mobile numbers | Mobile number, one-time codes | United States (data retained per Twilio policy) |
| Cloudflare | Edge delivery, CAPTCHA (Turnstile), DDoS / abuse protection | IP address, request metadata | Global edge network |
| Sentry | Error monitoring + performance | Error traces, request metadata (scrubbed of PII) | United States / EU |
NewRideis a New Zealand service. Some processors listed above store data outside New Zealand — notably Resend, Twilio, Sentry and parts of Cloudflare's edge network in the United States, and Stripe's global payment infrastructure. Where this occurs, the transfer relies on the processor's standard contractual clauses and their certification or safeguards (for example, Stripe's PCI-DSS compliance and the EU–US/UK–US data frameworks). Your core marketplace data — accounts, listings, messages, and photos — is stored by Supabase in AWS Sydney (Australia), which the Privacy Act 2020 treats as a comparable-jurisdiction transfer.
We retain private messages for up to 24 months, after which the message body is automatically replaced with a sealed hash while metadata is kept for aggregate audit.
Threads under a legal hold (disputes, scam reports, or law-enforcement requests) are exempt from redaction until released.
You have the right to access and correct your personal information (Privacy Act 2020, principles 6 and 9). Contact us to exercise these rights.
Beyond the automatic 24-month retention window, you may request earlier redaction of your messages by contacting us. Threads subject to a legal hold (disputes, scam reports, or law-enforcement requests) are exempt until released.
Questions about this notice or a privacy request? Email privacy@newride.co.nz.