Privacy Policy.

PriceGuard NZ ("we", "us", "our") is operated by Aubrae Limited (NZBN issued; trading as PriceGuard NZ), based in Christchurch, New Zealand. This Privacy Policy explains how we collect, use, store, and disclose personal information you give us when you use https://priceguard.nz (the "Service").

We comply with the New Zealand Privacy Act 2020 and its thirteen Information Privacy Principles (IPPs). If anything below is unclear, email support@priceguard.nz and a real Kiwi will get back to you.

Account data - email address, name (optional), hashed password (we never store plain-text passwords), and an authentication method (email/password or Google sign-in).

Product data you give us - the URL of a product you want monitored, the price you paid, the purchase date, and any optional notes or images you upload to your watchlist.

Receipt data - images and PDFs of receipts you choose to upload to your vault. We read each one with AI to extract the retailer, total, items, and warranty information so you can search and reference them later. Receipt files are stored encrypted at rest and are visible only to you.

Usage data - basic technical logs (IP address, browser, timestamps) used to keep the service running, prevent abuse, and debug errors.

Payment data - handled entirely by Stripe. We never see or store your full card number, CVC, or bank credentials. We store only a Stripe session reference, the amount paid (NZD), and the plan you bought, so we can confirm your Pro access.

To run the core service - checking the price of your tracked purchases each day, comparing it to the retailer's protection window, and alerting you when a refund opportunity appears.

To communicate with you - transactional emails (price drops, expiry warnings, password resets, payment receipts). We do not sell your data to advertisers and we do not run third-party advertising on the site.

To keep the platform secure - rate-limiting, abuse detection, fraud prevention on payments.

To improve the product - aggregated, de-identified statistics (e.g. "members tracked X items this month") may be shown publicly. Individual emails and receipts are never shown publicly.

Stripe Payments Europe Ltd - to process card payments. Stripe is PCI-DSS certified and operates under its own Privacy Policy.

Resend - to deliver transactional emails (price drop alerts, password resets, receipts). Resend processes only the recipient email address and the email body.

Google - only if you sign in with Google. We receive only your email, name, and profile picture, per the OAuth consent screen.

OpenAI / Gemini (via the Emergent Universal LLM Key) - when drafting a price-protection request or analysing a receipt photo, the relevant product details (name, price, retailer, receipt text) are sent to the AI model. We do not send your email address or payment data to AI providers.

Government or law enforcement - only if compelled by a valid New Zealand legal order.

We do not sell or rent your personal information to third parties for marketing.

Your account data and product-tracking history live in a managed MongoDB database. We use industry-standard at-rest encryption and TLS in transit. Data may be processed in the United States or the European Union by Stripe, Resend, and our AI providers, but we choose vendors with adequate-privacy frameworks aligned with the NZ Privacy Act.

Account data - until you delete your account or ask us to remove it.

Tracked purchases and price history - until you delete the item or your account.

Payment records - kept for 7 years for tax purposes, as required under New Zealand law.

Email logs - automatically purged after 90 days.

You can access, correct, or delete any personal information we hold about you at any time. Most of it is editable directly inside your dashboard. For deletion of your account and all associated data, email support@priceguard.nz with the subject "Delete my account" and we'll action it within 5 working days.

You can also ask for a portable export of your data in JSON format - same email, subject "Data export".

PriceGuard NZ uses only essential cookies - specifically, a secure session cookie that keeps you signed in. We do not use third-party advertising trackers, social-media pixels, or behavioural analytics.

The Service is intended for users aged 16 or older. We do not knowingly collect data from anyone under 16. If you believe a child has registered, email support@priceguard.nz and we'll remove the account.

Passwords are hashed using bcrypt. All traffic is encrypted with TLS. Sensitive operations (login, password reset, payment) are rate-limited. We are a small team and won't pretend to be unbreakable - but we take security seriously and will notify affected users and the Office of the Privacy Commissioner within 72 hours of any confirmed notifiable privacy breach involving their personal data, in line with section 114 of the Privacy Act 2020.

PriceGuard NZ does not run automated decision-making that produces legal or similarly significant effects about you. The AI we use drafts emails and reads receipts; it does not score you, rank you, profile you, or decide whether you receive a refund. The refund decision is always made by the retailer, by a human, on the retailer's side.

You have the right to: (a) ask what personal information we hold about you; (b) ask for it to be corrected if it is wrong; (c) ask for it to be deleted (subject to legal record-keeping obligations like tax law); (d) complain to us directly; and (e) complain to the Office of the Privacy Commissioner (privacy.org.nz) if you believe we have mishandled your data. We handle access and correction requests at no charge within 20 working days, as required by Information Privacy Principles 6 and 7.

We may update this Privacy Policy from time to time. Material changes will be announced via email to your registered address and via a banner on the site. Continued use of the Service after a change constitutes acceptance.

Aubrae Limited - trading as PriceGuard NZ

Christchurch, New Zealand

Privacy queries: support@priceguard.nz