KupengaPrivacy
Kupenga is a New Zealand service for people who sell to licensed premises. This page says what personal information the site handles. It is written for the Privacy Act 2020.
What we collect
- Account email, and a hash of your password when you set one. We never store the password you typed. If you use Google sign-in, we store the email Google verifies and Google’s account id, and we do not store a password for that sign-in
- Notes, contact edits, and “contacted” marks you save while signed in
- The usual host logs (such as IP address and browser) that come with running the site
- What you type into the AI assistant, its answers, and when, kept for 90 days
The lists also show information published about licensed premises: trading name, address, licence dates, and a phone number or email where one has been found. That can be personal information about someone at the business. It is there so a signed-in user can see who to call. Signed-out visitors see those contact fields masked.
Why, and who receives it
We use account and lead information to run your login and the lead list. We do not sell that information. The site and database are hosted by DigitalOcean, which can mean storage outside New Zealand. Public register text is shown inside the product to signed-in users.
You can create an account with an email and a password. When Google sign-in is turned on, you can use a Google account instead. The login page then loads Google’s sign-in script, and Google handles that sign-in. Without an account you can see the public teaser, not the contact column.
When you ask for a venue’s phone number from Google Maps, our server sends Google that venue’s Google place reference, and nothing about you. The number is shown to you and is not stored.
AI assistant
The chat in the corner of each page is an AI assistant. When you use it, we keep your messages, its answers and the time of each for 90 days, then delete them. We use them to answer you, to see what visitors ask and to improve the site. We may also summarise a day’s questions for the Kupenga team, using the same AI provider. A summary can quote questions word for word, and is deleted after 90 days like the messages. We do not ask for your name or email in the chat. Please do not type personal information you do not want kept.
To write an answer, your message and the recent conversation are sent to our AI provider (xAI or Anthropic). They process it on our behalf, which can mean outside New Zealand.
The chat asks before it sets its cookie. If you accept, a cookie holding a random ID lets the chat show your past conversation when you come back, for up to 90 days. If you decline, the chat forgets the conversation when you leave the page, but the messages are still kept for 90 days as above. “Clear chat history” in the chat deletes the stored conversation straight away (a daily summary written before you cleared it can still quote it until it is deleted). You can change your cookie choice with “Cookie settings” in the chat panel or at the foot of the page.
Access, correction, and complaints
You can edit notes on a lead while you are signed in. To access other personal information we hold, or to ask for a correction or deletion, email [email protected]. We keep the account and the notes until you ask us to delete them or you delete them in the product.
If you are not happy with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Cookies and similar storage
Sign-in is kept in this browser’s local storage, not in a cookie. The only cookies are the AI assistant’s: one records your cookie choice, and one keeps your chat history if you accept it. We do not run analytics or advertising tags. Details are on the cookies page. The rules for using the product are in the terms.