Privacy Policy

1. Introduction

Welcome to MyOIA.nz. This privacy policy explains how RB ALLIANCE LIMITED ("we", "our", or "us") collects, uses, discloses, and safeguards your information when you use our Official Information Act (OIA) and Local Government Official Information and Meetings Act (LGOIMA) request management service.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Name and email address when you create an account
• OIA/LGOIMA request content and correspondence
• Payment information when subscribing to paid plans (processed securely via Stripe)
• Communication preferences and settings

2.2 Automatically Collected Information

When you use our service, we automatically collect:

• IP address and browser information
• Device information and operating system
• Usage data including pages visited and features used
• Cookies and similar tracking technologies

2.3 Email Communications

We process emails sent to and from your unique MyOIA.nz email address to facilitate your OIA requests. This includes:

• Outgoing OIA requests sent on your behalf
• Incoming responses from government agencies
• System notifications and updates

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process and manage your OIA/LGOIMA requests
• Send email communications on your behalf to government agencies
• Process payments and manage subscriptions
• Send you service-related notifications
• Respond to your comments, questions, and support requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse

4. Information Sharing and Disclosure

4.1 Government Agencies

By using our service to submit OIA/LGOIMA requests, you authorize us to share your request content and contact information with the relevant government agencies.

4.2 Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

• Resend - Email delivery services
• Stripe - Payment processing
• Cloudflare - Hosting and security services
• Anthropic - AI-powered features (request drafting assistance)

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Secure password hashing using industry-standard algorithms
• Regular security assessments and updates
• Access controls and authentication requirements

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

You may request deletion of your account and associated data at any time.

7. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access your personal information
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to processing of your information
• Data portability

To exercise these rights, please contact us using the details below.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences
• Understand how you use our service
• Improve our services

You can control cookies through your browser settings.

9. Third-Party Integrations

9.1 NationBuilder (Premium Feature)

If you connect your NationBuilder account, we will access and sync data according to the permissions you grant. This data is used solely to enhance your OIA management experience.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us