haume made
This explains what personal information Haume collects, why, and what you can do about it, under the Privacy Act 2020.
1. Who is responsible
Adam Shand, trading as Haume, is responsible for your personal information. Contact support@haume.nz.
Haume is run by Adam Shand, a sole trader in Waikanae, New Zealand, who is also the privacy officer. For anything in this statement, email support@haume.nz.
2. What we collect
We collect only what we need to run your account and your Sites.
We don't use advertising trackers, and we don't sell personal information.
| What | Examples | Why |
|---|---|---|
| Account details | Email address, name if you give it, who invited you, when you accepted the terms | To sign you in, contact you about your account and show which terms you accepted |
| Sign-in records | One-time codes (kept briefly, then deleted), sign-in times | To keep your account secure |
| Sites and Organisations | Site names and addresses, domains, Plan, settings | To run your Sites |
| Billing details | Name, billing address; card details held by the payment provider, not us | To charge for paid Plans |
| Logs | Request logs with IP addresses and query strings removed; your Site's own error logs | To keep Haume working and investigate problems |
| Rate-limit counters | A one-way hash of your IP address, kept for an hour | To stop abuse of sign-in and signup |
| Support and feedback | Emails you send us; hm feedback reports with recent tool activity (never your Site's files or credentials) | To help you and fix problems |
3. Your Sites' visitors
Information your Site collects from its visitors belongs to you. We hold it for you and don't use it for anything else.
Your Site's content and data, including anything it collects from visitors, are stored on Haume's servers on your behalf. We access them only to run and support Haume, keep it secure, or when the law requires. If your Site uses Haume's contact form, we pass each message to you by email and keep only a record of whether it was delivered, not the message itself.
You're responsible for telling your visitors how you use their information.
4. Who we share it with
We use a few service providers to run Haume. They get only what they need.
| Provider | What for | Where |
|---|---|---|
| Voyager | The servers that run Haume and your Sites | New Zealand |
| SMTP2GO | Sending sign-in and account emails, and contact-form messages from your Site | New Zealand |
| Cloudflare | DNS for Haume's domains (no account or Site content), and spam protection (Turnstile) on the haume.nz contact form, which checks the visitor's browser and IP address | Global |
| Let's Encrypt | HTTPS certificates. Your Site's address appears in public certificate logs | United States |
| Stripe | Taking payments for paid Plans | United States |
Your AI agent and its subscription are chosen by you, not by Haume. What they do with your information is covered by your agreement with them.
We'll share information if the law requires it, or to protect people from serious harm.
5. Information stored overseas
Some providers store information outside New Zealand. We choose ones with comparable privacy protections.
Where a provider above is overseas, we rely on it being subject to privacy laws comparable to New Zealand's, or on its contract with us protecting your information, as the Privacy Act requires.
6. How long we keep it
We keep information only as long as we need it.
- Account details: while your account exists, then 90 days.
- Sign-in codes: until used or expired, usually minutes.
- Request and Site logs: up to 14 days. Platform logs and tool activity records: up to 30 days.
- Trial Sites: deleted 37 days after their last use (section 6 of the terms). Paid Sites: 30 days after your Plan ends.
- Backups: up to 90 days after deletion.
- Billing records: 7 years, as New Zealand tax law requires.
7. Your rights
You can ask to see or correct your information, or for your account to be deleted.
Email support@haume.nz to ask for a copy of your personal information, to correct it, or to delete your account. We'll respond within 20 working days. If you're not happy with our response, you can complain to the Privacy Commissioner.
8. Security and breaches
We protect your information carefully and will tell you if a serious breach affects you.
We use encryption in transit, keep Sites isolated from each other, and limit access to Haume's systems to the operator. If a privacy breach is likely to cause serious harm, we'll notify you and the Privacy Commissioner as the Privacy Act requires.
9. Changes
When this statement changes, we'll update the version date and tell you at your next sign-in.