Privacy Policy

1. Who We Are

ContractGuard NZ is a contract analysis platform designed for New Zealand construction subcontractors. We help you review, manage, and negotiate your subcontract agreements using AI-assisted analysis. ContractGuard NZ is a product of Kompliy. Our contact email for all privacy-related enquiries is [email protected].

2. What Information We Collect

We collect only the information necessary to provide our services:

• •Account information: Name, email address, job title, phone number, and company name — provided when your account is created by your Company Admin.
• •Contract documents: PDF files you upload for analysis, including subcontracts, head contracts, variations, and payment claims.
• •Analysis data: The AI-generated analysis results, risk assessments, negotiation notes, and amendment records created as part of the contract review process.
• •Usage data: Basic usage information such as login times, features used, and pages visited — collected to improve the platform.

3. How We Use Your Information

We use your information for the following purposes:

• •Providing and operating the ContractGuard NZ platform, including AI contract analysis, payment claim management, and dispute tools.
• •Authenticating your identity and managing your account access.
• •Sending transactional emails — such as analysis completion notifications, invitation emails, and account-related alerts.
• •Improving and maintaining the platform, including bug fixes, performance optimisation, and feature development.
• •Complying with applicable New Zealand laws and regulations.

4. AI Processing & Your Data

When you upload a contract for analysis, the document content is sent to our AI processing service for review. This processing is performed in a stateless session — meaning your contract data is not stored by the AI model or used for any purpose beyond delivering your analysis.

We never use your contracts, analysis results, pricing, or any other commercial information to train, fine-tune, or improve any AI model — ours or anyone else's.

Your data exists solely for your benefit. The analysis results are stored in your account for your ongoing access and are subject to the same access controls and encryption as all other data on the platform.

5. How We Store & Protect Your Information

All data is stored using enterprise-grade cloud infrastructure with the following protections:

• •AES-256 encryption at rest for all stored files and data.
• •TLS 1.2+ encryption for all data in transit between your browser and our servers.
• •Role-based access controls ensuring company data is siloed — no other company or user can access your information.
• •Passwords stored using bcrypt hashing — we never store plaintext passwords.
• •Regular automated backups and system monitoring.

For full details on our security practices, including data breach response, see our Security page.

6. Who We Share Your Information With

We do not sell, rent, or trade your personal information. We share information only in these limited circumstances:

• •Your company team: Users within your company can see contracts and analysis results assigned to the company, based on their role permissions.
• •Lawyer review: When you explicitly share a contract with a lawyer for review, they receive a secure, time-limited link to that specific contract. This is initiated by you or your Company Admin.
• •Service providers: We use cloud hosting and email delivery services to operate the platform. These providers process data on our behalf under strict contractual obligations to protect it.
• •Legal requirements: We may disclose information if required by New Zealand law, court order, or regulatory authority.

7. Your Rights Under the NZ Privacy Act 2020

Under the New Zealand Privacy Act 2020, you have the right to:

• •Access your personal information that we hold.
• •Correct any inaccurate personal information.
• •Request deletion of your personal information and contract data.
• •Complain to the Office of the Privacy Commissioner if you believe your privacy has been breached.

To exercise any of these rights, email us at [email protected]. We will respond within 20 working days as required by the Act.

8. Data Retention

We retain your personal information and contract data only for as long as your account is active and you choose to keep it. You can delete individual contracts at any time through your dashboard. If your company account is closed or your subscription expires, all associated data — including contracts, analysis results, and personal information — will be permanently deleted within 30 days.

9. Cookies & Session Data

We use essential cookies to keep you logged in and maintain your session. We do not use third-party advertising cookies or tracking pixels. No personal information is shared with advertising networks.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify active users via email. The "effective date" at the top of this page will always reflect the most recent version.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, or wish to make a complaint, please contact us: