NEDPrivacy Policy
Last updated: 11 July 2026
NED ("NED", "we", "us") provides ready-to-run, manager-led sales-training modules for real estate teams. This policy explains how we handle personal information, consistent with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs). NED is operated by the team behind AIREA; questions can be sent to [email protected].
Information we collect
| Who | What | Why |
|---|---|---|
| Attendees (your team) | Full name, email address, and a per-device identifier; the answers and attendance for a session | To record who attended a training session, email each attendee a confirmation copy, and add the record to their manager's training register |
| Account holders | Name, email, agency/office details (office name, licensed agency name and licence number, branch address, contact), trial and subscription status, receipts and session history | To run your account, manage your trial or subscription, print office details on attendance records, and show your attendance and billing records |
| Payments | Card details are entered directly with Stripe; we receive only payment status, amount, currency, customer email, module id and Stripe receipt/session references. We never receive or store your full card number or CVV | To set up and manage your subscription, prevent duplicate charges, and show account receipts and invoices |
| Sign-in | Your email (magic link) or your verified Google account email (Sign in with Google) | To authenticate you, passwordlessly |
How we use it
We use personal information only for the purposes above: recording and confirming attendance, providing your account and the modules, taking payment, and communicating with you about your account or a session. We do not use attendee or manager email addresses for marketing without consent (consistent with the Unsolicited Electronic Messages Act 2007).
Who we share it with
We share personal information only with the providers needed to deliver the service:
- Your manager / agency — attendance records are made available to the manager who ran the session, as their internal training record.
- Hosting and database providers — used to operate the website, API, account records, receipts and training registers.
- Stripe — payment processing.
- Google — only if you choose "Sign in with Google".
- Email delivery — to send sign-in links and attendance confirmations.
We do not sell personal information.
Overseas processing
Some providers we use, including payment, sign-in, email delivery, hosting, monitoring or support providers, may process information outside New Zealand. Where IPP 12 applies, we use providers and arrangements intended to provide comparable privacy safeguards.
Cookies and local storage
We use strictly-necessary cookies for manager sign-in and Google sign-in security. The join page uses your browser's local storage to remember the session you joined, your name, your email address, and a per-device identifier so your phone can answer questions and avoid duplicate sign-ins. We do not use third-party advertising or analytics cookies.
Retention
Attendance records are kept in the manager's account so they remain available as a training record. Transient live-session data (the in-room question/answer state) is deleted automatically after 14 days. Expired sign-in tokens and sessions are purged regularly. You can ask us to delete personal information we hold about you (see below), subject to any record-keeping the manager or the law requires.
Your rights (access and correction)
Under IPP 6 and IPP 7 you may ask us for a copy of the personal information we hold about you, and ask us to correct it. Email [email protected] and we will respond within the timeframes the Privacy Act requires. Note that the manager who ran your session also holds their own copy of the attendance record.
Security
Access is authenticated, data in transit is encrypted (HTTPS), passwords are not used (passwordless sign-in), and server credentials are kept out of the codebase. Subscriptions, receipts and attendance registers are checked server-side. Payment card entry happens on Stripe-hosted Checkout, so NED does not store card numbers or CVVs. More detail is available in our Security Overview. No system is perfectly secure, but we take reasonable steps to protect personal information from loss, misuse and unauthorised access (IPP 5).
Privacy breaches
If we become aware of a privacy breach that has caused, or is likely to cause, serious harm, we will assess and notify as required by the Privacy Act 2020, including notifying the Office of the Privacy Commissioner and affected people where required.
Complaints
If you have a privacy concern, contact us first at [email protected]. If you are not satisfied, you can contact the New Zealand Office of the Privacy Commissioner (privacy.org.nz).
Changes
We may update this policy as the service evolves (for example, when we move automation in-house). The "last updated" date above shows the current version.