Privacy, in plain language.

To manage your account and membership, we collect your verified sign-in email, display name, handle, location, profile visibility and code-of-conduct agreement. You can choose initials instead of a photo. Interests, intentions, the AI tools you use, affiliation, bio and links are optional.

Signing in alone does not create membership or publish a profile. Your unfinished onboarding details stay in a private draft so you can return later.

When you choose Google or LinkedIn sign-in, that provider supplies your identity and may supply your name, email and photo. We use the name and an available photo to prefill your draft; you can review and change them before joining. We do not import your contacts, posts, employer or job history.

We record your first joining referral, membership and activity dates, role, founding-member status, agreement version and time, onboarding progress and preferences. This supports your membership and helps us understand which community events bring people together. We do not import Luma attendee lists.

Profiles are public when you finish your essentials unless you choose private. Public profiles are listed in the members directory and can appear in search engine results. Anyone can see your display name, handle, photo or initials, location, founding badge and optional details you share, including the tools you use. A tool you suggest that isn’t in our list stays off your public profile until an administrator approves it.

Your email, referral, activity dates, agreement record, role and account preferences are private. Authorised administrators can view and export the membership information needed to run the community. Ordinary organisers do not receive this access.

You can change visibility in settings. A private profile is removed from the members directory and is unavailable at its public link, including when you test that link yourself. Search engines stop showing it after they next check the page, which can take a while. View your private profile through your own account. Hiding also blocks new public requests for your photo. It cannot retract information or photos someone already copied.

Community news and event updates default off. Opting in is separate from joining, and you can change it at any time. Community mail delivery has not started. Sign-in links and essential account emails are separate from this preference.

The membership service uses Supabase for sign-in, database records and private photo storage, and Vercel to serve the website. Sign-in providers and our configured email provider process requests needed for authentication. The site also loads its display font from Fontshare.

Tool logos come from Logo.dev. Your browser requests them directly, sending our website’s address but not the page you’re on. When you search for a tool to add, our server sends what you type to Logo.dev to find matches; it doesn’t send who you are.

These services can involve processing outside New Zealand. The final provider and hosting-region details will be confirmed in this notice before public registration opens. Profile photos are held in private storage and served only while the current account and visibility rules permit access.

In account settings, you can download your account information and change your privacy and email choices. Edit your profile or return to an unfinished draft to correct its details. Your private email comes from your verified sign-in account.

You can delete an account even if you have not completed your essentials. Once the request is saved, your profile is hidden and account changes stop. We revoke sessions, remove stored photos and then delete the active account, profile, preferences and draft. If cleanup fails, the saved request remains for retry. Some interrupted photo uploads need an operator to verify cleanup before deletion can finish. We report completion only after cleanup succeeds.

Deletion does not immediately erase copies in operational logs or backups, or copies other people already saved. We keep only the minimal cleanup status needed to finish or investigate deletion. Retention periods for drafts, inactive accounts, cleanup records, export audits, logs and backups must be confirmed before public registration opens.

The privacy contact for access and correction requests, questions and complaints will be published before public registration opens. You can also find guidance on your rights and complaints from the Office of the Privacy Commissioner.