startups.org.nz

Privacy statement

We collect as little about you as we can, and we never sell your data. This statement explains what we hold and the choices you have, in line with the New Zealand Privacy Act 2020.

Last updated: 11 June 2026

What we collect

  • Sign-in details: when you sign in with Microsoft, Google, or an email one-time code, our identity provider (Microsoft Entra External ID) gives us your name and email address and a unique id. We never see or store your password.
  • Your profile: the things you choose to add: whether you're a founder, your disciplines (e.g. engineering, design, product), headline, bio, location, skills, links, and what you're open to.
  • Basic usage: minimal technical logs needed to run the service securely.

Why we use it

To run the community: to show your profile to other members, let people connect with you (including emailing you when someone sends you a connect request or accepts yours), keep your account secure, and contact you about your account when needed. We do not use your information for advertising, and we do not sell or rent it to anyone.

What others can see

Your profile is visible to other members (and, if you choose a public profile, to anyone on the web so people can find you). Your email address is never shown on your profile. If you choose to share it, members you accept a connection with can see it; you can turn that off on your profile at any time. You can edit or hide your profile whenever you like.

Who we share it with

We share data only with the services that help us run the community:

  • Microsoft Entra External ID: sign-in and account security.
  • Microsoft Azure: hosting and the database.

These providers may store data outside New Zealand. We only use reputable providers with appropriate safeguards.

How we keep it safe

Access is protected by sign-in through a trusted identity provider, data is encrypted in transit, and only the service can write to the database. No system is perfectly secure, but we take reasonable steps to protect your information and will tell you if a breach affects you.

How long we keep it

We keep your profile, posts, replies, and connections for as long as your account is active. When you delete your account, we remove them from the community. If other members have replied to one of your posts, the post is cleared and shown as deleted so their replies still make sense, but your content and name are gone. Members you connected with keep their side of the connection, but it shows only a deleted member and your intro notes are removed. We keep a small anonymised account record so the deletion sticks and the account can't quietly come back.

We hold minimal security and operational logs for a short period (typically up to 90 days) so we can keep the site safe and running, then they are deleted. We don't keep your information for longer than we need it.

Your choices and rights

Under the Privacy Act 2020 you can:

  • Access the information we hold about you.
  • Correct anything that's wrong, and most of it you can edit directly in your profile.
  • Delete your account and profile at any time, from the Edit profile page. This removes your profile and your posts and replies from the community; members you connected with just see a deleted member.

Cookies

We use only the cookies needed to keep you signed in and the site working. We don't use advertising or third-party tracking cookies.

Contact us

Questions, or want to exercise any of the rights above? Reach out through our contact form. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner.