Who this policy is about
This policy explains how Kemba Limited (Kemba, we, us) collects, uses, and protects personal information through kemba.co.nz, the Kemba dashboard and our app for ChatGPT and Claude (the Platform). It's written to meet the Privacy Act 2020.
If you instruct us on buying, selling or refinancing, you also become a client of Point Legal Limited, the law firm that does the legal work. Point Legal handles some of your information as your lawyer, under its own professional and privacy obligations, separately from what's described here.
Buying is the part that runs on the dashboard today. If you're selling or refinancing, Point Legal runs your file outside the Platform, so we usually hold only the details you gave us when you asked for a call, and any notes from that call.
What we collect
- Contact details: name, email, phone number.
- Property details: the address, price, and key dates of the property you're buying or selling.
- Identity verification information, collected through our identity verification provider, Didit, as required before any money can move on a regulated conveyancing file.
- Documents you upload: things like your sale and purchase agreement, KiwiSaver correspondence, or ID documents.
- Messages you send us or your lawyer through the dashboard.
- Usage and performance data: how you use the Platform and how quickly it responds, collected through PostHog, Vercel Analytics and Vercel Speed Insights, so we can see what's working and fix what isn't. Vercel Speed Insights records anonymous performance data and doesn't tie it to an individual visitor or IP address.
Why we collect it
- To answer your enquiry and arrange a call with a lawyer, whether you're buying, selling or refinancing.
- To run your purchase: setting up your file, verifying your identity, and giving Point Legal what they need to act for you.
- Because the law requires it. The Anti-Money Laundering and Countering Financing of Terrorism Act 2009 requires identity verification before a conveyancing file can proceed.
- To communicate with you about your enquiry or your file.
- To improve the Platform: understanding where people get stuck, what's confusing, and what to build next.
Who we share it with
- Point Legal Limited, the law firm acting for you, so they can do the legal work.
- Didit, our identity verification provider, to run the identity check the law requires.
- Service providers who help us run the Platform (hosting, analytics, email delivery), bound by their own confidentiality and security obligations.
- Anyone we're required to share it with by law, including under AML/CFT reporting obligations that apply to Point Legal.
We don't sell your personal information.
Storage and security
Your information is stored with reputable providers, in each case with reasonable technical and organisational safeguards. No system is completely secure, so we can't guarantee protection against every possible risk, but we take this seriously and review it as the Platform grows.
How long we keep it
We keep your information for as long as it's needed for the purposes above, and for as long as the law requires. Some records connected to a conveyancing file, including AML/CFT records held by Point Legal, must be retained for several years under law.
Your rights
Under the Privacy Act 2020, you can ask to see the personal information we hold about you, and ask us to correct it if it's wrong. To do either, email hey@kemba.co.nz.
If you're not happy with how we've handled your information, tell us first so we can put it right. If you're still not satisfied, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Cookies and analytics
The Platform uses cookies and similar technology to keep you signed in and to understand how the Platform is used, through the analytics tools listed above. You can control cookies through your browser settings, though some parts of the Platform may not work properly without them.
Kemba in ChatGPT and Claude
You can use Kemba inside ChatGPT and Claude, as an app, to see our home buying checklist, read summaries of our guides and see open times for a call with a lawyer. Here's what happens to your information when you do.
- Your conversation stays with OpenAI or Anthropic. When the assistant uses Kemba, it sends us which part of the app it wants and the choice it made, like a checklist stage or a guide. We don't receive your messages, your name or anything else you've typed, and the app never asks for them. ChatGPT also adds a few hints to each request, like your language, your browser or app, a rough location and anonymous IDs for you and the chat. We don't log, keep or use them.
- What we log. For each request we record which part of the app was used, that choice, whether it came from ChatGPT or Claude, whether it worked and how long it took. Our hosting provider also records standard request details, like the time and the IP address that made the request. For the assistant's requests that's OpenAI's or Anthropic's server, not you. A guide card's photo is the exception: your device loads it from kemba.co.nz, so that request carries your IP address and browser type, as on any website. We use these logs to keep the app running and to see how it's used, and they're kept for up to 30 days.
- Booking a call. Nothing is booked inside the chat. If you pick a time, you finish on kemba.co.nz, and the rest of this policy applies from there. Links from the app carry a tag (like utm_source=chatgpt) so we can see you came from the app.
- OpenAI and Anthropic handle your conversation under their own privacy policies.
Changes to this policy
We may update this policy as the Platform changes. We'll update the date at the top when we do.
Contact
Kemba Limited NZ company number 9452662 · NZBN 9429053896575
Privacy questions or requests: hey@kemba.co.nz