Privacy Policy

1. Introduction

TenderGreen NZ ("we", "our", or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services (collectively, the "Services").

By using TenderGreen, you agree to the collection and use of information in accordance with this policy. If you do not agree with this Privacy Policy, please do not use the application.

2. Independence Notice

TenderGreen is an independent software product. We are not affiliated with, endorsed by, or representing the New Zealand Government, the Ministry for the Environment, Kāinga Ora, Waka Kotahi (NZ Transport Agency), or any New Zealand territorial local authority. Where the app references government information (e.g. Waste Disposal Levy rates, publicly listed tenders, council disposal information), we aggregate publicly available data from official sources and link to those sources within the app.

3. Information We Collect

3.1 Personal Information

We may collect personally identifiable information, such as:

• Name and contact information (email address, phone number)
• Company and employment details
• Profile information and credentials
• Authentication data (email and password; TOTP secret for 2FA, if enabled)

3.2 Usage Data

We automatically collect certain information when you use our Services:

• Device information (device type, operating system, unique device identifiers)
• Log data (access times, pages viewed, app crashes)
• Location data (GPS coordinates when scanning waste bins, with your permission)
• Photos and images (waste-bin photos for analysis, with your permission)

3.3 Waste & Compliance Data

To provide our core services, we collect:

• Waste scan records and associated images
• Volume estimates and material classifications
• Indicative carbon emission and levy calculations
• Site attendance and timesheet records
• Health and safety incident reports
• Compliance documentation and certifications

4. How We Use Your Information

We use the collected information to:

• Provide and maintain our Services
• Process and analyse waste data for internal compliance reporting
• Generate environmental impact reports and certificates
• Notify you about changes to our Services
• Provide customer support
• Monitor usage and detect technical issues
• Comply with legal obligations

5. Data Sharing and Disclosure

We may share your information in the following situations:

• With Your Employer: Company administrators can view employee activity within the TenderGreen platform.
• Service Providers: We share limited data with vetted third-party vendors that operate our infrastructure (e.g. MongoDB Atlas, Railway, Resend for email, Stripe for payments, OpenAI for image classification).
• Legal Requirements: We may disclose information when required by law or to protect our rights.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit (TLS 1.2+) and at rest
• Industry-standard password hashing (bcrypt)
• Optional Two-Factor Authentication (TOTP) for admin accounts
• Regular security assessments and dependency audits
• Role-based access controls and staff training

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Waste compliance records may be retained for extended periods to meet regulatory requirements.

8. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access your personal information
• Request correction of inaccurate information
• Request deletion of your information (subject to legal requirements)
• Withdraw consent for certain processing activities
• Lodge a complaint with the Office of the Privacy Commissioner (privacy.org.nz)

9. Camera, Location & Photo Permissions

Our mobile app requests the following device permissions:

• Camera: Required to photograph waste bins for analysis and compliance documentation.
• Location: Used to tag scans with GPS coordinates for site verification and reporting accuracy.
• Photo Library: Allows you to select existing photos for waste analysis and save generated reports.

These permissions are optional and can be managed through your device settings. Some features may be limited without them.

10. Children's Privacy

Our Services are not intended for individuals under 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: