1. What we collect
- Account: name, email, mobile number, password (stored only as a salted hash).
- Customers: service addresses, enquiry descriptions and photos, preferred timing.
- Service Partners: business legal name, NZBN, contact details, driver licence number/version (identity verification), insurance details, team member names, dates of birth and contact details, service coverage areas, GST number.
- Transactions: points purchases (processed by Stripe — we never see card numbers), points ledger, quotes, invoices, reviews, in-app messages.
- Technical: device push tokens, GPS location where a job requires it and you have consented, logs for security and support.
2. How we use it
To operate the marketplace: matching enquiries to Service Partners, revealing contact details when an engagement proceeds (see 3), sending transactional notifications (push, email, SMS), processing payments, preventing fraud, resolving disputes, meeting legal obligations, and improving the service. We do not sell personal information.
3. Sharing
- Between users: an enquiry is shown to matched Service Partners without your identity (suburb-level location only). Your first name is revealed to a Service Partner who accepts your lead; your full contact details and address are revealed only to the Service Partner you select. Service Partner business identity and reviews are visible to Customers.
- Processors: Stripe (payments), Microsoft Azure (file storage), Zoho (email), Twilio (SMS), Expo (push notifications), and our hosting provider. Some processors store data outside New Zealand; we choose providers with protections comparable to the Privacy Act 2020 (IPP 12).
- Legal: we disclose information where required by law or to protect safety.
4. Retention and security
We keep information while your account is active and as required by law (e.g. tax records 7 years). GPS location data is automatically deleted after 90 days. Data is encrypted in transit (HTTPS); access is restricted; media files are stored in private storage accessed via short-lived links.
5. Your rights (Privacy Act 2020)
You may request access to, or correction of, your personal information at any time: support@doory.co.nz. You may delete your account at any time from inside the app; we will delete or de-identify personal information no longer needed. If unsatisfied with our response, you may complain to the Office of the Privacy Commissioner (privacy.org.nz).
6. Changes
We may update this policy at any time; material changes will be notified in-app or by email at least 14 days before taking effect. The current version always appears here with its effective date.
Contact: support@doory.co.nz