Privacy Policy

Privacy Policy for Supernerd Limited

Supernerd Limited (NZ Company Number 9442183, NZBN 9429053792136) handles personal information under the New Zealand Privacy Act 2020. This policy covers supernerd.agency and our services, including the Supernerd dashboard, call tracking, call recording, AI receptionist and website chat widget.

For visitors to supernerd.agency, we are the agency collecting personal information. You can contact us about privacy at [email protected].

For a client's customers, including callers, people filling in forms and chat users, the client is the business collecting the information. We process it on that client's behalf to provide our services. The client's own privacy notice also applies. Contact that business about its use of your information, or ask us to help direct your request.

Your New Zealand privacy rights

You can ask for access to your personal information or ask for it to be corrected under the Privacy Act 2020. Email [email protected] with enough detail to identify the information. We may need to check your identity. If a correction is not made, you can ask for a statement of the correction you sought to be attached. You can complain to the Office of the Privacy Commissioner at privacy.org.nz, including if you are unhappy with our response.

Information we collect

We collect the details you provide through contact forms, install applications and application chats. These may include your name, business details, email address, phone number, messages and attachments. Dashboard account details include your email address and sign-in codes. We also process sales figures and onboarding files that clients upload. We record our own business calls to handle inquiries and provide services, with required notice and consent.

For clients, we collect call metadata such as phone numbers, call time, duration and source. We process call recordings and transcripts, AI receptionist call summaries, website chat transcripts, and lead and contact records. These may contain names, contact details and information about the customer's inquiry.

We collect website analytics through Google Analytics 4. We may also use Meta Pixel for advertising measurement and Google Tag Manager to manage measurement tags. These tools may collect IP addresses, browser and device details, page visits, referral sources and actions such as form submissions.

How we use your information

We use this information to:

• Run the website, the Supernerd dashboard and client services.
• Respond to contact messages, assess install applications and set up client accounts.
• Measure website use, advertising and where inquiries come from.
• Record, transcribe and summarize calls, answer basic questions and pass customer details to clients.
• Keep lead and contact records, report on results and show uploaded sales figures in the Supernerd dashboard.
• Send sign-in codes, service emails and internal alerts, and manage Supernerd appointments and payments.
• Use onboarding files to set up services, support clients and protect accounts from misuse.

How long we keep information

Call recordings, call and chat transcripts and AI summaries have no automatic expiry. We review what we hold at least every six months and delete or anonymize anything that is no longer needed to serve a client or meet a legal obligation. When a client leaves, their recordings and transcripts are deleted on request, or after the export period in our Terms. Google Analytics 4 user and event data uses a 14-month retention setting; Google deletes expired data monthly, renewed activity can extend it, and aggregated reports sit outside that setting. Other personal information follows the same rule: kept only as long as needed for its purpose or required by law. Contractual exports follow clause 5 of our Terms. Privacy requests can be made at [email protected].

Cookies and advertising

Cookies are small files saved by your browser. Google Analytics 4 uses analytics cookies to measure visits and site use. Where enabled, Google advertising cookies and Meta Pixel help measure ad responses and build audiences for relevant advertising. Google Tag Manager manages tags that can use these technologies.

You can block or delete cookies in your browser settings, including third-party cookies. This may affect some website functions. Browser help pages explain the controls available. You can also opt out of personalized advertising directly with Google at adssettings.google.com and with Meta in your Facebook ad preferences. We do not have a cookie banner. This policy does not treat a visit to our website as consent where the law requires separate consent.

Service providers and overseas processing

We share information with service providers as needed to run the website and services. WhatConverts provides call and form tracking and stores client tracking-call recordings. JustCall stores recordings of Supernerd's own calls. Twilio provides phone numbers and calls. ElevenLabs provides the AI receptionist voice. OpenRouter and the AI model providers behind it process chat messages and produce summaries.

InstantDB provides the dashboard database. Vercel provides hosting and file storage. Resend sends emails, including sign-in codes. Cal.com handles bookings. Google provides Analytics, Ads and Business Profile services. Meta provides Pixel and ads services. Airwallex and Stripe process payments. Telegram carries internal alerts to our team.

These service providers receive information needed for their role. Data may be stored or processed outside New Zealand, mainly in the United States. We take reasonable steps to ensure it is protected to a standard comparable to New Zealand privacy law. Where a provider acts only on our behalf, we remain responsible for the information we entrust to it.

Call recording and AI

We record and transcribe calls to client tracking numbers on the client's behalf. The AI receptionist captures caller details and produces summaries. The website chat widget captures messages and contact details. These records are given to the client so they can respond to inquiries. Prices and availability need the client's confirmation.

Clients must give any required notices about recording and collection, including when they upload customer information collected from another source. Providing contact details is your choice, but the business may be unable to reply without them. AI transcripts and summaries can contain errors. You can ask the business, or contact us, to access or correct information about you.

CCPA rights for California residents

Where the CCPA applies, California residents can:

• Ask what personal information is collected, used or disclosed, and request access or correction.
• Ask for personal information to be deleted, subject to legal exceptions.
• Opt out of sale or sharing for targeted advertising, and limit certain uses of sensitive information where applicable.

Email [email protected] to exercise applicable rights. You can do so without unlawful discrimination. We respond within the time required by law, generally 45 calendar days for access, correction and deletion requests.

Where they apply, Australian and US state laws give additional access, correction, deletion, portability, advertising opt-out, complaint or appeal rights. Contact [email protected] and we will respond within the legal deadlines that apply.

GDPR rights

Where the GDPR applies, you can:

• Ask for access to your personal information.
• Ask for inaccurate or incomplete information to be corrected.
• Ask for information to be deleted where the law allows.
• Ask for processing to be restricted in certain circumstances.
• Object to processing in certain circumstances, including direct marketing.
• Ask for a portable copy of your information where this right applies.

Email [email protected] to exercise applicable rights. You can withdraw consent where processing relies on it and complain to your local data protection authority. We normally respond within one month, with extensions where the law allows.

Children under 16

Our website and services are not directed at anyone under 16.

If you believe a child has supplied personal information, contact [email protected] so we can review it and arrange appropriate action with the client where needed.

Changes to this policy

We may update this policy as our services or legal duties change. We will post the revised policy here and update the date above.

If a change requires a separate notice or consent under applicable law, we must meet that requirement before using information in the new way.

Contact us

For privacy questions, access or correction requests, or complaints, email Supernerd Limited at [email protected]. You can also complain to the Office of the Privacy Commissioner at privacy.org.nz.