Privacy Policy

• Account data — name, email address, password hash, profile photo, and OAuth identifiers (e.g. Google sub) when you sign in.
• Workspace data — the customers, contacts, projects, time entries, quotes, invoices, payments, files, and notes you and your teammates create inside your Tūhono workspace.
• Usage and device data — IP address, browser, operating system, pages viewed, actions taken, and timestamps. We use this for security, troubleshooting, and product analytics.
• Cookies — see section 11.

• Provide, maintain, and improve the Tūhono service.
• Authenticate you, enforce access controls, and detect abuse.
• Process billing and payments for paid workspaces.
• Send service announcements, security alerts, and (with consent) product updates.
• Comply with legal and regulatory obligations.
• We do not sell personal data, and we do not use your workspace content for advertising or to train third-party AI models.

• Contract — to deliver the service you signed up for.
• Legitimate interests — to secure the platform, prevent fraud, and improve the product.
• Consent — for optional marketing emails and any non-essential cookies.
• Legal obligation — to comply with tax, accounting, and law-enforcement requirements.

We share personal data only with vendors that help us run Tūhono, under appropriate data-processing terms:

• Lovable Cloud (Supabase) — application hosting, database, file storage, authentication.
• Google LLC — only when you use "Sign in with Google" (we receive your email, name, and profile picture).
• Stripe, Inc. — payment processing, when you enable paid billing.
• Transactional email provider — to deliver password resets, receipts, and service notices.

We will also disclose information if required by law, court order, or to protect the rights, property, or safety of Tūhono, our customers, or others.

Tūhono operates internationally. Your data may be processed in the regions where our cloud providers operate (including Australia, New Zealand, the European Union, and the United States). Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards.

• Workspace data is retained while your account is active.
• Operational logs are retained for up to 90 days.
• When you delete your account or workspace, we delete or anonymise personal data within 30 days, except where retention is required by law (e.g. tax records).

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten").
• Export your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with a supervisory authority — for example, the Office of the Privacy Commissioner of New Zealand, the OAIC (Australia), or your local EU/UK data-protection authority.

To exercise any of these rights, email connect@tuhono.ai.

We protect your data with encryption in transit (TLS) and at rest, role-based access controls, row-level security in the database, audit logging, and least-privilege access for our team. No system is perfectly secure — if we ever detect a breach affecting your data, we will notify you and the relevant regulators in line with applicable law.

Tūhono is a business tool and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it.

We use a small number of essential cookies to keep you signed in, remember your workspace, and protect against cross-site request forgery. We do not currently use third-party advertising or tracking cookies. If we ever add analytics or marketing cookies, we will ask for your consent first.

We may update this Privacy Policy from time to time. If a change is material, we will notify you by email and via an in-app banner at least 30 days before it takes effect. The "Last updated" date at the top of this page always reflects the current version.

For privacy questions, data-subject requests, or to report an issue, contact:

Tūhono Platform (a Haumaru company)
Email: connect@tuhono.ai
Web: connect.tuhono.ai