solosale.
Last updated: April 2026 · NZ Privacy Act 2020 compliant
SoloSale Ltd ("we", "us") is a New Zealand company providing a private property sale toolkit. This policy explains how we collect, use, store, and protect your personal information in accordance with the New Zealand Privacy Act 2020.
Sellers: Email address, name, phone number, property address and details, uploaded documents (LIM reports, titles, photos), legal contact details, and payment-related metadata. Card payments are processed by Stripe; we do not store your full card number on SoloSale servers. If optional instalment providers (e.g. Afterpay) are offered at checkout, limited order and eligibility data may be shared with that provider to complete the transaction.
Buyers (via lead capture): Name, email, phone, viewing preference, optional notes, marketing opt-in status.
Buyers (buyer portal account holders): Email address, a securely hashed password (we never store your password in plain text), email verification status and timestamp, last login timestamp, and session token metadata. If you raise a support ticket, we also store the ticket subject, category, message body, and thread of replies associated with your email address.
Buyers (optional search alerts): Email, optional name, and saved search criteria you provide (such as city, suburb, price band, minimum bedrooms or bathrooms), plus technical metadata (for example a hashed IP and browser string) to protect the service from abuse. Separate checkboxes record whether you consent to (a) being counted in anonymised overlap statistics that may be shown to sellers, and (b) — when we enable it — email notifications when new public listings match your criteria.
Favourited listings: When you save a listing as a favourite from a public listing page, this data is stored in your browser’s local storage only. It is never transmitted to or stored on SoloSale servers.
Buyer contact details submitted through lead capture forms are passed directly to the property seller. We do not use buyer data for marketing unless the buyer explicitly opts in. Buyer data is stored securely and retained for a maximum of 12 months after the last interaction, then deleted or anonymised.
Buyer portal accounts: Account data (email address, hashed password, verification status, last login) is used solely to authenticate you and provide access to the buyer portal. We do not share your account credentials or login activity with sellers or third parties. One-time magic login links are sent to your registered email and expire within one hour.
Buyer support tickets: Ticket content (subject, category, messages) is accessible to SoloSale support staff for the purpose of responding to your request. We may use anonymised, aggregated ticket data to identify common issues and improve the platform. We do not share individual ticket content with sellers or third parties.
Buyer search alerts: If you opt in, we may compute whether your saved criteria overlap a seller’s public listing fields (for example city, suburb, asking price, bedrooms). Sellers may see a number only (for example how many distinct opted-in buyers appear to match). We do not disclose your identity or contact details to sellers for this purpose, and sellers cannot message you through SoloSale based on that count. Interested buyers still choose when to submit an enquiry. Activity outside SoloSale is not something we control.
You can register alerts from the public listings page, or sign up under Looking to buy in the buyer portal and manage saved searches while logged in. You may opt out at any time by emailing privacy@solosale.co.nz, using the opt-out option within your buyer portal account, or via our automated data deletion endpoint. Deleting your data also removes saved alerts, your buyer portal account, and buyer portal sign-up eligibility tied to that email.
Data is stored on Cloudflare infrastructure (Workers, D1, R2) with encryption at rest and in transit (TLS 1.2+). Documents are stored in isolated per-property buckets. Access is controlled by authentication tokens with automatic expiry.
We implement industry-standard security measures including password hashing (PBKDF2), JWT token rotation, rate limiting, HMAC request signing, and tamper-evident audit logging.
Under the NZ Privacy Act 2020, you have the right to:
To exercise these rights, email privacy@solosale.co.nz.
Buyers (non-account holders): If you have interacted with a listing (for example, registering interest or requesting a viewing) and wish to have your personal data removed, you may email privacy@solosale.co.nz. During beta we process these requests manually; you may also use our automated endpoint POST /public/data-deletion with JSON body {"email":"your@email"} so we can erase matching buyer records programmatically.
Buyer portal account holders: You may request closure and deletion of your buyer portal account at any time by raising a support ticket from within the buyer portal or by emailing privacy@solosale.co.nz. On closure, your account credentials, saved searches, and support ticket history are deleted within 30 days, subject to any legal retention obligations.
Seller account data is retained while the account is active. After account deletion, personal data is removed within 30 days. Anonymised analytics data may be retained indefinitely. Audit trail data is retained for 7 years for compliance purposes.
Buyer portal accounts: Account data (email, hashed password, verification status, login history) is retained while the account is active. Upon account closure, personal data is removed within 30 days. Support ticket records are retained for 12 months after closure to support any follow-up enquiries, then deleted.
Buyer lead capture data: Buyer enquiry records (name, email, phone) are retained for a maximum of 12 months after the last interaction with the relevant listing, then deleted or anonymised.
The SoloSale web pages use minimal cookies for authentication session management only. We do not use third-party tracking cookies or advertising cookies.
SoloSale is not intended for use by persons under 18 years of age. We do not knowingly collect personal information from children.
We may update this policy. Material changes will be communicated via email. The "last updated" date at the top reflects the most recent revision.
Privacy Officer · SoloSale Ltd · Auckland, New Zealand
privacy@solosale.co.nz
If you are not satisfied with our response to a privacy concern, you may contact the Office of the Privacy Commissioner.