Privacy policy
Version: 1 · Last updated: 02/10/2026
This policy explains how DMSW Limited ("DMSW", "we") handles personal information under the Privacy Act 2020.
1. What we collect
- Account details: name, email, phone, role, and the organisation, project and unit you're linked to
- Job details: descriptions, photos and videos, access notes, dates, comments, quotes, sign-offs and disputes
- Property details: addresses and unit names, and map coordinates for addresses
- Payment details: amounts, dates and payment status. Card and bank details are collected and held by Stripe, not by DMSW
- Business details for hosts and contractors: legal name, NZBN, GST number, and payout details held by Stripe
- Technical details: sign-in times, IP address, device and browser, and a record of which terms you accepted and when
Photos you upload may show people or belongings in your home. Please avoid that where you can.
2. Where it comes from
Mostly from you. Also from the person who invited you (for example, your builder or village office), who gives us your name, email and unit.
3. Why we use it
- to run the platform: lodging, reviewing, quoting, assigning, completing and signing off jobs
- to send notifications about jobs, invitations, and maintenance and warranty reminders
- to take, hold, release and refund payments, and issue tax invoices
- to keep records as evidence, for 10 years from when each job closes
- to keep the platform secure and fix problems
- to improve the platform, using information that doesn't identify you
4. Who can see it
- Your builder or host, and their staff with the right permissions, can see jobs for their projects
- Your client (for example, your village or property manager) can see jobs for their units
- Residents and tenants only see jobs for their own unit
- Contractors see the jobs sent to them
- DMSW staff, for support, security and payments
5. Service providers we use
We share information with providers who help us run DMSW:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in and photo storage | Sydney, Australia |
| Vercel | Hosting the website and app | Sydney, Australia (pages may be cached at Vercel's global edge locations) |
| Stripe | Taking and holding payments, paying out | Global |
| Postmark | Sending and receiving emails | United States |
| Google Maps Platform | Turning addresses into map locations | Global |
| Xero | Accounting records, when a host connects their Xero | Global |
| Anthropic (Claude) | Drafting quote suggestions from job descriptions and photos. Off until released, and a person always checks and sends the quote | United States |
Some of these providers are outside New Zealand. We only use providers who are subject to privacy laws comparable to New Zealand's, or who agree to protect information to that standard, as Information Privacy Principle 12 requires.
6. Keeping it safe
Information is encrypted in transit and at rest. Each builder's data is kept separate at the database level. Administrator accounts use two-factor sign-in. If a privacy breach is likely to cause serious harm, we'll tell you and the Privacy Commissioner, as the Act requires.
7. How long we keep it
Job records, including photos, quotes, payments and warranty records, are kept for 10 years from when each job closes, then deleted. Account details are deleted or anonymised when they're no longer needed, subject to those job records.
8. Marketing
We only send marketing emails if you agree, and every marketing email has an unsubscribe link (Unsolicited Electronic Messages Act 2007). Job notifications and reminders you've asked for aren't marketing.
9. Your rights
You can ask to see the personal information we hold about you, and ask us to correct it. Email our Privacy Officer at support@dmsw.co.nz. We'll respond within 20 working days. If you're not happy with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
10. Changes
We'll post any changes here and tell account holders about significant ones.