Order Paper collects personal information that you provide to us:
- your first name and email address when you ask to find out more;
- your email address when you create an account; and
- the password you choose, which we store only as a one-way password hash.
When you use the site, we may also collect technical information such as your IP address and information about requests made to the site. We use this information to operate and secure the service, prevent abuse, and diagnose problems.
We use your personal information to:
- respond when you ask to find out more;
- create, secure, and administer your account;
- verify your email address and authenticate you when you sign in; and
- send account-related emails and other communications you request.
Providing this information is voluntary. If you do not provide a first name and email address, we cannot respond to a request to find out more. If you do not provide an email address and password, we cannot create an account for you.
We use service providers to operate Order Paper:
- Amazon Web Services hosts the site and stores application data; and
- Resend processes recipient addresses and email contents so that we can send account and other requested emails.
These providers may process information outside New Zealand. Resend states that its account data, email metadata, logs, and API records are stored in the United States. We may also disclose information where required by law.
We protect personal information using access controls, encryption provided by our hosting services, one-way password hashing, and expiring single-use account links. Account history uses an opaque identifier and does not contain email addresses, passwords, password hashes, or account tokens.
Verification-token records are automatically deleted after they expire. We retain other personal information only while it is needed for the purpose for which it was collected, to operate your account, or to meet legal and operational requirements. When it is no longer required, we delete it or remove identifying information from it.
You may ask for a copy of personal information we hold about you or ask us to correct it if you think it is wrong. You may also ask us to delete information that we no longer need to retain. Contact us at kiaora@orderpaper.co.nz.