Privacy Policy

Rainey Mediate (“we”, “us”) is a New Zealand dispute-resolution platform. This policy explains what personal information we hold, why, and the choices you have. We handle personal information in line with the New Zealand Privacy Act 2020 and its information privacy principles.

Who controls your information

When an organisation invites you to a case, that organisation and Rainey Mediate each have a role in handling your information. We act as the platform that stores and processes it; the organisation decides who it invites and why.

What we collect

• Account details — your name, email address, and password (stored only as a secure hash).
• Organisation details — for organisations that sign up: organisation name, members, roles, and billing information.
• Case information — what you tell the platform about a dispute, including intake conversations and, where a session is recorded with consent, audio recordings and their transcripts.
• Technical data — basic logs needed to run the service securely.

How we use it

To run the dispute-resolution process you or your organisation asked for: creating cases, conducting intake, facilitating resolution, supporting mediators, and sending transactional email (invitations, password resets, and case notifications). We do not send marketing email, and we do not sell your information.

Confidentiality

Case information is access-controlled: only people with a verified role on a case can see it, through a single auditable check. An organisation does not automatically see a mediator’s notes, and raw intake from one party is never shown verbatim to another.

Where it is stored and how it is protected

Data is stored on Cloudflare’s infrastructure (the D1 database and R2 object storage) and protected in transit and at rest. Access is restricted to what each role needs.

Sharing

We share information only with the service providers that operate the platform on our behalf, or where the law requires it. We never sell personal information.

Retention

We keep information for as long as needed to provide the service and to meet legal obligations, then delete it. Recording-retention controls are being developed.

Your rights

Under the Privacy Act 2020 you may ask to access or correct the personal information we hold about you. Contact us and we will respond as the Act requires.

Contact

Questions or requests: privacy@rainey.nz.