Privacy & Sovereignty

YourHQ operates under the New Zealand Privacy Act 2020. Beyond legal compliance, our core philosophy is Data Sovereignty: We are the caretakers of your digital assets, but you remain the owner.

---

1. Information We Collect

To build and maintain your website, we collect:

• Business Identity: Name, contact details, and business descriptions.
• Website Content: Images, text, logos, and files you upload to our Shared Drive.
• Voice Data: Audio recordings from your "Drive-Home Interview" with our AI agent.
• Technical Data: Analytics on how your website performs (if on the Growth plan).

2. Our Technology Stack & Data Storage

We believe in radical transparency regarding where your data lives. We use best-in-class infrastructure to ensure speed and security.

• Supabase: We use Supabase for our database. We implement Row Level Security (RLS) policies, meaning your data is cryptographically segregated. Only authorized users (you and our admins) can access your specific records.
• Stripe: We use Stripe for all payments. YourHQ never sees or stores your credit card numbers. Stripe adheres to the highest level of PCI Service Provider Level 1 standards.
• ElevenLabs: Used for our AI Interview Agent. Your voice data is processed solely to transcribe information for your website build. We do not use your voice to clone your identity.
• Vercel: Your website files are hosted on Vercel's global edge network to ensure 99.9% uptime and lightning-fast loading speeds for your customers.

3. Data Sovereignty (Ownership)

This is where we differ from platforms like Facebook or Instagram:

• You own your content. We claim no intellectual property rights over the text and images you provide.
• You own your customer list. Any leads generated by your website belong 100% to you. We do not mine, sell, or share your customer data.
• Portability. If you choose to leave YourHQ (after the minimum term), we provide you with a static export of your website files. We do not hold your digital presence hostage.

4. How We Use Voice Data

When you speak with our AI Agent (Penny/Lian's Digital Twin):

• The conversation is recorded and transcribed to generate website copy.
• These recordings are stored securely within our private logs.
• We do not share these recordings with third parties for marketing purposes.

5. Your Rights

Under the NZ Privacy Act, you have the right to:

• Ask for a copy of any personal information we hold about you.
• Ask for it to be corrected if you think it is wrong.
• Request that your data be deleted from our servers (subject to us needing to keep billing records for tax purposes).

Last updated: December 2025