Privacy Policy
Last updated: 09/04/2026
Operated by CHIPI LIMITED, Silverdale, Auckland, New Zealand
Contact: [email protected]
1. What We Collect
| Data | Purpose |
|---|---|
| Email address | Account creation and authentication |
| Name, phone, job title | Optional — set by your organisation |
| Property & tenancy data | Core platform features |
| Tenant personal information | Entered by your organisation; you are the data controller |
| Maintenance records & communications | Platform operation |
| IP address, device & usage logs | Security and product improvement |
| Billing name and address | Subscription management |
We do not store passwords in plaintext (bcrypt hashed). We do not store full payment card details.
2. How We Use Your Data
- To provide, operate, and improve the Chipi platform
- To authenticate accounts and manage subscriptions
- To support landlord-tenant workflows including the Tenant Portal
- To detect errors and prevent unauthorised access
- To comply with legal obligations
We do not sell your data. We do not use it for advertising.
3. Tenant Data
If you use Chipi to manage tenants, you — the Organisation — are the data controller for their personal information. Chipi processes tenant data only as your data processor.
You are responsible for:
- Having a lawful basis to collect and process tenant personal information
- Providing tenants with appropriate privacy notice
- Revoking Tenant Portal access when a tenancy ends
4. Where Your Data Is Stored
Data is stored with reputable cloud infrastructure providers that hold internationally recognised security certifications (ISO 27001, SOC 2) and comply with globally accepted data protection standards — such as DigitalOcean, AWS, or equivalent.
Each organisation's data is kept separate. All connections use HTTPS/TLS. Personally identifiable information is encrypted at the application layer.
5. Third Parties
We use trusted third-party providers for cloud infrastructure, email delivery, and payment processing. They may only process data within their authorised role.
We disclose personal information to authorities only when required by law.
6. Your Rights
You may request to access, correct, or delete your personal data at any time by contacting [email protected]. We respond within 20 working days.
For tenant data managed by your organisation, contact your landlord or property manager directly as they are the data controller.
7. Data Retention
- Active subscription: Data retained in full.
- After termination: Data held for 30 days for export, then securely deleted. Logs retained up to 90 days.
8. Cookies
We use cookies for session management, security (CSRF protection), and UI preferences only. No tracking or advertising cookies. Disabling cookies will prevent login.
9. Changes
We will give 14 days' notice of material changes via email or in-platform notification.
Current version always available at: chipi.pro/privacy
10. Contact
CHIPI LIMITED — Privacy Officer
Silverdale, Auckland, New Zealand
[email protected]
Built on: NZ Privacy Act 2020 · Decree 13/2023/ND-CP (Vietnam) · GDPR-aligned principles