Privacy Policy
Who we are
Kete CRM is operated as part of Hubnexa. This policy explains what information we collect when you use Kete CRM, and how it's used.
Information we collect
When you create an account, we collect the information you provide directly:
- Your name, email address, phone number, and job title (optional)
- The business data you enter — contacts, companies, deals, invoices, bills, and activities
- A profile photo, if you choose to upload one
How we use it
Your information is used to provide the service you've signed up for: storing and displaying your business data back to you and your invited team members, and keeping your account secure.
Data storage & security
Data is stored with our infrastructure provider (Supabase) and isolated so that no other workspace can access your data. Passwords are never stored in plain text.
Information about your clients
Most of the personal information in Kete CRM is not about you — it is about the people you do business with. You decide what to collect and why; we simply hold it for you and do as your workspace instructs. Meeting your own obligations under the Privacy Act 2020, including telling people what you hold and why, remains yours to do. We do not use your clients' information for any purpose of our own.
Who else receives information
We rely on a small number of providers to run the service:
- Supabase — database, sign-in and file storage, hosted in Sydney, Australia.
- Vercel — application hosting.
- Resend — sending reminders, invoices and campaigns. Recipient email addresses pass through them.
- Stripe — subscription billing. Stripe handles card details directly; we never see or store card numbers.
Some of these providers are outside New Zealand, which means information may be stored or processed overseas. We do not sell information to anyone, and we do not share it beyond what running the service requires.
If accounting integrations become available, connecting one will share the relevant records with that provider. You choose whether to connect, and you can disconnect at any time.
Your rights
Under the New Zealand Privacy Act 2020, you have the right to access and correct personal information we hold about you. You can update most of your details directly from your Profile page, or contact us to request a correction or deletion.
How long we keep information
While your account is open, we keep what you have entered so the service works.
After an account closes, invoices, quotes and their related records are kept for seven years, matching the period Inland Revenue requires business records to be held. Other personal information — contacts, leads, activity notes and similar — is deleted 90 days after closure, since the Privacy Act says personal information should not be kept longer than it is needed.
You can export everything at any time, and we will give you the chance to do so before an account is closed. If you want information deleted sooner, contact us and we will do what we can, subject to records we are legally required to keep.
Changes to this policy
We may update this policy as the product changes. We'll update the date at the top when we do.
Contact
Questions about this policy: support@hubnexa.net