Privacy Policy

Evidence Pack (“Evidence Pack”, “we”, “us”, “our”) helps people prepare their own cases for the New Zealand Disputes Tribunal. We take the privacy of your information seriously, because the information you give us — your account of a dispute and the evidence behind it — is sensitive. This policy explains what personal information we collect, why, who we share it with, where it goes, how we protect it, and the rights you have over it.

This policy is governed by the Privacy Act 2020 and the Information Privacy Principles.

1. The information we collect

Information you give us directly:

• Account details — your full name, email address, and password (your password is stored only as a secure one-way hash; we never see or store it in readable form).
• Your dispute story — the free-text account of your dispute that you write when building a case.
• Evidence you upload — documents, images, and other files you add to a case (for example invoices, receipts, contracts, messages, emails, and photos), and any text contained in them.
• Case details — the type of dispute, the other party's name and contact details where you provide them, the amounts involved, and the outcomes you're seeking.

Information we generate about your case:

• AI-assisted summaries, an evidence index, a timeline, a claim summary, talking points, key questions and prepared answers, and a hearing prep pack derived from the information above.

Information collected automatically:

• Basic technical and usage data needed to run and secure the service (for example log data such as IP address, browser type, and timestamps).
• Cookies strictly necessary to keep you signed in.

Payment information:

• When you buy a pack or a human review, your card details are collected and processed directly by our payment provider, Stripe.
• We do not receive or store your full card number; we keep only a record of the transaction (such as amount, date, and a payment reference).

2. Why we collect it (how we use your information)

We use your personal information to:

• create and manage your account and let you sign in;
• read, organise, classify, and summarise your evidence so we can build your timeline, evidence index, claim summary, and hearing prep pack;
• pre-fill and improve the case you're building (for example suggesting claim details and a recommended evidence checklist from your story);
• take payment for the services you buy;
• provide the optional and opt-in human-review service, where a reviewer reads your case and gives feedback;
• send you service communications (for example account verification, password resets, and review updates);
• keep the service secure and prevent misuse; and
• meet our legal obligations.

We will only use your information for the purposes set out above, or for a directly related purpose you would reasonably expect, unless you consent otherwise or the law requires it.

3. Who we share it with

We do not sell your personal information. We share it only with the service providers and people needed to deliver the service:

• Anthropic (AI processing). To analyse and organise your evidence, the text of your story, the text extracted from your documents, and the images you upload are sent to our AI provider, Anthropic, which processes them and returns the analysis. Your content is transmitted securely (encrypted in transit). Anthropic does not use this content to train its models, and under our agreement it is not retained after processing.
• Stripe (payments). Processes card payments. Stripe is a payment provider operating internationally; your payment data is handled under Stripe's own privacy terms.
• Human reviewers. If — and only if — you purchase a human review, a reviewer (employed by us/engaged under confidentiality obligations) will access that case's contents to provide feedback. We do not allow staff to access your case contents otherwise.
• Cloud hosting. Your account, your stored evidence, and your case data are hosted on servers in New Zealand.
• Legal and safety disclosures. We may disclose information where the law requires it, or where reasonably necessary to protect someone's safety or our legal rights.

4. Sending information overseas

As described above, some of your information — specifically the contents of your story, your document text, and your uploaded images — is sent to Anthropic for processing on servers located outside New Zealand (the United States). We take reasonable steps to ensure your information is protected by comparable safeguards when it is processed overseas, as required by Information Privacy Principle 12.

Other than this processing, your information is stored in New Zealand.

5. How we keep your information safe

• Your uploaded evidence and the sensitive contents of your case are encrypted when stored, with each user's documents protected by an encryption key unique to that user.
• Information is encrypted in transit (HTTPS/TLS) whenever it moves between you, us, and our providers.
• Access to case contents is restricted: our staff do not access your evidence unless you request a human review.

No system can be guaranteed completely secure, but we take reasonable steps to protect your information from loss, misuse, and unauthorised access, in line with Information Privacy Principle 5.

6. How long we keep your information

• We keep your case information and evidence for as long as your account is active, so you can access your historical cases.
• When you delete a case, its evidence and associated content are erased immediately and irrevocably.
• When you delete your account / ask us to delete your information, we erase your personal information, except where we are required by law to keep certain records (for example transaction records for tax or legal purposes).

7. Your rights

Under the Privacy Act 2020 you have the right to:

• Access the personal information we hold about you, and request a copy;
• Correct information you believe is wrong, or attach a statement of correction if we don't agree;
• Delete your information / close your account, subject to the retention exceptions above.

To exercise any of these rights, contact us at hello@evidencepack.co.nz. We will respond within the timeframe required by the Privacy Act (currently 10 working days for access requests).

8. Cookies

We use cookies that are strictly necessary to keep you securely signed in.

9. Children

Evidence Pack is intended for adults bringing or responding to Disputes Tribunal matters and is not directed at children.

10. Changes to this policy

We may update this policy from time to time. We'll post the updated version here with a new “last updated” date, and where changes are significant we'll take reasonable steps to let you know.

11. Complaints

If you have a concern about how we've handled your personal information, please contact us first at hello@evidencepack.co.nz so we can try to put it right. You also have the right to complain to the Office of the Privacy Commissioner (privacy.org.nz), which oversees the Privacy Act 2020.

12. Contact us

Email: hello@evidencepack.co.nz