Privacy policy · Resurf

This policy explains what personal information Resurf collects when you use resurf.nz and the Resurf app, why we collect it, who we share it with, and your rights under the New Zealand Privacy Act 2020. Questions? Email hello@resurf.nz.

What we collect

Your account: first name, username, email address (or mobile number if you sign up that way), whether you want the newsletter, and the date you joined.
What you post: listings, photos, prices, descriptions, your region and town, and anything you write in messages or Surf Buddies posts.
Messages: chats between buyers and sellers are stored so you can both see them. We don't read them, except when one of you reports a problem or the law requires it.
Reports: if you report a listing or member, we keep the report and any contact details you give us.
Newsletter sign-ups: your email address and where you signed up.
Technical info: like most websites, our hosting providers log things like your IP address, browser and pages visited, to keep the site running and secure. We don't use advertising trackers.

Why we use it

To run your account, log you in with one-time codes, and keep you logged in on your device.
To show your listings to buyers and let people message you about them.
To email you when someone messages you (once per conversation until you've read it).
To send the monthly newsletter, only if you've opted in. You can opt out any time from your account page or the link in the email.
To keep Resurf safe: looking into reports, stopping scams and spam, and enforcing our community rules.

What other members can see

Your first name, username, region and town, your listings and photos, and the year you joined are public. Your email address and phone number are never shown to other members. Messages are only visible to the two people in the chat.

Who we share it with

We don't sell your information. We use a few trusted services to run Resurf, and they only use it to provide their service to us:

Supabase: stores accounts, listings, photos and messages (Asia-Pacific region).
Vercel: hosts the website (servers in Sydney, with a worldwide network for fast loading).
Resend: sends sign-in codes and message notifications by email (United States).
Anthropic: if you use "Fill it in from my photos" on a board listing, those photos are sent to Anthropic's AI to read the dims and suggest details (United States). Anthropic doesn't use them to train its models.
Google Fonts: loads the fonts the site uses.

Some of these services store information outside New Zealand. We choose providers with strong security and privacy protections comparable to the Privacy Act. We may also share information with NZ Police or other authorities when the law requires it, or when we believe it's needed to prevent serious harm.

How long we keep it

Your account and listings stay until you delete them or ask us to close your account.
Sold listings drop off the site after about two weeks but stay in your My listings until you delete them.
Deleted listings and their photos are removed straight away.
Messages are kept so both people can refer back to them, and removed when your account is closed.
Reports are kept as long as needed to deal with them and keep the community safe.

Keeping it safe

Your data is encrypted in transit and protected by access rules so members can only change their own listings and only read their own chats. We don't use passwords at all, so there's no password of yours for anyone to steal. No system is perfect, though. If there's ever a privacy breach likely to cause serious harm, we'll tell you and the Privacy Commissioner.

Your rights

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete your account. Email hello@resurf.nz and we'll respond within 20 working days. If you're not happy with how we've handled your information, you can complain to the Office of the Privacy Commissioner.

Kids

Resurf isn't designed for children. Surf Buddies is 18+. If you're under 16, get a parent or guardian to help.

Changes

If we make important changes to this policy, we'll update the date at the top and let members know.

Your info, kept simple