Privacy Policy

This Privacy Policy explains how Hedge ("we", "us", "our") collects, uses, discloses, and protects your personal information. Hedge is based in New Zealand and we comply with the New Zealand Privacy Act 2020 and the Information Privacy Principles (IPPs) contained in it.

By using Hedge, you agree to the collection and use of information in accordance with this policy.

1. Information we collect

We collect personal information that you provide to us directly, including:

• Account information — your name, email address, and authentication credentials.
• Financial information — budget categories, transactions, balances, and other data you enter or import into Hedge. We do not access your bank accounts unless you explicitly connect them.
• Billing information — if you subscribe to a paid plan, payment details are processed by our payment provider. We do not store full card numbers.
• Usage information — how you interact with Hedge, including device type, browser, pages visited, and features used. This is collected through privacy-respecting analytics (see Section 4).
• Communications — messages you send to us when you request support or provide feedback.

2. How we use your information

We use your personal information to:

• Provide, maintain, and improve Hedge;
• Process transactions and manage your subscription;
• Respond to support requests and communicate with you about your account;
• Detect, prevent, and address technical issues, fraud, or misuse;
• Comply with our legal obligations.

We do not sell your personal information, and we do not use your financial data to target you with third-party advertising.

3. Sharing and disclosure

We do not share your personal information with third parties except in the following limited circumstances:

• Service providers — trusted vendors who help us operate Hedge (such as hosting, analytics, and payment processors) under contract and bound by confidentiality obligations.
• Legal requirements — where we are required by New Zealand law, regulation, or valid legal process to disclose information.
• Business transfers — if Hedge is involved in a merger, acquisition, or sale of assets, your information may be transferred, subject to the continued protection of this policy.

4. Analytics and cookies

We use PostHog for product analytics to understand how Hedge is used and to improve the product. Analytics data is pseudonymised where possible. We route analytics requests through our own first-party domain to protect your privacy.

Our website uses cookies and similar technologies for authentication, preferences, and analytics. You can disable cookies in your browser, though some features may not work as expected.

5. Data storage and security

Your information is stored on servers operated by our cloud providers, which may be located outside of New Zealand. Where personal information is transferred overseas, we take reasonable steps to ensure it is protected by comparable safeguards.

We use industry-standard security measures — including encryption in transit, access controls, and regular reviews — to protect your information. No system is perfectly secure, however, and we cannot guarantee absolute security.

6. Retention

We retain your personal information for as long as your account is active or as needed to provide Hedge. If you delete your account, we will delete or anonymise your personal information within a reasonable period, except where we are required to retain it for legal, accounting, or regulatory purposes.

7. Your rights

Under the Privacy Act 2020 you have the right to:

• Request access to the personal information we hold about you;
• Request correction of any information that is inaccurate, incomplete, or out of date;
• Withdraw consent or close your account at any time.

To exercise these rights, contact us using the details in Section 10. We will respond within 20 working days, as required by the Act.

8. Children

Hedge is not directed at children under the age of 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated through the product or via email. Continued use of Hedge after changes take effect means you accept the updated policy.

10. Contact us

If you have questions, concerns, or requests about this Privacy Policy or how we handle your personal information, please contact us at privacy@hedge.co.nz.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner at privacy.org.nz.