Privacy Policy

Last updated: May 2026

This privacy notice explains how the Muaūpoko Secure Document Vault ("the Vault") collects and handles personal information you provide when you register and use this service.

Information we collect

  • First name and last name
  • Email address and password (passwords are stored as one-way hashes)
  • Phone or mobile number
  • Your stated capacity (Claimant, Wai Number, Law Firm, Waitangi Tribunal Staff, Guest)
  • Wai number and law firm name, where applicable
  • Comments and feedback you submit on documents, including any page number and the body of your message
  • In-app notifications generated for you (for example, when a comment is approved, rejected, or replied to)
  • Audit data: documents you view, download, or acknowledge, and when

How we use it

  • To verify your identity and assign the appropriate access tier
  • To contact you about your registration and access
  • To moderate, display, and reply to feedback you submit on documents
  • To send you in-app and email notifications about your account, your comments, and moderation outcomes
  • To maintain a viewing, download, and acknowledgement audit log for the protection of sensitive material

Email notifications

Transactional emails (for example, when a comment of yours is approved or rejected, or when an admin replies) are sent to the address on your account. Each message includes an unsubscribe link you can use to opt out of non-essential notifications; security-critical messages (such as account verification and password resets) will continue to be sent.

Sharing

We do not sell or share your information with third parties. Information is held only for the administration of the Vault.

Your rights

You may request a copy of, correction to, or deletion of your information at any time by contacting us via the contact page.

Security

Documents are stored in a private, access-controlled bucket and served via short-lived signed links only to authorised viewers. All viewing, download, acknowledgement, comment, and notification activity is recorded.