Privacy Policy
Who we are
Navaroa is a service providing tools and personalised planning assistance to help people organise and manage a move in New Zealand and Australia.
In this policy, "we", "us" and "Navaroa" refer to the operator of Navaroa.
This Privacy Policy applies to personal information collected through Navaroa from users in New Zealand and Australia. We handle personal information in accordance with the privacy laws that apply to us and the information we collect and hold.
What we collect
We collect information in a few different ways, depending on how you use the site:
Move details you enter. When you answer the questionnaire, we store: whether you're a renter or owner, whether your move is local, regional, or international (and if international, the country you're moving from), whether you have pets or children, your current and destination city or town, your planned move date if you give one, and your first name if you choose to add one — entirely optional, and used only to personalise the text you see on screen (for example, a greeting), never for anything else.
Task progress. Which items on your personalised checklist you've marked complete, and when.
An email address, if you choose to add one. Adding your email is optional — it's only used to send you a confirmation link so you can restore your checklist later, via our authentication provider (Supabase). We don't use it for marketing.
An access code, if you choose that option instead. This is a one-time code, valid for 7 days, that lets you get back into your checklist without an email. It's linked to a session token behind the scenes — treat it like a password and only share it with people you trust with access to your checklist.
Usage data. We log specific actions — starting the questionnaire, completing it, completing a task, returning to your dashboard — timestamped and linked to an internal account/move reference. This is not linked to your name or email unless you've also chosen to add one.
Cost estimator inputs. If you use our moving cost estimator, we log the inputs you provide (move type, route, size or volume, and which optional adjustments you selected) and the resulting price range. No name, email, IP address, or account is attached, and this is never linked to your move plan or any other data we hold, even if you're signed in when you use it.
Your IP address, when you submit the questionnaire. Used only for spam/bot protection — verifying you're not a bot, via Cloudflare Turnstile, and limiting how many times the same address can submit in a short period, via Upstash. Not linked to your name or email, and not used to track you elsewhere.
Basic site analytics, via Vercel Web Analytics. We use Vercel's built-in analytics to understand overall traffic — page views, referring site, approximate location (country/region/city level), and device/browser type. This is designed by Vercel to be aggregated and anonymous: it doesn't use cookies, identifies visitors only via a short-lived hash that's automatically discarded after 24 hours, and isn't linked to your name, email, or account.
Site usage and engagement, via Google Analytics 4. We also use Google Analytics 4 to understand how people use the site — pages visited, traffic sources, and overall engagement — so we can see what's working and improve Navaroa. Google Analytics sets its own cookies to do this; see "Cookies" below.
Cookies. The site uses a strictly necessary authentication cookie that keeps you signed into your own session — without it, features like saving your progress wouldn't work. When you submit the questionnaire, our bot-protection provider, Cloudflare Turnstile, also sets a short-lived security cookie on its own domain, used only to help tell real visitors from bots — not for tracking or advertising. Both are strictly necessary for features you've actively chosen to use, so neither requires separate consent under NZ or EU rules. We also use Google Analytics 4, which sets its own cookies to measure site usage across visits — see Google's own privacy policy for how it handles this data.
Why we collect it
To generate and show you a personalised moving checklist, to let you save and come back to your progress, to understand how the product is actually used so we can improve it, and to keep basic tabs on site traffic and performance.
How long we keep it
Your move details and task progress are kept for as long as your account/move stays active, so your checklist keeps working. If you'd like your data deleted, see "Your rights" below. Analytics data from Vercel is aggregated and any per-visitor identifier is discarded automatically after 24 hours.
Who we share it with
We don't sell your personal information. Some pages link out to third-party service providers (movers, insurers, cleaners, and similar) — some of these are, or may become, commercial/affiliate relationships; see our Affiliate Disclosure for details. If you click through to one of these providers and give them your own information, that's covered by their privacy policy, not ours — we don't pass your Navaroa data to them automatically.
We use third-party infrastructure providers to run the site — currently Supabase (database and authentication), Vercel (hosting and analytics), Cloudflare (bot protection on the questionnaire), Upstash (short-term rate limiting on the questionnaire), and Google (Google Analytics 4, for site usage analytics). They process data on our behalf under their own security and privacy terms.
Your rights
You can ask us to tell you what data we hold about you, correct it, or delete it. To do this, contact us at privacy@navaroa.com. Deleting your data means removing your move details, task progress, and any saved email/access code from our systems — we'll confirm once it's done.
Security
We take reasonable steps to protect your information, including database-level access controls that restrict each user's data to that user alone. No method of storing or transmitting data online is 100% secure, so we can't guarantee absolute security.
Children's privacy
Navaroa isn't directed at children, and we don't knowingly collect information from anyone under 16.
Changes to this policy
We may update this policy as the product changes. We'll update the date below when we do.
Contact
Questions about this policy or your data: privacy@navaroa.com.
Last updated: 14 September 2026