Privacy Policy

ASI Solutions Limited — Version 2026-05-27 — Effective 27 May 2026

ASI Solutions Limited ("ASI", "we", "us") is committed to protecting your personal information in accordance with the Privacy Act 2020 (NZ) and the Information Privacy Principles (IPPs) contained within it. This policy explains what personal information we collect, why we collect it, how we use it, and your rights.

1. Who We Are

ASI Solutions Limited (NZBN 9429036443706) is a New Zealand-based technology company. We operate ASI Cloud, a self-service cloud infrastructure platform. Our Privacy Officer can be contacted at privacy@asi.co.nz.

2. Personal Information We Collect

We collect the following categories of personal information:

• Account information: name, email address, and password (stored as a one-way hash).
• Billing information: payment card details (processed and stored by Stripe; ASI does not store raw card numbers), billing address where provided.
• Usage data: virtual machine names, resource configurations, and consumption metrics associated with your account.
• Technical data: IP address at registration, login timestamps, and portal activity logs.
• Communications: emails and support requests you send us.

3. How We Collect Information

We collect personal information directly from you when you register an account, configure services, communicate with us, or make a payment. Technical data (IP addresses, logs) is collected automatically as you use the platform.

4. Why We Collect and How We Use It

We use your personal information to:

• Create and manage your account and provide the cloud services you have requested;
• Process payments and issue invoices;
• Communicate with you about your account, service updates, and billing;
• Detect and prevent fraud, abuse, and security incidents;
• Comply with legal obligations under New Zealand law, including obligations to respond to lawful authority requests;
• Improve the platform (using aggregated, de-identified usage data).

We will not use your personal information for direct marketing without your separate consent, and you may withdraw that consent at any time.

5. Data Storage and Location

Your personal information and infrastructure data are stored in New Zealand. We do not routinely transfer personal information outside New Zealand. If an international transfer is necessary (for example, to a support provider), we will ensure equivalent privacy protections are in place in accordance with IPP 12.

6. Disclosure to Third Parties

We may share your personal information with:

• Stripe, Inc. — for payment processing. Stripe's privacy policy governs their handling of your payment data.
• HubSpot, Inc. — for CRM and invoicing purposes (name, email, organisation, billing amounts).
• Sentry — for error monitoring. We strip personally identifiable data before sending error reports.
• New Zealand Police, CERT NZ, or other lawful authorities — where required by law or court order.

We do not sell your personal information to any third party.

7. Security

We implement reasonable technical and organisational measures to protect your personal information, including encrypted data storage, hashed passwords, multi-factor authentication options, and access controls. No system is completely secure; please notify us immediately at security@asi.co.nz if you believe your account has been compromised.

8. Retention

We retain your personal information for as long as your account is active and for up to 7 years after account closure for tax and legal compliance purposes. Infrastructure usage data may be retained for up to 2 years for billing reconciliation. Data held in terminated infrastructure is deleted within 30 days of account closure.

9. Your Rights

Under the Privacy Act 2020 you have the right to:

• Access the personal information we hold about you (IPP 6);
• Request correction of inaccurate personal information (IPP 7);
• Make a complaint to the Office of the Privacy Commissioner if you believe we have breached your privacy rights.

To exercise these rights, email our Privacy Officer at privacy@asi.co.nz. We will respond within 20 working days in accordance with the Act.

10. Cookies

The ASI Cloud portal uses session cookies necessary for authentication and security (CSRF tokens). We do not use third-party advertising or tracking cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email at least 14 days before they take effect. The current version is always available at this URL.

12. Contact

Privacy Officer, ASI Solutions Limited
Email: privacy@asi.co.nz
Website: www.asi.co.nz