Last updated: 1 August 2026
This policy explains how Davinchi Limited ("we", "us") handles personal information in connection with Davinchi Archives, in accordance with the New Zealand Privacy Act 2020.
We do not use advertising trackers or analytics cookies. The only cookie we set is the session cookie that keeps you signed in.
Solely to provide and secure the service: operating your account, storing and displaying your catalogue to you, responding to your messages, and protecting against unauthorised access. We do not sell personal information, and we do not use your content for any purpose other than providing the service to you.
When you record a buyer's name or contact details against an artwork, you are the one collecting that information; we simply store it for you. You are responsible for ensuring you may hold and use it. We will not access or use it except as needed to operate the service.
Your information is stored on servers we control located in the United States, with encrypted backups held with Cloudflare, Inc. By using the service you authorise this overseas storage. We take reasonable steps to ensure your information is protected by appropriate safeguards wherever it is held: connections are encrypted (HTTPS), passwords are hashed, server access is restricted by cryptographic keys, and backups are kept for recovery purposes.
Your catalogue is private to your account. We do not share personal information with third parties except: our hosting and infrastructure providers (who store data on our behalf), where required by law, or with your direction or consent (for example, a sharing feature you choose to use).
For as long as your account is active. If you close your account, we will delete your content within a reasonable period, after which it will age out of backups (which are retained for up to roughly 30 days). Contact messages are kept as long as needed to respond and for our records.
Under the Privacy Act 2020 you may ask for a copy of the personal information we hold about you, and ask us to correct it. You can also export your full catalogue yourself at any time using the export feature, and ask us to delete your account and content. Write to hello@davinchiarchives.com for any of these.
If you use the service from outside New Zealand, you may have additional rights under your local law — for example, if you are in the European Union or United Kingdom, under the GDPR or UK GDPR. Where those laws apply: we process your account information and catalogue because it is necessary to perform our contract with you, and we keep security logs on the basis of our legitimate interest in protecting the service. You can exercise any applicable rights (including access, correction, deletion, and portability) by writing to hello@davinchiarchives.com.
If we become aware of a privacy breach that has caused, or is likely to cause, serious harm, we will notify the Office of the Privacy Commissioner and affected people as required by the Privacy Act.
We may update this policy from time to time and will note the date above. Questions or concerns: hello@davinchiarchives.com. You may also complain to the Office of the Privacy Commissioner (privacy.org.nz).