Last updated: 20 February 2026
Effective date: 20 February 2026
Lalapanzi.ai is an AI-powered learning platform based in Auckland, New Zealand. We are committed to protecting your personal information and being transparent about how we handle it.
This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we share it with, and what rights you have under the New Zealand Privacy Act 2020.
If you have any questions or concerns, please contact us at hello@lalapanzi.ai.
New Zealand's Privacy Act 2020 establishes 13 Information Privacy Principles (IPPs) that govern how organisations collect, store, use, and disclose personal information. This policy is written to comply with those principles.
If you believe we have not complied with the Privacy Act 2020, you have the right to make a complaint to the Office of the Privacy Commissioner. See Section 13 for details.
We collect only the information we need to operate the platform and provide you with a good experience.
When you create an account, we collect:
When you purchase a learning pathway, we collect your billing name and payment confirmation data (transaction ID, amount, date). We do not store your credit or debit card details. Card processing is handled entirely by Stripe (stripe.com).
We collect anonymised data about how you use the platform, including pages visited, course progress, clicks, and device/browser information. This data is collected through PostHog (posthog.com).
If something goes wrong, we collect technical error data through Sentry (sentry.io) including error messages, the page that triggered the error, and browser/device information. This data is used solely to identify and fix bugs.
Account verification, purchase confirmation, and platform updates are delivered through Resend (resend.com). We track delivery and open status to identify delivery issues.
We store records of which courses and pathways you have purchased and completed. This is held in our database (powered by Neon/Postgres) and is necessary to provide your course access.
We only collect personal information for legitimate, specific purposes:
| Information | Why We Collect It |
|---|---|
| Name and email | To create and manage your account; to contact you about your account |
| Payment data | To process your purchase and keep records for financial compliance |
| Usage analytics | To understand how the platform is used and improve it |
| Error data | To identify and fix technical problems |
| Course progress | To track what you've accessed and restore your progress |
| Email activity | To confirm emails reach you and troubleshoot delivery issues |
We do not use your personal information for advertising, and we do not sell your data to anyone.
Our primary legal basis for collecting and using personal information is:
We share your personal information only with the service providers necessary to operate the platform:
| Provider | Purpose | Location |
|---|---|---|
| Clerk | Authentication and account management | United States |
| Stripe | Payment processing | United States |
| PostHog | Usage analytics | United States / EU |
| Sentry | Error tracking and diagnostics | United States |
| Resend | Transactional email delivery | United States |
| Anthropic | AI content generation (Claude) | United States |
| Cloudflare | Content delivery network and file storage (R2) | Global (primarily US) |
| Neon | Database hosting (Postgres) | United States |
| Vercel | Platform hosting and deployment | United States |
We do not sell, rent, or trade your personal information to any third party for commercial purposes.
We may disclose your information if required to do so by New Zealand law, court order, or to protect the rights, safety, or property of Lalapanzi.ai or others.
We want to be transparent about this: Most of our service providers are based in the United States, which means your personal information is transferred to and stored in the US.
The United States does not have the same privacy protections as New Zealand. However, all providers we use have committed to handling data securely and are subject to internationally recognised security standards (such as SOC 2, ISO 27001, or PCI-DSS).
If you have concerns about international data transfers, please contact us at hello@lalapanzi.ai.
| Data type | Retention period |
|---|---|
| Account information | Retained while active; deleted within 90 days of account closure |
| Payment records | 7 years (New Zealand financial record-keeping requirements) |
| Usage analytics | Up to 2 years in anonymised form |
| Error logs | 90 days |
| Email logs | 12 months |
We take reasonable steps to protect your personal information, including:
No system is perfectly secure. If you discover a security issue, please report it to hello@lalapanzi.ai.
Lalapanzi.ai is not designed for or directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has created an account, please contact us at hello@lalapanzi.ai and we will delete the account.
Under the Privacy Act 2020, you have the following rights:
12.1 Right of Access (IPP 6)
You have the right to request access to the personal information we hold about you. Email hello@lalapanzi.ai with the subject “Privacy Access Request.” We will respond within 20 working days.
12.2 Right of Correction (IPP 7)
If you believe any personal information we hold about you is inaccurate, you have the right to request a correction. Email us with the subject “Privacy Correction Request.”
12.3 Right to Deletion
You may request deletion of your account and associated personal information. Note that some information (such as payment records) may be retained for the period required by law. Email us with the subject “Delete My Account.”
12.4 Right to Restrict Processing
In certain circumstances, you may request that we restrict how we use your data. Contact us to discuss.
If you believe we have breached the Privacy Act 2020, please contact us first so we can try to resolve the issue directly:
We will acknowledge your complaint within 5 working days and aim to resolve it within 20 working days.
If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner:
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do:
Your continued use of the platform after the effective date of an updated policy constitutes acceptance of the changes.
For any questions, requests, or concerns about this Privacy Policy or our handling of your personal information:
This Privacy Policy is intended to comply with the New Zealand Privacy Act 2020 and its 13 Information Privacy Principles. It was drafted with the assistance of AI. If anything is unclear, please ask.