Privacy policy
Version 1 · 9 September 2026 · New Zealand Privacy Act 2020
The short version
There is no tracking on this site. No analytics, no advertising, no pixels, no third-party scripts of any kind, and no cookies — which is why you have never seen a cookie banner here. Nothing about you is measured or sold.
We hold what you type into StagingPlan so that StagingPlan works. It is stored on a server in the United States, which we explain below because you may need to tell your own clients. Billing goes through Stripe and card numbers never reach us.
Your clients' details are held for you — legally they count as yours, not ours. Section 6 explains what that makes you responsible for, including a rule that changed in May 2026.
1. Two kinds of information, governed differently
This is the part worth understanding, because everything else follows from it.
About you, our customer
The staging company that subscribes, and the people at it who sign in. We are the agency for that information under the Privacy Act 2020 and it is ours to answer for.
About everybody else
The vendors, the agents, the owners of the houses you stage — the people whose names and addresses you type into a job. We hold that as your agent. Under section 11 of the Privacy Act 2020 information held by one agency as agent for another is treated as held by the second one. So in law that information is yours, not ours. We are the filing cabinet; you own the file.
2. What we hold about you
- Your account — your name, your email address, and your password stored as a one-way hash. We cannot read your password and neither can anybody else; a reset replaces it rather than recovering it.
- Your company — its name, the trading name you show clients, and a contact email address for proposals.
- Billing — a Stripe customer reference, a subscription reference, and whether you are paid up. No card number, ever, because there is nowhere in StagingPlan one could be entered.
- An audit log — significant actions on your account, with the time and the IP address they came from. That is what lets you see who changed what, and it is the same record that shows you if we have been in your account helping with a problem.
- Sign-in attempts — a counter and a timestamp, keyed to a value we cannot read backwards, to slow down anybody guessing passwords.
- An enquiry, if you filled in the form on the front page — your name, company, email, and what you wrote. It is stored so we can reply. It is not added to any mailing list, because there is no mailing list.
3. What you put in, that is about other people
- Jobs — the address of the property, and a contact name, email address and phone number for the vendor, agent, or whoever else you are dealing with.
- Agents and agencies — names, email addresses, phone numbers, and any notes you write about them.
- Proposals — the name and email address of the person you sent it to.
- Photographs — of your furniture, and of rooms inside the houses you stage. These are the most sensitive thing in the system and we treat them that way: they live under your company's own folder and are served only to people signed in to your company, or to somebody holding the specific link you sent them.
When somebody opens a proposal you sent them, we record the time, their IP address and their browser. That is how the app can tell you a proposal has been read. It is information about that person, and we would rather you learned it here than found the table later.
4. What we do not do
There are no analytics on this site or in the app. No Google Analytics, no tag manager, no advertising pixels, no embedded fonts or scripts from anybody else's server, no session recording, no heatmaps. Nothing on any StagingPlan page talks to a third party.
There are also no cookies. Your browser holds a sign-in token and a note that you have seen the tour, both in local storage on your own device, and both disappear when you sign out or clear your browser. That is the whole of it, and it is why there is no cookie banner to click.
We do not sell, rent, or share your data or your clients' data with anybody. We do not use what is in your account to train anything. We do not send marketing email — the only email we send is about your own account.
5. Where it is held, and who can reach it
StagingPlan runs on shared hosting provided by HostGator, on a server physically located in Phoenix, Arizona, in the United States. Your data and your clients' data are stored there, and backups are stored there too.
We are telling you this plainly because you will be asked. Strictly, the Privacy Commissioner's guidance is that using an overseas cloud provider is generally not an overseas disclosure under IPP 12 — for the section 11 reason in clause 1: the provider holds it as an agent, so it stays the responsibility of the agency it is held for. But your own clients will not ask you a question phrased like that. They will ask where their photographs are, and you need to be able to answer.
The people and services who can reach any of it:
- You and your colleagues, through your own logins.
- Us — but only to run the service and fix faults. When we enter a company's account the app shows a bar across the top saying so, the session lasts two hours, and it is written into that company's own log where you can see it.
- Stripe, for billing only. They receive your email address and what you pay; they never receive anything from inside your account.
- Xero, only if you connect it yourself, and only the invoices you choose to send there.
- HostGator, as the company whose machine it sits on.
That is the complete list. There is no data warehouse, no analytics vendor, no email marketing platform and no CRM behind this — a thing we can promise mostly because we never built one.
6. What this makes you responsible for
Because your clients' details are legally yours (clause 1), the Privacy Act obligations about those people are yours too. Most of it is what you would do anyway. One part is newer than the rest and worth a moment.
IPP 3A came into force on 1 May 2026. When you collect information about someone from a source other than that person — a vendor's name and mobile number given to you by the listing agent, say — you must take reasonable steps to tell that person you have it, why, who will receive it, who is holding it, and that they can ask to see and correct it. As soon as reasonably practicable after you collect it.
In practice a staging job will often fall inside one of the Act's exceptions — most obviously where the person already knows, which covers a vendor who engaged you, and where not telling them would not prejudice their interests. But the obligation is yours and the judgement is yours, and it is worth ten minutes of your own advice rather than ours. We are telling you it exists because a lot of people running small businesses have not heard of it yet.
If somebody asks you to show them, or correct, what you hold about them, everything is visible and editable in the app and your export includes all of it.
7. How long it is kept
- While you subscribe — everything, until you delete it yourself.
- After you cancel or a trial ends — everything stays. The account becomes read-only and your export keeps working. We do not delete a company's data because it stopped paying, and we will not start.
- When you ask us to delete it — we delete it and confirm. It is permanent and we will say so before we begin.
- Demonstration accounts — the "try it" demo builds a whole fictional company with invented properties and made-up people. It is swept away automatically after 24 hours, and nothing you type into one survives.
- Backups — kept on a rolling basis, so deleted data can persist in a backup for a short period after it goes from the live system.
8. Keeping it safe
The site is HTTPS throughout. Passwords are hashed and cannot be read back. Every company's data is separated at the database layer by a check the software refuses to run a query without, rather than by everybody remembering — which is the sort of thing that holds up on the day somebody is tired. Backups are per company: one customer's backup contains one customer's data and nobody else's.
What it is not: this is shared commercial hosting, not an isolated private server, and we are not going to describe it as more than it is. If the way it is hosted ever changes materially we will update this page.
9. If there is a privacy breach
The Privacy Act 2020 requires an agency to notify the Office of the Privacy Commissioner and the people affected if a breach is likely to cause serious harm. If that happened here we would tell you promptly, tell you what we knew and what we did not yet know, and notify the Commissioner. For information you hold through StagingPlan the notification duty is formally yours — but we would not leave you to discover it, and we would give you everything you needed to act.
10. Seeing and correcting what we hold
Under principles 6 and 7 of the Privacy Act you can ask what personal information we hold about you, and ask us to correct it. Email [email protected] and we will answer within 20 working days, which is what the Act allows.
Most of it you do not need to ask for — it is on your own screen, and the export button gives you the whole lot in one download.
11. Complaining
Email us first: [email protected]. If we have not put it right, you can complain to the Office of the Privacy Commissioner:
- privacy.org.nz
- 0800 803 909
- PO Box 10 094, Wellington 6140
12. Changes to this policy
If we change anything that matters — what we collect, where it is held, or who can reach it — we will email you at least 30 days before it takes effect. Every version is dated at the top of this page.
13. Getting in touch
Boing Media Limited (company number 1614008, NZBN 9429034871157) · Auckland, New Zealand · [email protected]. The commercial side of the arrangement is in our terms of service.