Privacy

This privacy policy explains how AmeriKiwi handles personal information for the purposes of the New Zealand Privacy Act 2020. It covers the AmeriKiwi website, customer dashboard, product request workflow, optional browser extension, payment flow and support messages.

• Account and authentication information, including your name, email address, sign-in identity, role and account status.
• Contact and delivery information, including phone number and New Zealand delivery address.
• Product request information, including retailer URLs, product names, prices, quantities, variants, colours, categories, notes, images and product identifiers where available.
• Quote, payment and order records, including quote lines, exchange-rate snapshots, payment status, receipt references, purchase records, parcel measurements, parcel condition notes, photos where recorded, shipment details and tracking events.
• Support communications, including messages you send or receive about a request and related helpdesk ticket information.
• Technical, security and operational records needed to run, protect and troubleshoot the service.

We do not store full card numbers. Card payments are handled by our payment provider, and AmeriKiwi stores payment references, amounts, status and receipt information needed to reconcile the order.

• To create and secure your account.
• To review whether a requested product can be handled by AmeriKiwi.
• To prepare, send, expire, re-quote and audit itemised quotes.
• To purchase approved products from US retailers after payment clears.
• To receive, inspect, photograph where needed, consolidate, ship and track parcels.
• To process payments, receipts, refunds or payment disputes where applicable.
• To communicate with you about requests, quotes, delivery issues and support questions.
• To prevent fraud, misuse, duplicate submissions and unauthorised access.
• To meet tax, accounting, customs, dispute and operational record-keeping needs.

We share personal information only where it is reasonably needed for the service, where the law requires it, or where you have authorised it.

• Payment processors, including Stripe when Stripe payments are configured, to process and confirm payment.
• Firebase/Google Cloud services used for authentication, database, storage and application hosting infrastructure.
• US retailers or suppliers where information is needed to place, receive, resolve or return an order.
• Freight carriers, couriers, warehouse or receiving partners, and customs or border agencies where needed for shipping, tracking, declarations and delivery.
• Helpdesk and email providers used to send transactional messages or manage support conversations.
• Professional advisers, regulators, law enforcement or dispute bodies where disclosure is lawful and necessary.

We do not sell personal information.

AmeriKiwi helps New Zealand customers buy from the United States, so some information may need to be used or disclosed overseas, including to US retailers, receiving or freight providers, payment providers and cloud infrastructure providers. We also use online services that may process or store information outside New Zealand.

We take reasonable steps to use reputable providers and disclose only what is needed for the relevant purpose. We cannot guarantee that every service provider stores every copy of information only in New Zealand.

The AmeriKiwi browser extension is optional. Its content script is injected into the active tab only when you open the AmeriKiwi popup on that page. It reads product metadata from that page so you can add the item to your AmeriKiwi cart.

• The extension may read the page URL, retailer domain, product title, price, currency, selected size or variant, colour, quantity, image, brand and product identifiers published by the page.
• Adding items to the extension cart stores them locally in your browser until you submit them or remove the extension data.
• Nothing is sent to AmeriKiwi until you submit the cart or call an authenticated AmeriKiwi API from the extension.
• Extension API requests use a Firebase ID token in an Authorization header rather than browser cookies.
• The extension is not designed to read passwords, payment details, checkout form fields or tabs you have not deliberately opened it on.

AmeriKiwi may search for the same product at other US retailers to support product sourcing and potential customer savings. For that purpose, product details such as the product name, retailer URL, brand or identifiers may be sent to configured search or matching providers. We do not need to send your name, address, phone number or payment details for that product search.

The website uses authentication/session technology to keep you signed in and to protect private routes. The browser extension uses local browser storage for its cart and sign-in state. The codebase does not include advertising cookies or third-party advertising trackers.

We use account authentication, server-side ownership checks, database rules, restricted admin access and provider webhooks or signatures where applicable to protect customer records. No internet service can be made perfectly secure, but we take reasonable steps to protect personal information from unauthorised access, loss and misuse.

We keep personal information for as long as reasonably needed for the purpose it was collected, including order fulfilment, support, tax, accounting, customs, security, dispute and legal purposes. When information is no longer needed, we will delete it, de-identify it, or keep it only where lawful and necessary.

You can ask us for access to personal information we hold about you, and you can ask us to correct it. We may need to verify your identity before responding. You can also update some profile and delivery details in your AmeriKiwi account.

If you are not satisfied with our response, you may contact the New Zealand Office of the Privacy Commissioner.

For privacy questions, access requests or correction requests, contact support@theamerikiwi.com.