Data Usage Transparency

How housing data is governed on He Whare Ora

Operational housing data is treated as Protected Operational Data. Nothing leaves the operational core unless it has been transformed into Approved Aggregated Housing Intelligencethrough the Housing Intelligence Governance Engine (HIGE).

He Whare Ora does not sell personal household information or identifiable tenancy records. The platform generates anonymised housing intelligence to improve housing outcomes, infrastructure planning, and community wellbeing.

What we store to run the platform

He Whare Ora is an operational system — properties, tenancies, maintenance, payments and compliance evidence can't function without storing data. The platform runs on Lovable Cloud with encryption at rest, TLS in transit, role-based access control, and row-level security so each organisation only ever sees its own records.

• Account & profile — name, email, organisation, role, sign-in events, preferences.
• Property & tenancy records — properties, units, leases, tenant/whānau details, compliance status, Healthy Homes evidence.
• Maintenance activity — issues, photos, contractor assignments, quotes, invoices, completion evidence.
• Documents — tenancy agreements, inspections, certificates held in encrypted object storage with signed URLs.
• Payments & subscriptions — Stripe customer/subscription identifiers and billing history. Card details are held by Stripe, not by us.
• Audit log — every access, change, consent action and AI recommendation, retained for accountability.

What this does not mean

• We don't sell personal household information or identifiable tenancy records — ever.
• We don't use your stored data to train third-party AI models.
• Demo and AI-assistant inputs you type into the public demo are throwaway — not saved to an account, not used for training.
• Anything that becomes public housing intelligence passes HIGE guards (cohort ≥ 25, geographic abstraction, PII stripped).

Your rights over stored data

Under the NZ Privacy Act 2020 (and GDPR, Australian Privacy Principles and CCPA where they apply) you can request access to, correction of, export of, or deletion of the personal information we hold about you. Iwi, hapū and papakāinga data is treated as taonga and co-governed — see Māori data sovereignty below. Email mahi@coruscant.ch to exercise any of these rights.

What stays private

Never exposed publicly, never commercialised, never returned in any API output. Accessible only to authorised operational users with consent and role-based controls.

• Tenant and whānau names, contact details, identifiers
• Exact addresses and household coordinates
• Invoices, disputes, provider notes, household financials
• Maintenance tickets tied to identifiable households
• Health, wellbeing and vulnerability indicators

What becomes public intelligence

Released only after passing cohort, geographic abstraction, and re-identification guards. Cohort size must be at least 25.

• Regional dampness and housing-quality trends
• Repair response times and trade-capacity indicators
• Climate risk indicators and infrastructure stress
• Housing health scores at suburb/city/region granularity

What may be commercialised

Aggregated, statistical, anonymised outputs only — never raw household records, never identifiable profiles. Commercial partners receive forecasts and demand projections, never tenants.

• Suburb / city / regional analytics and forecasting
• Maintenance and trade-labour demand projections
• Infrastructure modelling and housing lifecycle analytics
• Climate-adjusted housing condition modelling

Outputs we will never build

These are blocked at the governance layer and rejected before any AI gateway call. The list is enforced in code, not just policy.

• Tenant risk scoring
• Household behavioural scoring
• Ethnicity profiling
• Vulnerable household targeting
• Landlord surveillance scoring
• Exact property identification in any commercial output

Māori data sovereignty

Iwi, hapū and papakāinga datasets are treated as taonga. They are opt-in, co-managed, and require explicit iwi governance approval before any release — including aggregated release. Indigenous housing analytics are never commercialised without sovereign permission.

Global compliance

The platform applies the strictest of the applicable regimes: NZ Privacy Act 2020, GDPR, Australian Privacy Principles, CCPA/CPRA, and PIPEDA. Consent logging, right-to-delete, audit trails, and jurisdiction-aware retention are wired into the data layer.

Questions? Email mahi@coruscant.ch