Privacy Policy
Last updated: 14 October 2026
This policy describes how Chrisonic Systems ("we", "us") collects, uses, and protects your personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs).
Important: Documents and images you upload are sent offshore to third-party services for processing. See Section 5 for details (IPP 12).
1. What We Collect
- Your email address and password (for authentication)
- Documents and images you upload to generate presentations
- Your company logo (if provided)
- Usage data — how many presentations you generate, which themes you use
- Payment information (handled by Stripe — we do not store card numbers)
- IP address and browser information for security and rate limiting
2. How We Use It (IPP 10)
- To generate your toolbox talk presentations
- To enforce subscription plan limits
- To process payments and send receipts
- To respond to support requests
- To improve the service
3. How Long We Keep It
- Uploaded source documents and logos: stored privately while your talk is queued or processing so a server restart does not lose the upload. They are removed when processing finishes or fails; if cleanup is temporarily unavailable, deletion is retried. Abandoned uploads become eligible for cleanup after 24 hours when no queued or running job needs them. Extracted images and prepared logos are temporary working files and are removed after processing.
- Generated presentations: available to download for 90 days from successful completion, then deleted. If storage cleanup is temporarily unavailable, download access still expires and deletion is retried. Download your own copy to keep a presentation longer.
- Usage records: kept for 13 months for quota enforcement and billing purposes
- Account data: kept while needed to provide your account and service. Cancelling a subscription does not automatically delete your account. To request account closure or deletion, email chris@chrisonicsystems.com. Requests are reviewed manually; we will explain any information that needs to be retained for billing, security or legal purposes.
The periods above describe data in the active service. Separate recovery backups may retain copies after active-service deletion until those backups are replaced or removed. Deleting an account does not immediately erase existing backups.
4. Who Can Access It
Your data is accessible only to you and to Chrisonic Systems staff where necessary to provide support. We do not sell your data to third parties.
5. Offshore Processing (IPP 12)
To generate your presentations, we send the content of your uploaded documents and images to the following third-party services located outside New Zealand:
- Anthropic (USA) — Claude AI generates the slide content and narration scripts from your document text
- D-ID (Israel/USA) — renders the talking avatar video for each slide
- Pexels (USA) — searches for and downloads stock photos to illustrate slides (when enabled)
Each of these providers has their own privacy practices. By using SiteTalk you consent to this offshore processing (IPP 12). We take reasonable steps to ensure these providers maintain appropriate safeguards.
Your authentication data, privately queued source files and saved presentations are stored by Supabase (Singapore region / ap-southeast-1) and your payment data is handled by Stripe (USA).
6. Security
We use HTTPS for all data in transit, signed session cookies, and access controls to limit who can read your data. Passwords are hashed by Supabase and never stored in plain text. We conduct periodic security reviews and apply updates promptly.
7. Your Rights (IPP 6, 7)
Under the NZ Privacy Act 2020 you have the right to access your personal information and to request correction of any inaccuracies. To exercise these rights, email chris@chrisonicsystems.com.
8. Cookies
We use a single session cookie to keep you logged in. It is HttpOnly, Secure, and SameSite=Lax. We do not use advertising or analytics cookies. For more information, contact us at chris@chrisonicsystems.com.
9. Changes to This Policy
We may update this policy. We will notify you by email or in-app notice of material changes. Continued use after the effective date constitutes acceptance.
10. Contact / Complaints
Questions or complaints about our privacy practices: chris@chrisonicsystems.com
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner.