Privacy Policy

This Privacy Policy explains how Cutline ("we", "us", "our") collects, uses, stores, and discloses personal information when you use our website and app at https://cutline.nz.

Business Information

Cutline is operated by TIE EDUCATION LIMITED.
NZBN: 9429053498052

For business or privacy inquiries contact [email protected].

1. Information We Collect

Account Information

When you authenticate using Discord, we receive your Discord user ID, username, avatar, and (if available) email address. This information is required to create and maintain your account.

Learning & Performance Data

We store worksheet attempts, answers, scores, review states (including due dates), progress history, and related activity necessary to operate learning features and analytics.

Billing Information

Payments are processed by Stripe. We receive limited billing metadata such as customer ID, product/price, subscription status, and payment confirmation. We do not store full card details.

Technical & Security Data

We collect technical and security metadata such as IP address, device/browser type, and session timestamps to secure accounts, detect fraud, prevent abuse, and maintain service integrity.

Analytics

We use PostHog for product analytics, performance monitoring, and session replay so we can understand how students move through the platform, diagnose slow flows, and improve conversion and learning outcomes. Replay and analytics are configured to avoid collecting raw answer content, payment details, or other unnecessary sensitive content.

2. Why We Collect Your Information

• To provide and operate the Service.
• To create and manage accounts and sessions.
• To deliver worksheet, review, and progress features.
• To manage subscriptions, purchases, and billing events.
• To enforce free-tier limits and paid entitlements.
• To secure the platform, detect abuse, and troubleshoot issues.
• To improve product quality, performance, and reliability.

If you choose not to provide required information (such as account details, or billing information for paid plans), we may not be able to provide certain features of the Service.

Communications and email updates

Creating an account or providing an email address does not by itself subscribe you to marketing. We use your address for the purpose explained where you provide it.

• Sign-in links, security notices and billing messages support your account or a service you use.
• Summership application messages concern your application. Applying does not subscribe you to daily practice or newsletters.
• Casper requests include a verification email and the Casper updates described on that form, not unrelated marketing.
• Cutline daily practice emails are optional. The separate unchecked choice on the sign-in page records this subscription; signing in does not require it.

You may opt out of marketing emails using their unsubscribe link or by contacting us at [email protected]. Existing unsubscribe and suppression preferences take precedence over a new daily practice choice.

Service-related communications (such as account security notices or billing information) may still be sent where necessary for the operation of your account.

We comply with the Unsolicited Electronic Messages Act 2007 (New Zealand).

3. Disclosure & Third Parties

We do not sell personal information. We may share information with:

• Discord (authentication and account sign-in)
• Stripe (payment processing and subscription management)
• PostHog (product analytics, performance monitoring, and masked session replay)
• Infrastructure and hosting providers that help us run and secure the Service

These providers process information under their own terms and privacy policies where applicable.

Hosting (DigitalOcean, Sydney)

Our application and infrastructure are hosted using DigitalOcean in the Sydney (Australia) region. This means personal information may be stored and processed outside New Zealand. We take reasonable steps to help ensure appropriate safeguards are in place and that personal information is protected in a manner consistent with New Zealand privacy obligations.

International Transfers

Where personal information is transferred outside New Zealand (for example, to hosting providers located in Australia), we take reasonable steps to ensure the receiving parties protect the information in a manner consistent with the New Zealand Privacy Act 2020.

4. Cookies and Similar Technologies

We use cookies and related technologies for authentication/session continuity, security, and analytics. If you disable cookies, parts of the Service may not function correctly.

5. Data Retention

Removing a waitlist address deletes its contact and application details and removes its topic subscriptions. We retain hashed suppression keys and related timestamps to prevent old verification links from restoring that record. This does not delete a separate Cutline account or change its daily practice email preferences.

We retain personal information for as long as your account is active and as reasonably necessary to provide services, comply with legal obligations, maintain records, resolve disputes, and enforce agreements. If you request deletion, we will take reasonable steps to delete or de-identify information unless we need to keep it for legitimate legal or operational reasons (for example, billing/tax recordkeeping or fraud prevention).

6. Security

We use reasonable technical and organisational safeguards to protect personal information, including encrypted connections (HTTPS), access controls, and authentication protections. However, no method of transmission or storage is completely secure.

7. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Request access to your personal information
• Request correction of your personal information
• Request deletion (subject to legal and operational requirements)

To make a request, contact us at [email protected]. We may need to verify your identity before completing requests.

If you believe your privacy rights have been breached and we do not resolve your concern, you may contact the Office of the Privacy Commissioner in New Zealand.

8. Children

The Service is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. Parents or guardians may contact us to request deletion of a minor's data.

9. Data Breaches

In the event of a notifiable privacy breach, we will comply with applicable legal obligations, including notification requirements under New Zealand law.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on this page with a revised effective date.

11. Contact

For privacy questions or data requests, email [email protected].