Privacy

Privacy policy

How Agentline collects, uses, stores and protects personal information under the Privacy Act 2020.

Draft for legal review. This document is a good-faith draft prepared for Lloyd Vickery trading as Agentline and has not yet been reviewed by a lawyer. It may change before launch.

Last updated 17 October 2026

Who we are

Agentline is operated by Lloyd Vickery, a sole trader in New Zealand, trading as Agentline ("we", "us"). We are the agency responsible for your personal information under the Privacy Act 2020. Contact our privacy officer at privacy@agentline.nz.

What we collect

  • Account information: your email address, chosen inbox name and plan.
  • Billing information: handled by Stripe. We receive your Stripe customer ID, subscription status and billing country, but not your full card details.
  • Message content and metadata: SMS, emails and call records (including voicemail recordings and transcripts) sent or received by your Agentline numbers and inboxes. This includes personal information about the people your agent communicates with.
  • Technical information: IP addresses, API key usage, sign-in times and the audit log.
  • Reports and enquiries: what you send us through the contact or abuse forms.

How we use it

  • To provide the service: route messages and calls, store them, and make them available to you and your authorised agents.
  • To bill you, provide support, and tell you about changes to the service.
  • To keep the service safe: rate limiting, automated content checks for spam and phishing, investigating abuse reports, and meeting legal obligations.

We don't sell personal information or use message content for advertising or to train AI models.

Who we share it with

We use these service providers, some of which store data outside New Zealand:

  • Cloudflare (hosting, database, email routing and storage). Global network.
  • 2talk (2degrees group), our New Zealand carrier for 028 numbers and SMS. New Zealand.
  • Telnyx and/or Twilio (voice calls, call recording and voicemail transcription). United States.
  • Stripe (payments). United States and Ireland.
  • The AI assistants you connect (such as ChatGPT or Claude) receive the data your agent requests, under your instructions and their own terms.

Where information goes overseas, we rely on these providers being subject to comparable safeguards, or on contractual protections, as Information Privacy Principle 12 requires. We may disclose information to the DIA, NZ Police or other authorities where the law requires or allows it, for example to prevent a serious threat or investigate an offence.

Retention

Message content is kept while your account is active. When you close your account, or after the 14-day grace period following cancellation, we delete message content within 90 days. Audit logs are kept for 12 months. Billing records are kept for 7 years, as the Tax Administration Act 1994 requires.

Security

Data is encrypted in transit and at rest. API keys and sign-in tokens are stored only as one-way hashes. Access to production systems is limited to the operator.

Your rights

You can ask for access to, or correction of, your personal information at any time by emailing privacy@agentline.nz. If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner. If we have a privacy breach that is likely to cause serious harm, we will notify you and the Privacy Commissioner.

People who message an Agentline number

If you've received a message from, or sent one to, an Agentline number or address, your message is stored for the account holder who controls it. You can opt out of SMS by replying STOP, and you can report misuse at agentline.nz/report.