Privacy Policy
How we collect, use, and protect your information
Last updated: August 2026 | MyAsset — a product of OptiTrac Limited
1. Who We Are
MyAsset is operated by OptiTrac Limited, a New Zealand registered company based in Christchurch, New Zealand.
Privacy Contact
Email: hello@myasset.co.nz
Address: 30 Southwark Street, Christchurch, New Zealand
2. What Information We Collect
We collect the following types of personal information:
Account Information
- Name, email address, phone number
- Company name, job title, and role
- Login credentials (password stored encrypted, never in plain text)
Asset & Usage Data
- Asset records you create (descriptions, photos, serial numbers, locations)
- GPS location data from tracked assets (where GPS tracking is enabled)
- Booking, checkout, and return history
- Maintenance and service records
- In-app messages between team members
Technical Data
- Device type, operating system, and app version
- IP address and general location (country/region)
- Usage analytics (which features you use, session duration)
- Crash reports and error logs
Payment Information
- Billing contact details
- Payment method (processed by our secure payment provider — we do not store full card numbers)
3. How We Collect Information
We collect information:
- Directly from you — when you create an account, add assets, or contact us
- From your use of our platform — automatically as you interact with the app
- From your devices — GPS location data (only when tracking is enabled by your organisation's admin)
- From third parties — only where you have authorised an integration
4. Why We Collect Information
We use your information to:
- Provide and maintain the MyAsset platform and services
- Create and manage your account
- Process your subscription payments
- Send service notifications (booking confirmations, maintenance alerts, return reminders)
- Provide GPS tracking and geofence alerts (where enabled)
- Deliver in-app messaging between your team members
- Improve our platform based on usage patterns
- Respond to support requests and inquiries
- Comply with legal obligations under New Zealand law
- Protect the security of our platform and users
We will NEVER:
- Sell or rent your personal data to third parties
- Send unsolicited marketing without your consent
- Share your asset data with other organisations
- Track your personal location (GPS tracks assets, not people)
5. Who We Share Information With
We only share your information with:
Service Providers
- Amazon Web Services (AWS) — cloud hosting and data storage
- Twilio — in-app messaging delivery
- Vodafone / Kore Wireless — GPS SIM card connectivity
- Payment processor — subscription billing
- Email service provider — transactional emails only
Your Organisation
Admins within your organisation can see user activity, asset records, and booking history relevant to their role and permissions.
Legal Disclosure
We will also disclose information if:
- Required by New Zealand law, court order, or regulatory authority
- Necessary to protect the safety of our users or the public
- Needed to enforce our Terms of Service
We do NOT share your data with advertisers, data brokers, or any unrelated third parties.
6. Where Your Data is Stored
Your data is stored on secure servers provided by Amazon Web Services (AWS). Our primary data hosting is in the Asia-Pacific (Sydney) region, meaning your data stays in the ANZ region.
Security Measures
- Encryption in transit (TLS/SSL) and at rest (AES-256)
- Role-based access controls
- Regular security audits and penetration testing
- Automated backups with point-in-time recovery
- Multi-factor authentication for administrative access
7. How Long We Keep Your Data
- Active account data: retained for the duration of your subscription
- Asset history & audit trails: subscription + 12 months after cancellation
- GPS tracking data: 24 months from date of collection
- Payment records: 7 years (required by NZ tax law)
- Support correspondence: 3 years after resolution
After these periods, data is securely deleted or anonymised.
When you cancel your subscription:
- 30 days to export your data
- After 30 days — account deactivated
- After 12 months — all personal and asset data permanently deleted
8. Your Rights Under the NZ Privacy Act 2020
Under the Privacy Act 2020, you have the right to:
- Access — Request a copy of the personal information we hold about you
- Correction — Ask us to correct any information that is inaccurate or incomplete
- Deletion — Request deletion of your personal information (subject to legal retention requirements)
- Complaint — Lodge a complaint with the Office of the Privacy Commissioner if you believe we have breached your privacy
To exercise any of these rights, contact us at hello@myasset.co.nz. We will respond within 20 working days as required by the Privacy Act 2020.
9. GPS Tracking & Location Data
MyAsset offers GPS tracking as an optional feature for physical assets (vehicles, equipment, containers, etc.).
Important points:
- GPS tracking is enabled by your organisation's administrator — not by default
- GPS tracks the ASSET, not the person — it is attached to equipment, not individuals
- Location data is only visible to authorised admins within your organisation
- Geofence alerts are configurable by your admin
- Employees should be informed by their employer if assets they use are GPS-tracked
- GPS data can be deleted upon request (subject to your organisation's admin approval)
If you have concerns about GPS tracking in your workplace, speak with your employer or contact the Office of the Privacy Commissioner.
10. Cookies & Analytics
Our website and platform use cookies to:
- Keep you logged in during your session
- Remember your preferences (language, timezone, dashboard layout)
- Understand how users interact with our platform (anonymous analytics)
We do NOT use:
- Advertising cookies or trackers
- Cross-site tracking
- Third-party marketing pixels
You can disable cookies in your browser settings, though this may affect platform functionality.
11. Children's Privacy
MyAsset is a business platform and is not designed for use by individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes:
- We will update the "Last updated" date at the top of this page
- We will notify account holders by email if the changes are material
- Continued use of the platform after changes constitutes acceptance
We recommend reviewing this policy periodically.
© 2026 OptiTrac Limited. All rights reserved. MyAsset is a registered product of OptiTrac Limited, New Zealand.