Privacy Policy

Last updated: 24 August 2026

Sahara Software ("we", "us") is a sole-trader software studio based in New Zealand. We operate this website (www.saharasoftware.co.nz) and the Postify service. This policy explains what personal information we collect, why, and how we handle it. We handle personal information in accordance with the New Zealand Privacy Act 2020.

Information we collect on this website

• Contact form. If you send us a message, we receive the name, email address and message you provide. We use them solely to respond to you. Messages are delivered to our business inbox by email; we do not add you to any mailing list.
• Hosting logs. This site is published by GitHub Pages. GitHub records visitor IP addresses and request metadata for the security of its own service. We do not operate a web server, do not receive those logs, and cannot use them to profile visitors.
• Theme preference. Your light/dark theme choice is stored in your own browser (localStorage) and is never sent to us.

This website does not use analytics or advertising trackers, and does not set cookies.

Service providers

• Website hosting. The pages are served by GitHub Pages (GitHub, Inc.). See the logging note above.
• Contact form. When you submit the form it is sent to a small program we run on Cloudflare Workers, which checks and rate-limits the request before handing it on for delivery. Cloudflare processes the message in transit; nothing is stored there.
• Email delivery. Contact-form messages are delivered through Resend, a transactional email provider. Resend processes the message content and your email address for the purpose of delivery only.
• Fonts. Pages load typefaces from Google Fonts; your browser requests the font files directly from Google's servers.

Postify

Postify is our social media management platform, provided as a hosted service to clients. For Postify accounts and workspaces we collect and store:

• Account information — name, email address and authentication credentials (passwords are stored only as salted hashes; accounts are invitation-only and support two-factor authentication).
• Content — the posts, drafts, brand profiles and related material our clients create in the service.
• Platform connections — when a client connects a social media account (Facebook Pages, Instagram, LinkedIn or TikTok), we receive an access token through that platform's official OAuth flow. Tokens are stored encrypted and are used only to perform the actions the client asks for — discovering which pages or profiles they may post as, and publishing the content they schedule.

Platform data (Meta, LinkedIn, TikTok)

Data received from social media platforms is used solely to provide Postify's publishing features to the account holder who connected the channel. Specifically, we:

• request only the permissions needed to list a user's eligible pages or profiles and publish content on their behalf;
• do not sell platform data, use it for advertising, or share it with third parties;
• retain platform tokens only while the channel remains connected — disconnecting a channel, or revoking access from the platform's own settings, invalidates our access;
• delete stored platform data on request (see "Your rights" below).

Where data is stored

Postify data is stored on infrastructure we operate, with access limited to the operator. This website is hosted, and contact-form messages are relayed and delivered, by GitHub, Cloudflare and Resend, which process that data outside New Zealand. We do not otherwise transfer personal information overseas.

Retention

We keep personal information only as long as it is needed for the purpose it was collected: contact messages for as long as the conversation is live, service data for the life of the client relationship, and security logs for a short rolling window.

Your rights

Under the Privacy Act 2020 you may request access to, or correction of, personal information we hold about you. You may also ask us to delete your data, including any data received from a connected social media platform — see Data Deletion for the steps. Email info@saharasoftware.co.nz and we will respond promptly. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner (www.privacy.org.nz).

Changes

If this policy changes, the new version will be published at this address with an updated date.

Contact

Sahara Software · Hawkes Bay, New Zealand · info@saharasoftware.co.nz