Privacy notice

coPayer collects only what it needs to make a private deal safe for both people, never sells it, and never holds your money.

Last updated 6 November 2026

Who we are

coPayer is run by COPAYER LIMITED, a New Zealand company based in Auckland (company number 9393724, NZBN 9429053339720). Questions about your privacy go to our privacy officer at privacy@copayer.nz.

What we collect

What you tell us. Your first name, what you are selling and any photos of it, the price, any offer you make, the pick up area, and the meeting place and time. If you send a private link to a buyer you have already agreed with, the first name you type for them, which we check against the name their bank gives. If the names do not match, you see only their first name and the first letter of their last name. If you join our waiting list, your email address.

Link previews. When a deal link is sent in a message, apps like Messages, WhatsApp and Facebook show a preview card. For an open deal, the seller's phone makes a picture for that card from the cover photo, the price and the item, the same things anyone with the link can already see on the listing. Those apps fetch the picture from coPayer to show it. It is deleted with the deal.

What your bank tells us, only when you choose to connect it. We use Akahu to connect to your bank for one moment, with your permission:

• Your name, as your bank holds it, so the other person knows you are real.
• If you are selling, the accounts you choose to share, so you can pick the one your money lands in. We show them to you by their last four digits only. We never see a seller's balance.
• If you are buying, whether the account you choose covers the amount. We see the balance only to compare it with the amount. We keep the answer, and roughly how much your check covers, rounded down and for that deal only, so you can change your offer without connecting again. We never keep the balance itself, and the seller never sees either. We also note which bank you used, so your payment has to come from that same bank. Once the deal is paid, the seller sees that bank's name, so they know roughly when the money will land. We also keep that account's number for this deal only, so your bank lets the payment come only from the account it checked. The seller never sees it, and we delete it once the money has been sent or the deal ends. When your bank answers, we also compare your name and accounts with the seller's, only to stop someone buying their own item. Nothing more is kept for this, and a deal where both people have the same name never counts on a public record.

The payment. When you pay, the payment goes from the buyer's bank straight to the seller's bank through Akahu. To send it, the seller's account number is passed to the buyer's bank, as it is with any bank payment. coPayer never holds the money. We keep the payment's status and reference.

Deal Tap. If you pay with Deal Tap, each phone shows a code that changes every few seconds, and either phone can read the other's with its camera. The camera only opens when you tap Scan, and only after your phone asks you. The picture stays on your phone: only the code it reads is sent to coPayer, to check the two phones are together. Nothing from the camera is recorded or kept. In the coPayer app, Deal Tap can use Bluetooth instead, after your phone asks you: the seller's phone sends out a short range signal made for that deal only, and the buyer's phone reads the moving code from it when the two phones are held together. coPayer sends no name, account or location over Bluetooth, and keeps nothing from it.

The seller's fee. If a fee applies, it is held on the seller's card through Stripe and only taken if the deal completes. Stripe handles your card details. coPayer never sees your full card number.

Your device. Your browser keeps a private key so your phone can return to your deal. If you turn on alerts, we keep what your phone needs to receive them, and we remind you about an agreed meetup the day before and about an hour before. The reminder time is removed once the deal is paid or cancelled. If you add a meetup to Google Calendar, its time and place go to your own Google account. Our hosting provider records basic technical information, such as your IP address, to keep the service secure.

What we never collect

Your bank login or password. We never see it. You enter it with your bank, not with us.

Why we collect it

To confirm both people are real, to show the seller that a buyer can pay, to send the payment when both people are ready, to keep a record of the deal, to prevent fraud, and to contact you about your deal or, if you asked, about our launch.

Who sees what

• The other person in your deal sees your first name, the first letter of your last name, and that your bank confirmed who you are. A seller sees each buyer's offer and whether their funds were confirmed, never their balance. The meeting place is shown only to the buyer the seller picks.
• Akahu connects us to your bank and makes the payment. Akahu handles your bank information under its own privacy notice and end user terms, which you agree to when you connect.
• Stripe holds and takes the seller's fee.
• Cloudflare hosts coPayer. Google supplies the fonts on our pages, which means your browser asks Google's servers for them.
• Photon, a map search run by komoot, suggests places when you type a meeting place. Your phone sends it the words you type and, like any website, it sees your phone's internet address. It never gets your name or your deal.
• Apple or Google deliver alerts to your phone, if you turn them on.
• coPayer, to help with a deal. While a deal is live, coPayer can look at it, including first names, the steps and the meeting place, to help either person with a problem. Bank details are never shown, and every look is recorded.
• The law. We will share information if the law requires it, for example a lawful request from the Police.

We do not sell your information, and coPayer shows no advertising.

Your public record (optional)

If you keep deals in a coPayer account, you can choose to show a public record at copayer.nz/r/ followed by a code. It is off until you turn it on at copayer.nz/me, and you can turn it off at any time, which hides it straight away. While it is on, anyone with its link can see your first name and the first letter of your last name, that your own bank confirmed you, how many people have bought from you safely through coPayer, how many deals and months that covers, your proven seller number and since when, and one photo from one of your own completed sales, which you choose, or none. Only real bank deals you sold and kept count, never practice or Demo Bank deals. It never shows amounts, items, buyers' names, bank details, addresses, phone numbers or email addresses, and search engines are asked not to list it.

Reports and blocks

Anyone in a deal can report a problem from More. We keep a report for 12 months: what was wrong, any words you add, the deal's reference and the time, and for each person in the deal their first name, the first letter of their last name, and a scrambled code made from their name as their bank holds it, never the name itself. The other person is not told about a report. We use reports to keep coPayer safe.

A seller can take a buyer out of their deal. That buyer then cannot come back into that deal, so the deal keeps the same kind of scrambled code until the deal is deleted.

If someone breaks our terms, we can block them from coPayer. We keep the scrambled code, their first name, the first letter of their last name and the reason, until we lift the block. A blocked person cannot confirm with their bank, so they cannot make or join a deal, and they are taken out of any open deal they are in, unless the money is already at the bank.

Information stored overseas

Some of the providers above store or process information outside New Zealand. We choose providers with strong security and privacy commitments.

How long we keep it

A deal and the information in it are deleted automatically 30 days after its last activity. Waiting list emails are kept for up to 12 months, or until you ask us to remove yours. Our bank connection is one off: we read once, at the moment you connect, and have no ongoing access. We also keep anonymous totals, like the number and value of completed deals, with no names or bank details. To give each seller their free first deal, and to count the deals they complete through coPayer (shown on their listings as their track record), we keep two scrambled codes, one made from your name as your bank holds it and one from the account you are paid into, never the name or the account number itself. If a fee could not be taken from your card, we also keep a record of the amount owed, linked to those codes, until it is paid.

We also keep an activity record: each step a deal goes through, like created, paid or cancelled, with its time, the amount, the type of item, the general pick up area you gave, the buyer's bank name, and the kind of device used. It never keeps an exact meeting address. It is linked to a random number and holds no names, bank details, balances or photos. While the deal itself is still kept, up to 30 days after its last activity, the deal holds that number too, so coPayer can see a deal's steps when helping with it. Once the deal is deleted, the record can no longer be linked to you. We use it to run, fix and improve coPayer, and keep it for two years.

If you choose to keep a deal in a coPayer account, we keep your first name and the first letter of your last name and, for each deal you keep, the item, the amount, the other person's first name, the date and the reference, until you delete your account. For each sale you keep, we also keep its main photo, and a scrambled code made from the buyer's name as their bank holds it, never the name itself, so someone who buys from you twice is counted once. You sign in with a passkey. We hold only its public half, which cannot be used to sign in, and never a password. If you add a backup email, we keep it to send you sign in codes if you lose your phone, and use it for nothing else. Emails are sent for us by Resend. You can delete your account and everything in it at any time from copayer.nz/me.

Keeping it safe

Every connection to coPayer is encrypted. The keys that connect us to Akahu stay on our servers and never reach your phone. We keep as little as we can, for as short a time as we can.

Your rights

You can ask us for a copy of the information we hold about you, or ask us to correct it or delete it, by emailing our privacy officer at privacy@copayer.nz. We delete it unless the law requires us to keep it. If you are not happy with how we handle your information, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Delete your account

You can delete your coPayer account and everything in it at any time. Sign in at copayer.nz/me and choose Delete my account. If you cannot sign in, email privacy@copayer.nz with your first name and the reference of a deal you kept, and we will delete it for you. A deal that is not kept in an account deletes itself 30 days after its last activity. The anonymous totals and the activity record described above hold no names and stay. A record of a fee still owed stays until it is paid.

Age

coPayer is for people aged 18 and over.

Changes

If we change how we handle your information, we will update this page and the date at the top.