← back to ruru.land
Legal
Privacy, terms & how we handle your data.
Last updated: 18 June 2026
ruru.land is operated by BigSmallFarm Limited ("ruru", "we", "us", "our"), a New Zealand company at 63 St Marys Road, St Mary's Bay, Auckland 1011. We've written this in plain English because you deserve to understand it. Everything here is one document - Privacy, Terms of Use, Security, AI & Data, and Data Residency. Questions? Email privacy@ruru.land.
Privacy Policy
This explains what we collect, how we use it, who we share it with, and your rights.
What we collect - information you give us
- Your name and email address.
- Your property's location - a street address, or at least a postcode or region.
- Your answers to the 60-second check and any later questions about your land and your goals.
- Captures you add about your land - photos, voice notes, drone imagery, soil-test results and weather readings.
- Farm and property records and documents you upload or share with us.
- Messages you send us - support requests, feedback and questions.
What we collect automatically
- Usage data - which features you use and how you move through the site and app.
- Technical data - browser, device, IP address and general location (region level).
- Session data - when you sign in and out, and how long sessions last.
Information from third parties and the public record
- To build your land read, we draw on public datasets - for example LINZ, S-map (Manaaki Whenua), NIWA and MPI - keyed to your property. We read these; we don't hand them your personal details.
- If you sign in through a third-party provider (such as Google), we receive your name and email from them.
What we do not collect
- Payment card numbers or bank details - if and when we charge for a paid plan, these are handled entirely by our payment processor. We never see or store your card details.
- Biometric data of any kind.
- Data from children - ruru is intended for adults (18+).
How we use your information
- To provide the service - read your land, build your plan, match funding and specialists, and power the in-app companion.
- For AI features - some of your land and plan content is sent to our AI provider to generate a response. See AI & Data below.
- To communicate with you - when you tick the consent box on the 60-second check, you're agreeing to us emailing you about your land report and storing the details you've given. You can unsubscribe at any time, or email privacy@ruru.land. We don't send marketing to people who haven't asked for it.
- To improve the product - using aggregated, anonymised usage patterns. We don't mine the content of your individual plan to improve the product.
Who we share it with
We do not sell your data, and we don't share it with advertisers. We use a small set of third-party processors, each bound by terms that restrict how they may use what we send them:
| Processor | Purpose | Location |
| Anthropic | AI processing for the read, plan and companion | United States |
| Netlify, Inc. | Application hosting | United States |
| Stripe (planned) | Payment processing - only once paid plans launch | United States |
How long we keep it
- Account and plan data - while your account is active, and for around 90 days after deletion in case it was accidental.
- Land captures and records - while your account is active; deleted within about 30 days of a deletion request.
- Enquiry and 60-second-check leads - around 24 months if you don't go ahead, then deleted or anonymised.
- Aggregated, anonymised analytics - kept indefinitely.
- Financial records (if you've paid) - 7 years, as required by New Zealand law.
Your rights
Wherever you are, you can ask to access, correct, delete or export your personal data, object to certain processing, or withdraw consent. Email privacy@ruru.land and we'll respond within about 20 working days. If you're in New Zealand and unhappy with our response, you can complain to the Office of the Privacy Commissioner; in the EU or UK, to your local data protection authority.
Cookies
We use essential cookies for sign-in and sessions, and Google Analytics to understand how the site is used. We don't use advertising cookies or tracking pixels. You can block or clear cookies in your browser, and opt out of Google Analytics using Google's opt-out tools - the site still works.
Disclosed because the current site loads Google Analytics. If your live analytics setup changes, update this section to match.
Children
ruru is not intended for anyone under 18, and we don't knowingly collect their information.
Changes
If we make material changes we'll post the new version here and update the date above, and email you where appropriate.
Terms of Use
By using ruru.land you agree to these terms. If you don't agree, please don't use the service.
1. The service
ruru helps New Zealand landowners find the best use for their land, turn it into a fundable plan, line up money and specialists, and deliver it through our app and companion. The 60-second check is free; some features may be offered on paid plans in future.
2. Your account and accuracy
You're responsible for keeping your login secure, for activity under your account, and for making sure the information you give us is accurate. You must be 18 or older.
3. Acceptable use
Use ruru only for lawful purposes. Don't upload unlawful or infringing content, attempt to gain unauthorised access, transmit malware or spam, scrape the platform by automated means without our written permission, or try to reverse-engineer it.
4. Your content and captures
You own the content and captures you create or upload - your photos, records, soil tests, answers and plans remain yours. You grant us a limited licence to store, process and display them for the sole purpose of providing the service to you. You're responsible for ensuring you have the right to share anything you upload.
5. Not professional advice
This is important. ruru's land reads, best-use recommendations, plans, market and weather forecasts, funding matches and any figures are decision-support and general information only. They are not financial, investment, legal, tax, valuation or agronomic advice, and they are not a guarantee that any bank, grant or fund will approve you, or that any yield, price or outcome will be achieved. Forecasts are estimates and can be wrong. Always get your own independent professional advice before making decisions - the decisions, and their consequences, are yours.
6. AI-generated content
ruru uses AI to help produce reads, plans and suggestions. Review everything before you rely on it. We don't warrant that AI-generated content is accurate, complete or fit for a particular purpose.
7. Funders and specialists are independent
ruru does not lend money. Banks, grant bodies, councils, consultants and other specialists we help you reach are independent third parties; we're not responsible for their decisions, advice or services, and we take no product position or commission in what we recommend.
8. Payments
ruru is currently free and paid plans aren't live yet. When they launch, they'll be billed through Stripe on the terms shown at sign-up, and refund and cancellation terms will be set out at that point.
BigSmallFarm to confirm refund and cancellation terms before charging.
9. Availability
We aim for a reliable service but don't guarantee 100% uptime, and we're not liable for losses from interruptions.
10. Termination
We may suspend or close accounts that breach these terms or are used fraudulently. You can close your account at any time by contacting emailteamruru@gmail.com; see the Privacy Policy for what happens to your data.
11. Liability
To the maximum extent permitted by law, ruru is provided "as is", and we're not liable for indirect or consequential loss. Nothing here limits rights you have under the New Zealand Consumer Guarantees Act or liability that can't be excluded by law.
12. Governing law
These terms are governed by New Zealand law, and the New Zealand courts have jurisdiction.
Security
We take the security of your data seriously, and we believe in honest disclosure - what we do, and what we're still building.
Encryption
Data is encrypted in transit using TLS (HTTPS), with no plain-HTTP fallback, and encrypted at rest by our hosting provider using AES-256.
Authentication and access
Access to your account is protected by authentication and server-side sessions. Within ruru, access to your plan and records is governed by role-based permissions.
Staff access
ruru staff do not browse the content of your plan or land records through any admin interface. If we ever need to access your content for a genuine support reason, it requires your consent and is logged with a timestamp.
Your captures and offline use
Captures and plan data are stored on your device and synced to your account, so the companion keeps working out of coverage. They remain yours.
Sub-processors
| Service | Role |
| Anthropic | AI processing (no training on API data) |
| Netlify, Inc. | Hosting (United States) |
| Stripe (planned) | Payment processing - once paid plans launch |
Reporting a vulnerability
Found a security issue? Please report it responsibly to security@ruru.land. We won't pursue legal action against good-faith researchers.
If something goes wrong
In the event of a data breach affecting your personal data, we'll notify affected users and, where the breach is notifiable, the Office of the Privacy Commissioner, without undue delay - and explain what happened and what we've done about it.
AI & Data
ruru uses AI to power your land read, plan and the in-app companion. Here's exactly how that works with your data.
Which AI we use
ruru uses Anthropic's Claude, accessed through the Claude API.
Your content is not used to train AI models
Data sent through the Claude API is not used to train or improve Anthropic's models - this is a contractual commitment in Anthropic's API terms. Anthropic processes the data to return a response, subject to a standard short safety-retention window, and no longer.
What is sent to the AI
When an AI feature runs, we send the land and plan content needed to generate the response - for example your answers and property details. We minimise what's sent and avoid sending your name, email or other identifiers where we don't need to.
What the AI does and doesn't do
The AI assists - it drafts reads, structures plans and answers questions. It doesn't make decisions for you, doesn't publish or share anything on its own, and doesn't learn from your data to answer someone else.
Your control
AI-generated content is there for you to review, edit or reject. The plan remains yours throughout.
Data Residency
Where your data lives, and what that means depending on where you are.
Where it's stored
ruru's application is hosted by Netlify, Inc. in the United States, and AI processing happens in the United States. When paid plans launch, payment data will be handled by Stripe in line with Stripe's own residency policies.
New Zealand and Australia
NZ and Australian users are covered by the NZ Privacy Act 2020 and the Australian Privacy Act 1988. Cross-border transfers to the US are permitted under both, provided adequate protections are in place, which we maintain with our processors.
EU and UK
EU and UK users are covered by GDPR. We rely on Standard Contractual Clauses with our US-based processors as the legal basis for transfers. For a Data Processing Agreement, email privacy@ruru.land.
Future residency
Local NZ data residency is on our roadmap. If it's a hard requirement for you, get in touch.