Who we are

The Hui System is operated by Pehiāweri B1B Ahu Whenua Trust to manage hui information and meeting documents for the trust.

Information we process

The system may process:

• A trustee’s name, email address, and sign-in identifier for authentication and access control.
• Hui details entered by authorized trustees, including dates, locations, descriptions, and links.
• Meeting documents uploaded by authorized trustees, including file names, file content, type, size, and upload metadata.
• Limited technical and security logs needed to operate, troubleshoot, and protect the service.

How we use Google data

The system uses the Google Drive drive.file permission to create and manage only the Drive files and folders created for this application. It does not request access to every file in the connected Google Drive account.

Google account and Drive data is used only to authenticate approved trustees and provide the meeting-document features requested by the trust. It is not used for advertising or sold to third parties.

The use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

Storage and sharing

Private meeting minutes and notes are stored in the trust’s connected Google Drive and are delivered through authenticated application routes. Trustee identity and hui data is processed using Supabase, and the application is hosted through Cloudflare. These providers process information only to supply their respective services.

Information is shared outside the trust only when required by law, necessary to protect the service or its users, or directed by an authorized trust representative.

Retention and deletion

Information is retained while needed for trust administration, record keeping, security, or legal obligations. Authorized trustees can remove hui records through the portal. Drive access can be revoked from the connected Google Account’s third-party connections page. Revoking access stops future application access but does not automatically delete files already stored in Drive.

Security

Administrative features require an approved trustee account. Google Drive credentials are kept on the server and are not exposed to trustees’ browsers. No internet service can guarantee absolute security, but reasonable controls are used to restrict access and protect stored information.

Contact

For privacy questions, access requests, or deletion requests, contact pehiawerib1b@gmail.com .

Changes to this policy

This policy may be updated when the service or its legal obligations change. The effective date above will be updated when material changes are published.