Privacy Policy

Information We Collect

We may collect the following categories of personal information:

• Identity information: Your name and email address when you register
• Payment information: Billing details processed securely via our third-party payment providers (we do not store full card numbers)
• Usage data: Pages visited, features used, time spent on the platform, and browser/device information
• Content data: Website content, images, and business information you upload to create your sites
• Communication data: Messages you send to our support team

How We Use Your Information

We use your personal information to:

• Create and manage your account
• Provide, operate, and improve the SiteFlowAI Service
• Process payments and manage your subscription
• Send you important service-related communications (account updates, billing notices)
• Respond to your support queries and feedback
• Analyse usage patterns to improve our platform
• Comply with legal and regulatory obligations

We will only send you marketing communications if you have opted in to receive them. You may unsubscribe at any time using the link in any marketing email we send.

Sharing of Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• Payment processors: To securely process your transactions (e.g. Yoco, Stripe)
• Hosting and infrastructure providers: To store and serve your websites and data
• Analytics tools: To understand how users interact with our platform (anonymised where possible)
• Legal compliance: If required by law, court order, or government authority

All third-party service providers we use are contractually required to handle your data securely and in accordance with applicable privacy laws.

Data Security

We implement industry-standard technical and organisational safeguards to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication and access controls
• Regular security reviews

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by POPIA.

Cookies

We use cookies and similar tracking technologies to improve your experience on the platform. Cookies help us:

• Keep you logged in to your account
• Remember your preferences
• Understand how you use the platform so we can improve it
• Measure the effectiveness of our marketing

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

Your Rights

Under the Protection of Personal Information Act (POPIA) and applicable law, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information, subject to legal retention requirements
• Objection: Object to the processing of your information in certain circumstances
• Portability: Request your data in a portable format where technically feasible

To exercise any of these rights, please contact us at privacy@siteflowai.co.za. We will respond within 30 days of receiving your request.

Data Retention

We retain your personal information only for as long as is necessary to provide you with the Service and to comply with our legal obligations. Specifically:

• Account data is retained while your account is active and for up to 12 months after closure
• Billing and transaction records are retained for 5 years as required by South African tax and financial regulations
• Website content you created is deleted within 90 days of account closure unless you request earlier deletion

Children's Privacy

SiteFlowAI is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will delete it promptly. If you believe a minor has submitted information to us, please contact us immediately.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes by email or by posting a prominent notice on the platform. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact our Information Officer:

You also have the right to lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg.