Privacy Policy
Effective date: 5 June 2025 | Version 1.0
1. Who We Are
PS23 PA is a product of PS23 Ventures (Pty) Ltd, registration number 2024/309040/07, a private company incorporated in the Republic of South Africa ("PS23 Ventures", "we", "us", or "our").
We are the Responsible Partyas defined in the Protection of Personal Information Act 4 of 2013 ("POPIA") in respect of all personal information collected through the PS23 PA platform ("the Service").
Contact: ps23support@gmail.com
2. Information We Collect
We collect the following categories of personal information:
| Information | Purpose |
|---|---|
| Full name | Account creation |
| Business name | Account creation |
| Email address | Account creation and communication |
| Password (hashed) | Authentication — never stored in plain text |
| Business type | Optional — personalise generated content |
| Usage data | Documents generated, credits used, feature interactions |
| Billing information | Plan subscriptions and credit pack purchases via Paystack |
| Device and browser data | Security, analytics, and service improvement |
| IP address | Security and fraud prevention |
3. How We Use Your Information
- To create and manage your account.
- To generate AI-powered documents and content on your behalf.
- To process payments and manage your subscription or credit balance.
- To send transactional emails (account confirmation, billing receipts, password reset).
- To enforce our Terms & Conditions and prevent fraud or abuse.
- To improve the Service through aggregated, anonymised analytics.
- To comply with applicable South African law.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4. AI Processing — Anthropic Disclosure
PS23 PA uses the Anthropic APIto generate documents and content. When you submit a generation request, the content of that request (your instructions and any context you provide) is transmitted to Anthropic's servers, which are located in the United States of America.
This constitutes a cross-border transfer of personal information under POPIA. By using the Service, you expressly consent to this transfer on the basis that:
- The transfer is necessary to provide the core functionality of the Service you have requested.
- Anthropic processes API data under its API Usage Policy, which prohibits the use of API inputs and outputs to train its models without explicit opt-in consent. Your prompts and outputs are not used to train Anthropic's models by default.
We recommend you avoid including sensitive personal information (e.g. ID numbers, financial account details) in your generation requests.
5. Payments — Paystack
Payment processing is handled by Paystack, a PCI-DSS-compliant payment processor. PS23 Ventures does not store your card details. Paystack's privacy policy governs the processing of payment information.
6. Data Storage and Security
Your account data is stored in Supabase (PostgreSQL), hosted on infrastructure in the European Union. We apply the following safeguards:
- Passwords are hashed using industry-standard algorithms.
- All data in transit is encrypted using TLS 1.2 or higher.
- Row-level security policies restrict database access to the authenticated user only.
- Access to production systems is restricted to authorised personnel.
No security measure is 100% infallible. If we become aware of a data breach that affects your rights and freedoms, we will notify you and the Information Regulator as required by POPIA.
7. Data Retention
We retain your personal information as follows:
| Category | Retention period |
|---|---|
| Account data (profile, name, email) | Duration of account + 3 years after closure |
| Generated documents | Until you delete them or close your account |
| Credit transaction records | 5 years (tax and accounting obligations) |
| Usage logs | 12 months |
| Server and access logs | 90 days |
After the applicable retention period, data is deleted or anonymised.
8. Your Rights Under POPIA
As a data subject you have the right to:
- Access — request a copy of the personal information we hold about you.
- Correction — request that inaccurate or incomplete information be corrected.
- Deletion — request deletion of your personal information, subject to our legal retention obligations.
- Objection — object to the processing of your personal information on grounds relating to your particular situation.
- Complaint — lodge a complaint with the Information Regulator of South Africa at inforeg.org.za if you believe your rights have been violated.
To exercise any of these rights, email us at ps23support@gmail.comwith the subject line "POPIA Data Request". We will respond within 30 days.
9. Cookies
We use essential cookies for authentication and session management. Please refer to our Cookie Policy for full details.
10. Children
The Service is not directed at persons under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has registered, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice within the Service. Your continued use of the Service after the effective date of an updated policy constitutes your acceptance of the changes.
12. Contact Us
PS23 Ventures (Pty) Ltd
Registration: 2024/309040/07
Email: ps23support@gmail.com
Website: ps23pa.app