Privacy Policy

1. Who We Are

MyBizPlan (Pty) Ltd ("MyBizPlan™", "we", "us", or "our") is the responsible party for the personal information we collect and process. We are registered in South Africa and operate the MyBizPlan™ platform at mybizplan.co.za.

Information Officer contact: privacy@mybizplan.co.za

2. Information We Collect

We collect the following categories of personal information:

3. How We Use Your Information

We process your personal information for the following purposes:

• Providing and improving the MyBizPlan™ platform and services
• Processing payments and managing your subscription
• Sending transactional emails (account verification, password reset, invoices)
• Sending service updates and product announcements (you may opt out)
• Generating AI-powered business plans and financial analysis using your business data
• Complying with legal obligations under South African law
• Detecting and preventing fraud and security incidents
• Analytics to understand how the Platform is used and improve our services

4. Legal Basis for Processing

We process your personal information on the following legal grounds:

• Contract performance: Processing necessary to provide the services you have subscribed to
• Legitimate interests: Improving our platform, preventing fraud, and ensuring security
• Legal obligation: Compliance with POPIA, tax laws, and other applicable regulations
• Consent: Marketing communications and optional analytics (you may withdraw consent at any time)

5. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Supabase: Database and authentication infrastructure (hosted in EU/US with appropriate safeguards)
• OpenAI: AI processing for business plan generation (data is not used to train OpenAI models)
• PayFast: Payment processing for South African transactions
• SendGrid: Transactional email delivery
• Google Analytics: Anonymised usage analytics
• Sentry: Error monitoring and debugging
• Legal authorities: When required by South African law or court order

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. After account deletion, we retain certain data for up to 7 years to comply with South African tax and financial record-keeping requirements. You may request deletion of your data subject to these legal retention obligations.

7. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Objection: Object to the processing of your personal information
• Portability: Receive your data in a portable format via our Download My Data feature
• Withdraw consent: Withdraw consent for marketing communications at any time

To exercise these rights, contact our Information Officer at privacy@mybizplan.co.za. We will respond within 30 days.

8. Cookies

We use cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage. Essential cookies are required for the Platform to function. You may control non-essential cookies through your browser settings. For more information, see our Cookie Policy.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security in our database, and regular security audits. However, no system is completely secure. We will notify you of any data breaches affecting your personal information as required by POPIA.

10. International Transfers

Some of our service providers (including Supabase and OpenAI) process data outside South Africa. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable.

11. Children's Privacy

The Platform is not intended for use by persons under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately.

12. Complaints

If you believe we have not handled your personal information in accordance with POPIA, you have the right to lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg/. We encourage you to contact us first so we can resolve your concern directly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

14. Contact Us