Privacy Policy

Sopha Buso Full AI Pty Ltd (Registration No: 2024/093551/07), trading as Full AI, is a technology company registered in South Africa. We are the responsible party for personal information collected through this website and our software products. Contact: info@sobfullai.com | +27 670 513 144 | Soweto, Gauteng, South Africa

We collect the following categories of personal information: → Contact information: name, email address, phone number, company name → Usage data: pages visited, features used, device type, browser → Lead data: solution requirements submitted via our designer tool → Account data: email, name, subscription status (if you create an account) → Biometric data: none is collected at present. Biometric verification (Nyaniso) is not active. Before it starts, you will receive a separate notice and be asked for your consent → Communication data: messages sent via contact forms or WhatsApp

We use your personal information to: → Respond to enquiries and provide our services → Process solution design requests → Manage subscriptions and billing → Send service-related communications → Improve our platform and user experience → Comply with legal obligations → Detect and prevent fraud We do not sell your personal information to third parties.

We process your personal information under the Protection of Personal Information Act (POPIA) on the following grounds: → Consent: where you have given explicit consent (e.g. contact forms) → Contractual necessity: to fulfil our service obligations → Legitimate interest: to improve our services and prevent fraud → Legal obligation: where required by South African law Biometric data is special personal information under POPIA Section 26 and is only processed with explicit consent.

We retain personal information for the following periods: → Contact/lead data: 3 years from last interaction → Account data: duration of account plus 1 year after closure → Biometric and GPS data (Nyaniso): not collected at present. The retention period will be stated in the separate notice that comes before any biometric verification → Audit logs: 5 years (legal requirement) → Billing records: 5 years (SARS requirement) You may request deletion of your data at any time (see Section 8).

We share personal information only with: → Service providers: Supabase (database and sign-in, Ireland), Resend (email), Vercel (hosting), Microsoft Azure (Zone 7 identity, South Africa North) — all bound by data processing agreements → Payment processors: where applicable, for billing → Legal authorities: where required by South African law → Meta (Facebook and Instagram), based outside South Africa: · Facebook Login: your name, email address and profile photo, only if you choose to sign in with Facebook · Meta Pixel: page events, and automatic matching that may send a hashed email or phone number, only if you accept marketing cookies · From 12 November 2026, Meta may also measure ad conversions on your own device rather than only on its servers. This uses the Meta Pixel you have accepted, and only happens after you accept marketing cookies We never send stokvel IDs, balances, contributions or member lists to Meta. All third-party processors are required to maintain appropriate security measures and may not use your data for their own purposes.

We implement appropriate technical and organisational measures to protect your personal information including: → Encryption in transit (HTTPS/TLS) → Encryption at rest (database-level) → Access controls and authentication → Regular security assessments → Biometric data: none is collected at present. Any future processing will follow its own notice In the event of a data breach affecting your rights, we will notify you and the Information Regulator within 72 hours as required by POPIA Section 22.

Under POPIA, you have the right to: → Access: request a copy of your personal information → Correction: request correction of inaccurate information → Deletion: request deletion of your personal information → Objection: object to processing of your personal information → Complaint: lodge a complaint with the Information Regulator To exercise any of these rights, contact us at privacy@sobfullai.com. We will respond within 30 days. Facebook data: you can request deletion at /data-deletion, or remove the app from your Facebook settings, which sends us a deletion request. We review each request and confirm it within 30 days. You can check its status at the link we send you. Information Regulator (South Africa): inforegulator.org.za

Our website uses essential cookies for functionality, and analytics cookies to understand usage. You may disable cookies in your browser settings, though this may affect functionality. Marketing cookies are Meta marketing cookies (for example _fbp), set only if you click Accept in the cookie banner. You can withdraw your consent at any time by clearing this site's data in your browser; the banner will appear again.

Our services are not directed at children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately at privacy@sobfullai.com.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

For privacy-related enquiries, data subject requests, or complaints: Sopha Buso Full AI Pty Ltd Soweto, Gauteng, South Africa Reg No: 2024/093551/07 Privacy requests: privacy@sobfullai.com Email: info@sobfullai.com Phone: +27 670 513 144 WhatsApp: wa.me/27670513144