Legal

Privacy Policy

Last updated: 22 June 2026 · Sopha Buso Full AI Pty Ltd

1. Who We Are

Sopha Buso Full AI Pty Ltd (Registration No: 2024/093551/07), trading as Full AI, is a technology company registered in South Africa. We are the responsible party for personal information collected through this website and our software products. Contact: info@sobfullai.com | +27 670 513 144 | Soweto, Gauteng, South Africa

2. Information We Collect

We collect the following categories of personal information: → Contact information: name, email address, phone number, company name → Usage data: pages visited, features used, device type, browser → Lead data: solution requirements submitted via our designer tool → Account data: email, name, subscription status (if you create an account) → Biometric data: face captures and GPS coordinates processed by Nyaniso (deleted within 24 hours of session close — never stored permanently) → Communication data: messages sent via contact forms or WhatsApp

3. How We Use Your Information

We use your personal information to: → Respond to enquiries and provide our services → Process solution design requests → Manage subscriptions and billing → Send service-related communications → Improve our platform and user experience → Comply with legal obligations → Detect and prevent fraud We do not sell your personal information to third parties.

4. Legal Basis (POPIA)

We process your personal information under the Protection of Personal Information Act (POPIA) on the following grounds: → Consent: where you have given explicit consent (e.g. contact forms, biometric verification) → Contractual necessity: to fulfil our service obligations → Legitimate interest: to improve our services and prevent fraud → Legal obligation: where required by South African law Biometric data is special personal information under POPIA Section 26 and is only processed with explicit consent.

5. Data Retention

We retain personal information for the following periods: → Contact/lead data: 3 years from last interaction → Account data: duration of account plus 1 year after closure → Biometric data (Nyaniso): deleted within 24 hours of session close → GPS/location data: deleted within 24 hours of session close → Audit logs: 5 years (legal requirement) → Billing records: 5 years (SARS requirement) You may request deletion of your data at any time (see Section 8).

6. Data Sharing

We share personal information only with: → Service providers: Supabase (database), Resend (email), Vercel (hosting) — all bound by data processing agreements → Payment processors: where applicable, for billing → Legal authorities: where required by South African law All third-party processors are required to maintain appropriate security measures and may not use your data for their own purposes.

7. Security

We implement appropriate technical and organisational measures to protect your personal information including: → Encryption in transit (HTTPS/TLS) → Encryption at rest (database-level) → Access controls and authentication → Regular security assessments → Biometric data processed in memory only — never written to permanent storage In the event of a data breach affecting your rights, we will notify you and the Information Regulator within 72 hours as required by POPIA Section 22.

8. Your Rights (POPIA)

Under POPIA, you have the right to: → Access: request a copy of your personal information → Correction: request correction of inaccurate information → Deletion: request deletion of your personal information → Objection: object to processing of your personal information → Complaint: lodge a complaint with the Information Regulator To exercise any of these rights, contact us at info@sobfullai.com. We will respond within 30 days. Information Regulator (South Africa): inforegulator.org.za

9. Cookies

Our website uses essential cookies for functionality and analytics cookies to understand usage. You may disable cookies in your browser settings, though this may affect functionality. We do not use cookies for advertising or tracking across third-party websites.

10. Children

Our services are not directed at children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately at info@sobfullai.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related enquiries, data subject requests, or complaints: Sopha Buso Full AI Pty Ltd Soweto, Gauteng, South Africa Reg No: 2024/093551/07 Email: info@sobfullai.com Phone: +27 670 513 144 WhatsApp: wa.me/27670513144