Legal

Privacy notice

Last updated 13 October 2026

This notice explains what personal information splumapro ("we"), the operator of Spluma Pro, processes and why, as required by the Protection of Personal Information Act (POPIA).

What we collect

  • Your account: your name, and your email address if you sign in with Google. We never store passwords.
  • Passkeys: only the public part of the key. The private key stays on your device.
  • Projects: what you enter on the form (applicant, address, erf, zoning, proposal) and the documents you upload.
  • What the service produces from them: the facts file, findings, title deed analysis, drafts and reviews.
  • Payments: the email you give at checkout, the amount and Yoco's payment reference. Card details are handled by Yoco and never reach us.
  • Technical data: IP address, used briefly for rate limiting and sign-in security.

Why we use it

  • To run the service you asked for: checking your submission and drafting the report.
  • To take payment and send your receipt.
  • To keep the service secure and stop abuse.

We don't sell your information, and your documents are never used to train AI models.

Other people's information in your documents

Submissions can contain other people's details: owners, neighbours, ID numbers, title deed holders. For those you are the responsible party and we process them on your behalf, only to run the service for you. The scan flags personal information that the City would publish when it advertises the application, so you can remove it first.

Who else handles it

  • Cloudflare, which hosts the app, the database and your uploaded files (servers may be outside South Africa).
  • Our AI model providers, which read the documents and write the drafts, reached through Cloudflare (servers may be outside South Africa). They don't train their models on what they're sent.
  • Yoco, our payment provider, which processes card payments.
  • Google, if you choose to sign in with Google. We ask only for your name, email address and account id, use them only to sign you in, and follow the Google API Services User Data Policy, including its Limited Use requirements.

How long we keep it

Your account, projects and documents stay until you ask us to delete them, so you can come back to a project. Payment records are kept as long as tax law requires.

Your rights

You can ask us for a copy of your information, or to correct or delete it, or object to how we use it, by emailing [email protected]. Our information officer can be reached at the same address. You may complain to the Information Regulator (inforegulator.org.za).