Your documents are yours
Used for your application, and nothing else.
- Documents are used only to run the application you uploaded them for.
- They are never used to train AI models, ours or anyone else's.
- They are never shared with the City, other users or anyone outside the providers listed below.
- They stay until you ask us to delete them, so you can come back to a project. Email [email protected] and we delete them.
Who can see a project
Only the account that created it.
Every project belongs to the account that made it. Any other account that asks for it gets "not found", and your dashboard lists only your own projects.
Findings you haven't unlocked are never sent to your browser, and the Word export is refused until the project is unlocked, so nothing is hidden only by the page layout.
Signing in
No passwords to leak.
You sign in with a passkey (Face ID, a fingerprint or your phone) or with Google. We store only the public part of a passkey; the private key never leaves your device.
Your session is a signed cookie that scripts on the page cannot read, sent only over HTTPS. "Sign out everywhere" ends every session on every device at once.
Other people's information
Owners, neighbours and deed holders in your documents.
Under the Protection of Personal Information Act (POPIA), you are the responsible party for the people named in your documents, and we process their information on your behalf, only to run the service for you.
The scan also flags personal information, such as ID numbers, phone numbers and vehicle registration papers, in documents the City will publish when it advertises the application, so you can remove it before lodging.
Who else handles it
The providers that make the service work, and nobody else.
Cloudflare
Hosts the application, the database and your uploaded files, and routes every AI request through its AI Gateway. Stored data is encrypted at rest.
AI model providers
Their models read the documents and write the drafts. Requests reach them through Cloudflare. They do not train their models on what they are sent.
Yoco
Our payment provider. It takes card payments on its own page. Card numbers never reach us.
Google
Only if you choose to sign in with Google: your name, email address and account id, used only to sign you in.
Some of these providers' servers are outside South Africa.
Questions or a request
Access, correction or deletion.
Email [email protected] to ask for a copy of your information, or to correct or delete it. Our information officer can be reached at the same address. The full details are in the privacy notice and the terms.