Privacy Notice

• Account details (name, work email, password hash, company name and registration details) — to create and secure your account, and to perform our contract with you.
• Company and compliance data (B-BBEE level, tax and CSD status, uploaded documents) — to run compliance checks and pre-fill tender responses, at your instruction.
• Tender activity (saved tenders, proposals, AI prompts and outputs) — to provide the service and keep your workspace available to you.
• Usage and technical data (pages viewed, AI actions, device and browser information, IP address, timestamps) — for security, fraud and abuse prevention, service reliability and product improvement, based on our legitimate interests.
• Support and marketing (messages you send us, feedback, email preferences) — to answer you and, where you have consented, to send product updates.

Payment card details are collected and processed by Paystack, not by us. We never see or store your full card number.

We rely on performance of our contract with you (providing the platform), our legitimate interests (security, fraud prevention, improving the product), your consent (marketing emails and non-essential cookies), and compliance with legal obligations (tax and accounting records).

• Payment processor — Paystack, for secure card payments, subscription billing and payment confirmation.
• Service providers — cloud hosting and database, transactional email delivery, and AI model providers that process your prompts to generate outputs. Prompts are not used to train third-party models.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where we are required to disclose by law.

We do not sell your personal information.

Our hosting, email and AI providers may process data outside South Africa, including in the EU and the United States. Where data leaves South Africa or the EEA, we rely on providers who offer an adequate level of protection through appropriate safeguards such as standard contractual clauses.

We keep account and workspace data for as long as your account is active. After closure, you may export your data for 30 days, after which we delete or anonymise it, except where we must retain records for legal, tax or dispute purposes. Security and usage logs are kept for up to 12 months.

Under POPIA and, where applicable, the GDPR, you can request access to your personal information, ask us to correct or delete it, object to or restrict processing, request a portable copy, and withdraw consent at any time. Email info@digndecker.co.za and we will respond within one month.

You can also lodge a complaint with the South African Information Regulator, or with your local supervisory authority if you are in the UK or EEA.

We apply appropriate technical and organisational measures, including encryption in transit and at rest, row-level access controls so tenants only reach their own data, private document storage, strict security headers and rate limiting on AI endpoints. No system is perfectly secure, so please use a strong, unique password.

We use essential cookies for sign-in and security, and — only with your consent — analytics cookies to understand how the product is used. You can change your choice at any time from the cookie preferences link in the banner or footer.

Dig n Decker (Pty) Ltd, trading as DigBid AI — info@digndecker.co.za.