Privacy Policy

Effective Date: 12 November 2025

Seekefy (Pty) Ltd ("we", "us", or "our") operates the ExplainMyRights service. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service.

1. Information We Collect

ExplainMyRights collects the following types of information:

• User Queries: Legal questions and information you submit to our AI service
• Audit Information: Unique audit IDs generated for quality control, verification, and support purposes
• Usage Data: Timestamps, interaction patterns, and service usage statistics (anonymized where possible)
• WhatsApp Data: When using our WhatsApp integration, we collect phone numbers and message content as required by the WhatsApp Business API
• Technical Data: IP addresses, browser type, device information, and operating system
• Communication Data: Information you provide when contacting our support team

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide accurate legal information and guidance through our AI system
• To improve our AI models, verification systems, and service quality
• To provide customer support, troubleshooting, and respond to inquiries
• To detect and prevent AI hallucinations and inaccuracies in responses
• To maintain comprehensive audit trails for accountability and quality assurance
• To comply with legal obligations and regulatory requirements
• To analyze service usage and improve user experience

3. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data transmissions are encrypted using TLS/SSL protocols
• Secure Storage: Data is stored securely on Amazon Web Services (AWS) infrastructure with enterprise-grade security
• Access Control: Access to personal data is restricted to authorized personnel only
• Regular Audits: We conduct regular security audits and vulnerability assessments
• No Third-Party Sharing: We do not sell or share your personal information with third parties for marketing purposes

4. Data Retention

We retain different types of data for varying periods:

• Query Logs: Retained for 12 months for service improvement and quality assurance
• Audit IDs and Trails: Retained for 24 months for accountability and verification purposes
• Support Communications: Retained for 36 months to maintain service quality records
• Usage Analytics: Anonymized data may be retained indefinitely for statistical purposes

You may request deletion of your personal data by contacting us at the email address below. Please note that some data may need to be retained to comply with legal obligations.

5. Third-Party Services

Our service integrates with the following third-party services, each governed by their own privacy policies:

• OpenAI: AI language model processing (subject to OpenAI's privacy policy)
• Google Custom Search API: Legal database searches via SAFLII and other sources
• Amazon Web Services (AWS): Cloud hosting, storage, and infrastructure services
• Twilio/WhatsApp Business API: Messaging integration for WhatsApp communications

We recommend reviewing the privacy policies of these third-party services to understand how they handle your data.

6. Your Rights Under POPIA

Under South Africa's Protection of Personal Information Act (POPIA), you have the following rights:

• Right to Access: Request copies of your personal data we hold
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Deletion: Request deletion of your personal data (subject to legal requirements)
• Right to Object: Object to certain types of data processing
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Complain: Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact us using the details provided below.

7. Cookies and Tracking Technologies

We use minimal cookies and tracking technologies for:

• Session management and user authentication
• Security purposes and fraud prevention
• Anonymous usage analytics to improve our service

You can configure your browser to refuse cookies, though this may affect the functionality of our service.

8. Children's Privacy

ExplainMyRights is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

9. International Data Transfers

Your data may be processed and stored on servers located outside of South Africa, including in the European Union and the United States. We ensure appropriate safeguards are in place for such transfers in compliance with POPIA.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised "Effective Date." We encourage you to review this policy periodically.

11. Legal Basis for Processing

We process your personal information based on:

• Consent: When you use our service, you consent to data processing
• Legitimate Interests: To improve our service and prevent fraud
• Legal Obligations: To comply with applicable laws and regulations