Privacy Policy

1. Who We Are

AutoPilot Audit is operated by SineThamsanqa Business Solutions (“we”, “us”, “the Responsible Party” under POPIA), based in Meyerton, Gauteng, South Africa. For any privacy-related query, contact us using the details in section 10.

2. Information We Collect

• Account information: email address, password (stored as a hash, never in plain text), and any profile details you choose to add — name, username, phone number, company, and job title.
• Assessment information: the business details, process descriptions, staffing and cost figures, pain points, and goals you enter into the assessment, plus the resulting reports.
• Technical information: a session cookie used to keep you logged in. We do not use third-party advertising or tracking cookies.

3. Why We Process Your Information

In line with POPIA’s lawful processing conditions, we process your information to:

• Create and secure your account, and authenticate you when you log in;
• Generate your business automation assessment and report (the core service you’ve asked for);
• Enforce plan quotas and process plan upgrade/downgrade requests you submit;
• Communicate with you about your account or requests;
• Maintain the security, integrity, and reliability of the Platform.

This processing is necessary to perform our contract with you (providing the service you signed up for) or is based on your consent, given when you submit your assessment answers.

4. Sharing With Third-Party Processors

We use the following operators/processors to run the Platform. Your assessment data is shared with them only to the extent needed to provide the service:

• Neon (database hosting): stores your account and assessment data in a PostgreSQL database.
• Groq (AI processing): receives the structured details of your assessment (not your raw login credentials) to generate the qualitative analysis and recommendations in your report.

We do not sell your personal information, and we do not share it with third parties for marketing purposes.

5. Cross-Border Storage

Our infrastructure providers may process and store data on servers located outside South Africa. Where this happens, we rely on those providers’ own contractual and security safeguards, consistent with POPIA’s requirements for cross-border transfers.

6. Security

Passwords are hashed with bcrypt and never stored in plain text. Sessions are managed with signed, httpOnly cookies. We take reasonable technical and organisational measures to protect your information against loss, unauthorised access, and disclosure, but no system can be guaranteed 100% secure.

7. Retention

We retain your account and assessment data for as long as your account is active, or as needed to provide the service. If you request account deletion, we will delete or anonymise your personal information within a reasonable period, except where we’re required to retain it by law.

8. Your Rights Under POPIA

You have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or outdated information — you can update most of this yourself from your profile;
• Request deletion of your personal information, subject to any legal retention requirements;
• Object to our processing of your information on reasonable grounds;
• Lodge a complaint with the Information Regulator (South Africa) if you believe we have not complied with POPIA.

To exercise any of these rights, contact us using the details in section 10.

9. Changes to this Policy

We may update this Privacy Policy from time to time. We’ll update the “Last updated” date above when we do.

10. Contact Us / Information Officer

SineThamsanqa Business Solutions
Meyerton, Gauteng, South Africa, 1961
Phone: +27 87 821 6494
Email: info@cloudst.co.za