Privacy Policy

StructCHA ("we") is the responsible party for personal information processed through structcha.co.za. Our Information Officer can be reached at privacy@structcha.co.za.

• Account details: name, email, avatar, role and department.
• Workspace content: projects, tasks, comments, files, meeting recordings and transcripts.
• Client request details submitted through external portals.
• Billing records (we never store card numbers — PayFast processes them).
• Technical data: sign-in times, device and usage logs for security.

To provide and secure the service, process payments, send service notifications, provide support and meet legal obligations. Our lawful bases are performance of contract, legitimate interest and, where required, your consent.

When you use AI features (project structuring, goals, meeting task extraction), the relevant content is sent to our AI provider solely to generate the result. It is not used to train public models.

We share information only with operators who help run the service — cloud hosting, payment processing (PayFast), email delivery and meeting transcription (Recall.ai, when you invite the StructCHA PA bot) — under written confidentiality obligations. We never sell personal information.

Data is hosted on managed cloud infrastructure that may be outside South Africa (including the EU and US). We only use providers in jurisdictions or under agreements offering protection comparable to POPIA, as section 72 requires.

Encryption in transit and at rest, workspace isolation via row-level security, role-based access, private file storage with short-lived links, and email verification at sign-in. See our Trust & Security page.

We keep workspace data while your account is active and for 30 days after cancellation, then delete it, except billing records kept for 5 years for tax purposes.

You may request access to, correction or deletion of your personal information, object to processing, or withdraw consent by emailing privacy@structcha.co.za. We respond within 30 days. You may also complain to the Information Regulator (inforegulator.org.za).

We use only essential storage needed for sign-in and preferences. No advertising trackers.

We'll notify workspace admins of material changes to this policy.