Privacy Policy

Uplyft (uplyfthq.dev) is the responsible party for the personal information described here. Our Information Officer can be reached at support@uplyfthq.dev.

• Enquiries: the name, email, company and message you send through the contact form or the site's assistant, including the conversation with the assistant.
• Clients: contact names, email addresses, phone numbers, billing addresses and VAT numbers, and the quotes, invoices and payments that go with them.
• Client portal: your login email, a securely hashed password, and the sessions you sign in with.
• Payments: card payments are handled by Paystack. We never see or store full card numbers; we keep only what Paystack returns for a saved card (such as the card type and last four digits) and the payment reference.

We don't use advertising or visitor-tracking cookies on this site.

• To reply to your enquiry and prepare a quote (your request).
• To deliver the work, invoice it and take payment (our agreement with you).
• To keep accounting and tax records (a legal obligation).
• To keep our systems secure, for example limiting repeated sign-in attempts (our legitimate interest).

We don't sell personal information or use it for marketing you haven't asked for.

Sites and applications we build include a service status check (see section 9 of our Terms). The site's server sends Uplyft the site's identifier and a key every few minutes; your visitors' browsers never contact us, and no information about them is sent.

We store only the time of the last check, so we can see that the check is working. It involves no personal information.

When we build or run a system for a client, the personal information in it (for example the client's own customers) belongs to the client, who is the responsible party. We act as their operator: we process it only on their instructions, keep it secure, and do not use it for anything else. Suspending a service under our Terms never involves accessing that information.

Only service providers that help us run Uplyft, each bound to keep it secure and use it only for that purpose:

• Vercel — hosts this website and the client portal.
• Neon — hosts our database.
• Resend — sends our emails.
• Paystack — processes card payments.
• Anthropic — powers the site's assistant, which sees what you type into it.
• Slack — internal notifications to our team about new enquiries and payments.

We may also disclose information where the law requires it.

Some of these providers store information outside South Africa. We only use providers that are subject to data protection laws or agreements offering protection comparable to POPIA.

Enquiries that don't become work are kept for up to two years. Client, invoice and payment records are kept for as long as tax and company law require (generally five years after the end of the financial year), then deleted.

Information is encrypted in transit, passwords are hashed, admin access is limited to the people who need it, and every admin page and action checks who is asking. If a breach affects your information, we will tell you and the Information Regulator as POPIA requires.

You can ask us what personal information we hold about you, and ask us to correct or delete it, or to stop using it. Email support@uplyfthq.dev and we will respond within 30 days.

If you are not happy with how we handle your information, you can complain to the Information Regulator (South Africa) at inforeg.org.za.

We only use cookies that are needed for the site to work: a session cookie when you sign in to the client portal or the admin, and a preference cookie for the admin's sidebar. There are no analytics or advertising cookies.

If we change this policy, we update the version date at the top of this page.