Privacy policy

1. Who we are

Yeabla Digital (Pty) Ltd ("Yeabla", "we", "us") is the responsible party for personal information described in this policy. We are a South African company, registration number 2022/750549/07, at 8 Prospect Terrace, Huis-in-Bos, Constantia, Cape Town, 7806.

Questions about your information go to info@yeabla.com or +27 87 265 0747.

2. What this policy covers

This policy applies when you:

• visit yeabla.com or one of our product sites
• create an account or subscribe to a platform we operate, including MathSA, Yeablingo, TrackSheet, PilotHQ and TradeX
• pay a subscription or invoice through a payment provider we use
• contact us about a project, or become a client

Where we build and host a platform for a client and that client decides why personal information is processed, the client is the responsible party and we act on their instructions. Their privacy notice applies to their users. This policy still applies to the account and billing information we hold about that client.

3. Information we collect

Account and contact details. Name, email address, phone number, company name, job title and the login details for your account.

Billing details. Billing address, the plan you chose, invoices, payment status and the last four digits of a card where the payment provider sends them to us. We do not see or store your full card number, expiry date or CVV. The payment provider collects and stores those.

Use of the platform. Sign-in times, features you use, files and records you add, support messages, and technical logs such as IP address, browser and device type. We use these to run the service, keep it secure and understand what is breaking.

Project information. Briefs, content, credentials and files you send us so we can build or support your system.

Website data. Pages visited, referring site and a cookie preference. See section 10.

4. Why we use it

We use personal information to:

• create and run your account and provide the software you subscribed to
• take payment, issue invoices and keep tax records
• send service messages, such as renewal reminders, invoices and security alerts
• answer support requests and fix faults
• protect accounts against fraud and unauthorised access
• improve the platforms, using aggregated or de-identified data where we can
• meet legal duties under tax law and the Protection of Personal Information Act 4 of 2013 (POPIA)

We rely on a contract with you for account and billing information, on a legal duty for tax and accounting records, and on our legitimate interest in securing and improving the service. We ask for consent where the law requires it, including for non-essential cookies. You can refuse or withdraw that consent.

We do not sell personal information, and we do not use it for third-party advertising.

5. Payments

Subscription and invoice payments are processed by a payment provider. The provider's name is shown on the checkout page, and their own terms and privacy policy apply to the card data they hold. We receive a payment confirmation, an amount, a reference and limited card details so we can reconcile the payment and handle a refund.

If a payment fails, the provider tells us, and we may suspend access until it succeeds. See our refund policy for how money is returned.

6. Who we share it with

We share personal information only with people who need it to do their job for us:

• payment providers, to take and refund payments
• hosting, email and infrastructure providers who store or transmit the service
• professional advisers, such as our accountants and attorneys, where the work requires it
• a client, where you are a user of a platform we operate for them and the information belongs to their account
• a regulator, court or law-enforcement body when the law requires it

Some of these providers store data outside South Africa. Where that happens we use providers that protect the information to a standard comparable with POPIA, and we share only what the service needs.

7. How long we keep it

Account information is kept while your subscription or project is active, and then for as long as we need it to resolve a dispute or meet a legal duty. Invoices and payment records are kept for at least five years for tax. Support messages and security logs are kept for shorter periods and then deleted or de-identified. You can ask us to delete your account; we will delete what we can and tell you what we must keep, and why.

8. Security

We use access control, encrypted connections and restricted staff access to protect personal information. No online service is perfectly secure. If a breach creates a risk to you, we will tell you and the Information Regulator as POPIA requires.

9. Your rights

Under POPIA you can ask us to:

• confirm whether we hold personal information about you, and for a copy of it
• correct or update it
• delete it, or restrict how we use it, where the law allows
• object to processing based on our legitimate interest

Email info@yeabla.com. We may need to confirm your identity before we act. If you are not satisfied, you can complain to the Information Regulator at inforegulator.org.za.

10. Cookies

We use a cookie to remember your cookie choice, and optional cookies to understand how the site is used. The banner on your first visit lets you accept or decline the optional ones. You can also block cookies in your browser. Blocking them does not affect a paid subscription.

11. Schools and children

Some of our products are used by schools. Learner information is processed for the school, under the school's instructions and its own privacy notice. We do not market to children, and we do not build advertising profiles from learner information.

12. Changes

We will update this page when our practices change and change the date at the top. If a change materially affects a subscriber, we will also email the account holder.