Privacy Policy

1. Our Commitment to Your Privacy

AVAULTX™ (Pty) Ltd ("we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use the AVAULTX™ platform — including our website, applications, Property Vault, and all associated services.

This policy complies with the Protection of Personal Information Act, 2013 (POPIA)of the Republic of South Africa and aligns with international data protection standards.

2. Information We Collect

We collect information you provide directly, as well as data generated through your use of the Platform:

3. How We Use Your Information

We use your information to:

• Operate, maintain, and improve the AVAULTX™ Platform
• Process booking inquiries and facilitate property rentals
• Build and maintain your Property Vault with architectural and compliance documentation
• Connect you with certified hosts, service providers, and architects
• Process payments and manage subscriptions
• Send service-related communications (confirmations, updates, security alerts)
• Personalise your experience with relevant property and service recommendations
• Comply with legal obligations and enforce our Terms & Conditions
• Detect and prevent fraudulent or unauthorized activity

4. Property Vault — Special Protections

The AVAULTX™ Property Vault is designed with institutional-grade security. All vault data — including architectural specifications, compliance documents, financial records, and access credentials — is:

• Encrypted at rest using AES-256 encryption
• Encrypted in transit via TLS 1.3
• Access-controlled — only verified owners and authorised administrators can access full vault contents
• Never shared with third parties without explicit owner consent
• Audit-logged — every access to vault data is recorded

When a property is sold through the Platform, the vault is transferred to the new owner as part of the certified sale process, ensuring no voetstoots transaction.

Banking details for payout purposes (account holder name, bank name, account number, branch code) are collected from property owners and service providers and stored as POPIA special-category data. Access is restricted to administrators only. The Platform does not store credit card numbers, CVVs, or full card details — payment card processing is handled entirely by Stripe.

5. Information Sharing

We do not sell your personal information. We share data only as necessary to operate the Platform:

• With other Platform users: Limited profile information is shared between guests, hosts, owners, and providers to facilitate bookings and services.
• With service providers: Payment processors (Stripe), cloud infrastructure, and email services — all under strict data processing agreements.
• Legal compliance: When required by law, court order, or governmental authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Platform services. Property Vault data is retained permanently as part of the institutional record-keeping protocol — this is a core feature of AVAULTX™ that ensures certified property history is never lost.

Upon account deletion, personal profile data is removed. Vault data associated with properties you own may be retained for compliance and record-keeping purposes, or transferred to the new owner upon sale.

7. Your Rights Under POPIA

Under the Protection of Personal Information Act, you have the right to:

• Access — Request a copy of personal information we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your personal information (subject to legal retention requirements)
• Objection — Object to processing of your personal information in certain circumstances
• Complaint — Lodge a complaint with the Information Regulator of South Africa

8. Cookies & Tracking

We use essential cookies for Platform functionality and optional analytics cookies to improve your experience. You can manage cookie preferences through your browser settings. The Platform does not use tracking cookies for advertising purposes.

9. International Data Transfers

Your data is hosted on secure infrastructure. Where data is transferred internationally for processing (e.g., payment processing), we ensure appropriate safeguards are in place in compliance with POPIA requirements.

10. Children's Privacy

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Platform. Continued use after such notification constitutes acceptance of the updated policy.

12. Information Officer & Contact

All communications with the AVAULTX™ team are conducted exclusively through the AVAULTX™ in-app messaging system. For security and audit purposes, no external email addresses or phone numbers are published. Every message is encrypted, access-controlled, and permanently logged within the Platform.

You also have the right to lodge a complaint with the Information Regulator of South Africa atjustice.gov.za/inforeg.