This policy explains how Spheralytical ([registered entity], spheralytical.com) collects, uses, and protects personal information, in line with South Africa's Protection of Personal Information Act (POPIA). It covers both visitors to our platform and the businesses we serve.
Information we collect
- Account data: name, email, business details and login credentials.
- Brief data: the business description, brand assets and voice notes you submit to generate your site.
- Billing data: plan, subscription status and payment references (card data is handled by our payment provider, not stored by us).
- Usage data: analytics on how your site and the platform are used (page views, sessions, device).
- Site enquiries: contact-form and lead data submitted on the sites we host for you.
How we use it
- To generate, build, host, maintain and improve your website and marketing.
- To provide analytics, reporting and the agency and client dashboards.
- To process subscriptions and send service communications.
- To improve our generation quality and platform (using aggregated, de-identified data where possible).
Lawful basis
We process personal information to perform our contract with you, to meet legal obligations, for our legitimate interests in running and improving the service, and with your consent where required.
Sub-processors
We share data only with the providers needed to run the service:
- Supabase - database and authentication.
- Vercel - hosting and content delivery.
- Paystack - payment processing (ZAR).
- Google Analytics 4 and Microsoft Clarity - website analytics.
- Resend - transactional email.
- Anthropic - AI generation of website content (briefs are processed to generate output).
Some providers process data outside South Africa; we rely on appropriate safeguards for cross-border transfers.
Retention
We keep personal information for as long as your account is active and as required to meet legal and accounting obligations, then delete or de-identify it.
Your rights under POPIA
- Access the personal information we hold about you.
- Request correction or deletion.
- Object to processing and withdraw consent.
- Lodge a complaint with the Information Regulator (South Africa).
Contact
Information Officer: [name], . We respond to data requests within a reasonable period in line with POPIA.