Privacy Policy

Last updated: 14 May 2026

This Privacy Policy describes how Ivy Innovation (Pty) Ltd ("Ivy", "we", "us", or "our"), registered in South Africa, collects, uses, and protects your information when you use any of our products and services.

We are committed to compliance with the Protection of Personal Information Act (POPIA) and other applicable data protection legislation.

1. Information We Collect

1.1 Information You Provide
  • Account information: name, email address, and authentication credentials when you register for an Account.
  • Payment information: billing details processed through our payment provider (our payment processor). We do not store card numbers or banking details directly.
  • Communications: information you provide when contacting our support or submitting feedback.
1.2 Information Collected Automatically
  • Usage data: pages visited, features used, timestamps, API call counts, and interaction patterns.
  • Device information: browser type, operating system, device identifiers, and IP address.
  • Log data: server logs including request URLs, response codes, and error information.
1.3 Information from Third Parties

We may receive information from authentication providers (such as Google or GitHub) if you choose to sign in through those services. We only receive the data you authorise these providers to share.

2. How We Use Your Information

  • To provide, operate, and maintain our services.
  • To process transactions and manage your Account.
  • To communicate with you about your Account, service updates, and support requests.
  • To monitor usage patterns and enforce plan limits.
  • To improve our services and develop new features.
  • To comply with legal obligations.

We do not sell your personal information to third parties.

3. Data Sharing

We may share your information with:

  • Service providers: third-party services that help us operate (e.g. Firebase for hosting and authentication, our payment processor for payment processing). These providers are contractually required to protect your data.
  • Legal requirements: when required by law, court order, or governmental authority.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, with notice provided to affected users.

4. Data Storage and Security

Your data is stored on servers operated by Google Cloud Platform (Firebase). Data may be processed in regions outside South Africa. We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest.

No method of transmission or storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.

5. Data Retention

We retain your personal data for as long as your Account is active or as needed to provide services. After Account deletion, we may retain certain data for a reasonable period to comply with legal obligations, resolve disputes, and enforce our agreements.

Usage and analytics data may be retained in anonymised or aggregated form indefinitely.

6. Your Rights

Under POPIA and applicable data protection laws, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your personal information.
  • Object to the processing of your personal information.
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at the details provided below.

7. Cookies and Tracking

Our services may use cookies and similar technologies for authentication, preferences, and analytics. You can control cookie settings through your browser. Disabling cookies may affect service functionality.

8. Children's Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us so we can take appropriate action.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We will notify you of material changes via email or a prominent notice within the Service.

10. Contact

For privacy-related queries or to exercise your data rights:

You also have the right to lodge a complaint with the Information Regulator of South Africa.