Privacy Policy

Last updated: 28 May 2026

1. Introduction

StorageBuddy, 314 University Drive, Pinelands, South Africa (“we”, “us”, or “our”) is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA) and other applicable South African privacy legislation. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights in relation to it.

2. Information We Collect

2.1 Information you provide

  • Account information: name, email address, and password when you register.
  • Profile details: any optional information you add to your account profile.
  • User content: photos, box descriptions, notes, and other inventory data you upload.
  • Payment information: billing details are collected and processed by Paystack. We do not store your full card details.
  • Communications: messages you send to our support team.

2.2 Information collected automatically

  • Usage data: pages visited, features used, and actions taken within the platform.
  • Device and log data: IP address, browser type, operating system, and timestamps.
  • Analytics: we use PostHog to understand how users interact with the Service. PostHog may collect browser and device identifiers.

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your account and provide the Service.
  • Process payments and manage your subscription via Paystack.
  • Run AI analysis on photos you upload to generate item summaries, tags, and searchable text.
  • Send transactional emails (e.g., account confirmation, invite notifications, billing receipts).
  • Provide customer support.
  • Monitor and improve the performance, security, and features of the Service.
  • Comply with legal obligations.

We do not use your photos or inventory content to train AI models, and we do not sell your personal information to third parties.

4. AI Processing

When you upload photos, they are transmitted to Anthropic’s API for AI analysis. Anthropic processes these images to generate summaries and item lists on our behalf. Anthropic is bound by data processing terms that restrict use of submitted data. Photos are not retained by Anthropic for model training. For more information, refer to Anthropic’s Privacy Policy.

5. Third-Party Service Providers

We share limited personal information with trusted third-party providers who assist us in operating the Service. These include:

  • Convex — backend database and real-time data infrastructure.
  • Amazon Web Services (AWS S3) — photo and file storage.
  • Paystack — payment processing. Paystack is PCI-DSS compliant.
  • Anthropic — AI photo analysis.
  • PostHog — product analytics and error tracking.

Each provider is contractually required to handle your data securely and in accordance with applicable law.

6. Data Storage and Security

Your data is stored on servers in regions operated by our infrastructure providers (Convex and AWS). We implement industry-standard security measures including encrypted data in transit (TLS), encrypted storage at rest, and access controls. Despite these measures, no system is 100% secure; you use the Service at your own risk.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required by law to retain it longer. For the One-Off Event plan, account data is automatically cleared 90 days after the plan activation date.

8. Cookies and Tracking

We use session cookies to keep you logged in and analytics cookies (via PostHog) to understand platform usage. You can disable cookies in your browser settings, but this may affect the functionality of the Service.

9. Your Rights (POPIA)

Under POPIA and applicable law, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your personal information (subject to legal retention requirements).
  • Object to the processing of your personal information in certain circumstances.
  • Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact us at hello@storagebuddy.cloud. We will respond within 30 days.

10. Children’s Privacy

The Service is not directed at children under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or an in-app notice at least 14 days before the changes take effect. Continued use of the Service after the effective date indicates your acceptance of the updated policy.

12. Contact and Complaints

For any privacy-related questions or to submit a request, contact our Information Officer at hello@storagebuddy.cloud or at 314 University Drive, Pinelands, South Africa.

If you are not satisfied with our response, you may contact the Information Regulator of South Africa at inforeg@justice.gov.za.