POPIA Compliance Notice
This notice explains how Appxcel collects, uses, stores, and protects personal information in compliance with the Protection of Personal Information Act, 2013 (Act 4 of 2013) — POPIA. It is separate from, and supplements, our Privacy Policy.
Who We Are (Responsible Party)
Under POPIA, the party responsible for how your personal information is processed is:
As a sole proprietorship, Appxcel is operated directly by Sivario Buchanan — in engineering partnership with BuildsByBuchanan — who also acts as the point of contact for all data protection matters until a separate Information Officer is appointed and registered with the Information Regulator.
What Data We Collect
| Category | Data Collected | How Collected |
|---|---|---|
| Account Information | Name, email address, hashed password | Sign-up form for Monthlys |
| Billing Information | Transaction records, subscription status | Paystack checkout |
| Product Data | Workspace content, cycle-tracking entries, notes | Direct use of the relevant Product |
| Technical Data | IP address, browser type, device type | Automatically, via application logs and analytics |
Why We Collect It (Purpose)
- Service delivery: to provide the features of Monthlys
- Billing: to process subscriptions and once-off payments via Paystack
- Support: to respond to enquiries and technical issues
- Compliance: to meet South African tax and financial record-keeping obligations
We will not use your personal information for any purpose beyond those listed above without your consent, or unless required by law.
How We Store and Protect It
- Data is stored with reputable, secure infrastructure and database providers
- Passwords are stored as salted hashes, never in plain text
- All traffic between your device and our Products is encrypted via HTTPS
- Payment card details are never stored by Appxcel — these are handled entirely by Paystack
In the event of a data breach likely to affect your rights, we will notify affected users and the Information Regulator as required by POPIA.
Who We Share Your Data With
- Paystack: to process payments on our behalf
- Hosting and infrastructure providers: to run our Products, acting as operators under our instruction
- Legal requirements: where required by South African law or a competent authority
We do not sell personal information, and no personal information is transferred outside South Africa without the safeguards required by POPIA Section 72.
Your Rights Under POPIA
- Right of access (Section 23): confirm what personal information we hold and request a copy
- Right to correction (Section 24): request correction of inaccurate or outdated information
- Right to deletion: request deletion, subject to our legal retention obligations
- Right to object (Section 11(3)): object to processing on reasonable grounds
- Right to withdraw consent: where processing is based on consent
- Right to complain: lodge a complaint with the Information Regulator
Requesting Access or Deletion
- We acknowledge requests within 3 business days
- We respond substantively within 30 days, as required by POPIA
- We may need to verify your identity before processing certain requests
Complaints and the Information Regulator
If you are not satisfied with how we have handled your personal information, you may lodge a complaint with the Information Regulator of South Africa:
We encourage you to contact us first at support@appxcel.co.za so we can attempt to resolve your concern directly.