POPIA Information Notice
This Information Notice is provided in terms of section 18 of the Protection of Personal Information Act 4 of 2013 (POPIA). It describes how Logoyn processes personal information, the lawful basis for processing, and how you may exercise your rights.
1. Responsible Party
Logoyn is the Responsible Party as defined in section 1 of the Protection of Personal Information Act 4 of 2013 (POPIA). Information Officer: Liyema Swartbooi. Contact: popia@logoyn.ai. Address: Cape Town, Western Cape, Republic of South Africa.
2. Purpose of Processing
Logoyn processes personal information for the following purposes: (a) Platform operations: creating and managing user accounts, processing engagement requests, delivering specialist outputs; (b) Billing and payments: processing subscription and pay-per-use payments in ZAR; (c) Communication: sending transactional notifications, engagement status updates, and invoices; (d) Security: logging access and actions for audit and incident response purposes; (e) Legal compliance: meeting obligations under POPIA, the Companies Act, and South African tax law.
3. Lawful Basis
Personal information is processed on the following grounds as provided in section 11 of POPIA: (a) Data subject consent (section 11(1)(a)); (b) Contractual necessity -- processing is necessary to fulfil the subscription or engagement contract (section 11(1)(b)); (c) Legal obligation -- processing is required to comply with South African law (section 11(1)(c)); (d) Legitimate interest of the Responsible Party -- to operate, secure, and improve the platform (section 11(1)(f)).
4. Categories of Personal Information Processed
Logoyn processes the following categories of personal information: (a) Contact information (name, email, phone number); (b) Professional information (company name, industry, job role); (c) Financial information (billing address, VAT number -- payment card data is handled exclusively by Polar); (d) Usage data (engagement briefs, uploaded documents, platform activity); (e) Technical data (IP addresses, browser information, access timestamps); (f) Communication records (support interactions, review submissions).
5. Data Subject Rights
Under POPIA, you have the following rights which you may exercise by contacting popia@logoyn.ai: (a) Right of access (section 23): request confirmation of whether we hold your personal information and obtain a description of it; (b) Right to correction (section 24): request correction, destruction or deletion of inaccurate, irrelevant, excessive, outdated, or misleading personal information; (c) Right to object (section 11(3)): object to processing on grounds of legitimate interest; (d) Right to complain: lodge a complaint with the Information Regulator at www.justice.gov.za/inforeg/.
6. Data Transfers
Personal information is hosted and processed in South Africa. Where service providers are used (Polar for payments, Resend for email, Convex for database), they are bound by processing agreements that ensure POPIA-compliant handling. No personal information is transferred to countries that do not have adequate data protection laws without appropriate safeguards.
7. Automated Decision-Making
Logoyn uses automated processing to generate specialist engagement deliverables based on your uploaded content. This processing does not produce legally binding decisions about you. Deliverables are analytical outputs that must be reviewed by a qualified professional before use in regulated professional contexts. You have the right to request human review of any automated output.
8. Security Measures
Logoyn implements appropriate technical and organisational measures to protect personal information as required by section 19 of POPIA. These include encryption at rest and in transit, access control, audit logging, and incident response procedures. In the event of a security compromise, we will notify affected data subjects and the Information Regulator within 72 hours as required by section 22 of POPIA.
9. Retention Periods
Personal information is retained for the minimum period necessary for the purpose for which it was collected, in accordance with section 14 of POPIA. Account data is retained for the duration of your account plus 3 years. Billing records are retained for 7 years as required by the Tax Administration Act. Engagement documents are deleted within 30 days of completion unless retained by you in your account.
10. How to Exercise Your Rights
To exercise any POPIA right, submit a request to popia@logoyn.ai with: (a) your name and email address associated with your account; (b) the specific right you wish to exercise; (c) sufficient information to verify your identity. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa.
Have questions about this policy?
Contact our Information Officer at popia@logoyn.ai or submit an enquiry through our contact form.