Privacy Policy

1. Introduction

Roventis (Pty) Ltd ("Roventis", "we", "us", or "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and the Electronic Communications and Transactions Act 25 of 2002 ("ECTA").

This Privacy Policy explains how we collect, use, store, and share your personal information when you use our platform at roventis.co.za (the "Platform").

2. Information We Collect

2.1 Information you provide

• Full name, email address, phone number, and city
• LinkedIn profile URL and experience level
• Bank account details (for commission payouts)
• Company and client information submitted through deals and orders
• Support ticket content and communications

2.2 Information collected automatically

• Device information (browser type, operating system)
• IP address and approximate location
• Usage data (pages visited, features used, session duration)
• Authentication tokens and session identifiers (via Clerk)

3. How We Use Your Information

We process your personal information for the following lawful purposes:

• Contract performance: Managing your affiliate account, processing commissions, and facilitating payouts
• Legitimate interest: Improving our platform, preventing fraud, and providing support
• Legal obligation: Complying with tax reporting and regulatory requirements
• Consent: Sending marketing communications (where you have opted in)

4. Data Sharing

We may share your personal information with:

• Service providers: Clerk (authentication), Convex (database hosting), Vercel (platform hosting)
• Buyers: Limited contact information when you submit orders on their behalf
• Regulatory authorities: When required by South African law

We do not sell your personal information to third parties. Our service providers are bound by data processing agreements that require them to protect your information.

5. Cross-Border Transfers

Some of our service providers (Clerk, Convex, Vercel) store data outside of South Africa. These transfers are protected by appropriate safeguards including the provider's compliance with equivalent data protection frameworks (GDPR, SOC 2 certifications).

6. Data Retention

We retain your personal information for as long as your account is active, plus:

• Financial records: 5 years (as required by the Tax Administration Act)
• Commission/payout records: 5 years from date of last transaction
• Support communications: 2 years from resolution
• Account data: 30 days after account deletion request

7. Your Rights Under POPIA

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Object to processing for direct marketing purposes
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Regulator

To exercise these rights, contact our Information Officer at privacy@roventis.co.za. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational measures to protect your personal information, including encryption in transit (TLS), access controls, and regular security reviews. In the event of a data breach that poses a risk to your rights, we will notify you and the Information Regulator as required by POPIA.

9. Information Regulator

If you are unsatisfied with our response to a privacy concern, you may contact:

The Information Regulator (South Africa)
Email: inforeg@justice.gov.za
Website: www.justice.gov.za/inforeg

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform. Continued use of the Platform after changes constitutes acceptance of the updated policy.

11. Contact

Roventis (Pty) Ltd
Information Officer: privacy@roventis.co.za
General Enquiries: support@roventis.co.za