Privacy Policy

Last updated: 18 August 2026 · Compliant with POPIA (Protection of Personal Information Act)

This Privacy Policy explains how Moya ("we", "us", "our"), a product of MY-LO (My Life Online), collects, uses, stores, and protects your personal information. It applies to all users of the Moya platform.

We are committed to complying with the Protection of Personal Information Act 4 of 2013 (POPIA) and to treating your personal information with care and respect.

1. Information We Collect

1.1 Information You Provide

• Registration data: name, email address, company name, sector, phone number
• Business data: past tender wins, capabilities statements, fee structures, brand guidelines, "don't say this" guardrails
• Payment data: processed by PayFast (PCI-DSS compliant). We do not store your credit card or banking details.
• Communications: emails, support tickets, feedback you send us

1.2 Information Collected Automatically

• Usage data: which features you use, which tenders you view, which drafts you approve
• Device data: browser type, operating system, IP address (hashed), referring URL
• Cookies: session cookies for authentication, preference cookies for UI settings

2. How We Use Your Information

We use your personal information to:

• Provide and improve the Service (tender scanning, scoring, drafting, tracking)
• Personalise your experience (sector matching, relevant tender alerts)
• Process subscriptions and payments
• Send service announcements, alerts, and (with youropt-in) marketing communications
• Generate anonymised analytics and improve our algorithms
• Comply with legal obligations and prevent fraud

3. Legal Basis for Processing (POPIA)

We process your personal information under the following legal grounds:

• Consent: you consent when you sign up, and you can withdraw consent at any time
• Contractual necessity: processing is necessary to provide the Service you subscribed to
• Legitimate interest: improving our Service, preventing fraud, ensuring security
• Legal obligation: complying with tax, accounting, and regulatory requirements

4. Data Storage & Security

• All personal information is stored on servers located in the AWS Cape Town region (af-south-1). Your data does not leave South Africa.
• We use industry-standard encryption (TLS 1.3 in transit, AES-256 at rest).
• Access to personal information is restricted to authorised personnel on a need-to-know basis.
• We retain your data for as long as your account is active, plus 30 days after termination (unless you request earlier deletion).
• Backup data is encrypted and stored in the same AWS Cape Town region.

5. Data Sharing & Third Parties

We do not sell your personal information to anyone.

We may share your information with:

• PayFast: to process payments (they are PCI-DSS compliant and process your card details — we never see them)
• Amazon Web Services: hosting provider (data stays in Cape Town)
• Service providers: email delivery, analytics, customer support tools (all contractually bound to protect your data)
• Legal authorities: if required by law, court order, or to protect our rights

All third-party processors are bound by data processing agreements that require them to protect your information to the same standard as us.

6. Your Rights Under POPIA

You have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete information
• Deletion: request deletion of your personal information (subject to legal retention requirements)
• Objection: object to processing based on legitimate interests
• Withdrawal of consent: withdraw consent at any time (without affecting the lawfulness of processing before withdrawal)
• Data portability: request your data in a structured, commonly used format
• Complaint: lodge a complaint with the Information Regulator (South Africa)

To exercise any of these rights, contact us at sales@mylo.co.za. We will respond within 30 days.

7. Cookies

We use:

• Essential cookies: required for the Service to function (authentication, session management)
• Preference cookies: remember your UI settings (theme, dashboard layout)
• Analytics cookies: anonymised usage data to improve the Service

You can disable non-essential cookies in your browser settings. Essential cookies cannot be disabled.

8. Children's Privacy

The Service is not intended for persons under 18. We do not knowingly collect information from children. If we become aware, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Continued use after changes take effect constitutes acceptance.

10. Contact

For privacy-related questions or to exercise your rights:

• Email: sales@mylo.co.za
• Entity: MY-LO (My Life Online)
• Location: Gauteng, South Africa

11. Information Regulator

If you believe your rights under POPIA have been violated and we have not resolved your concern, you may lodge a complaint with:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: inforegulator.org.za

← Back to Moya