1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and password. Payment information is processed securely through PayFast and is not stored on our servers.

Usage Data: We collect information about how you interact with the Platform, including pages viewed, content accessed, reading time, and feature usage. This helps us improve the Platform and personalise your experience.

Device Information: We collect browser type, operating system, device type, and screen resolution to optimise content delivery.

2. How We Use Your Information

We use collected information to: (a) provide and maintain your subscription; (b) personalise content recommendations; (c) send service-related communications; (d) analyse Platform usage to improve our services; (e) detect and prevent fraud or abuse.

3. Data Protection (POPIA Compliance)

IdeaToola is committed to compliance with the Protection of Personal Information Act (POPIA) of South Africa. As the responsible party, we process personal information lawfully, minimise data collection, and ensure data is used only for stated purposes. You have the right to access, correct, or delete your personal information at any time.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data with: (a) service providers who assist in operating the Platform (hosting, payment processing, analytics); (b) law enforcement when required by law. All service providers are bound by data protection agreements.

5. Cookies & Tracking

We use essential cookies for authentication and session management. Analytics cookies help us understand usage patterns. You may disable non-essential cookies through your browser settings without affecting core functionality.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, access controls, and regular security audits. While no system is completely secure, we take reasonable precautions to protect your data.

7. Data Retention

Account data is retained for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Anonymised usage data may be retained for analytics purposes.

8. Your Rights

Under POPIA, you have the right to: (a) access your personal information; (b) request correction of inaccurate data; (c) request deletion of your data; (d) object to processing of your data; (e) lodge a complaint with the Information Regulator. To exercise these rights, contact us at privacy@ideatoola.com.

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. Material changes will be communicated to registered users via email.