Privacy policy

BNJ Marketing App is run by Bianca Joseph, trading as BNJ Development, in South Africa (“we”, “us”). Contact: info@bnjdevelopment.co.za. This policy explains what personal information we collect, why, and your rights under the Protection of Personal Information Act (POPIA). Our Information Officer is Bianca Joseph, reachable at the email above.

1. What we collect

• Account details: your email address, and optionally your name and phone number.
• Business details: business name, industry, services, areas, contact number, logo, brand colours and the other answers you give during setup.
• Content: photos, notes and posts you create, and whether you shared them.
• Bookings: when customers book through your business page, their name, phone number, address or note, and the time they chose.
• Payments: your plan and payment status. Card details are handled by Paystack; we never see your full card number.
• Technical: notification settings for your devices, and security information such as a scrambled (hashed) version of IP addresses used on the booking form to stop abuse, kept for no longer than a day.

2. Why we use it

• to provide the app: write posts and graphics, run your business page and bookings, and send reminders;
• to sign you in, keep your account secure and prevent abuse;
• to bill your plan and keep records the law requires;
• to contact you about your account and important changes.

We do not sell your information, and we don’t use it for advertising.

3. Your customers’ information

For bookings made through your page, you (the business) decide how your customers’ information is used, and we process it on your behalf to run the booking system. Only you and your staff can see it.

4. Who helps us (and where data is stored)

• Supabase — database, sign-in and file storage, hosted in Ireland (European Union).
• Cloudflare — hosts the app and business pages.
• AI providers (such as Anthropic or Google) — read the photo and details you submit to write captions. They don’t use this to advertise to you.
• Paystack — processes payments.
• Your browser’s notification service (Google, Apple or Mozilla) — delivers reminders to your device.

Some of these providers store or process information outside South Africa. We use them because they protect personal information to a standard comparable to POPIA, and they may use it only to provide their service to us.

5. How long we keep it

We keep your information while your account is active. When you ask us to delete your account, we delete your information within 30 days, except records we must keep by law (such as payment records), which we keep only as long as required.

6. Security

Your data is protected with access controls so each business can see only its own information, encrypted connections, and private storage for your photos unless you choose to show them on your public page.

7. Your rights

You can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct or delete it;
• stop using it for a particular purpose (object).

Email us and we’ll respond within 30 days. If you’re unhappy with how we handle your information, you may complain to the Information Regulator of South Africa (inforegulator.org.za).

8. Cookies and storage on your device

The app stores your sign-in session and preferences (such as light or dark mode) on your device so it works. We don’t use advertising or tracking cookies.

9. Changes

If we change this policy in a way that matters, we’ll tell you by email or in the app before the change applies.