Last updated: March 2026
Plaitek (Pty) Ltd ("Plai", "we", "us", "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal information when you use the Plai platform at plaitek.com and any associated services (the "Platform"). This Policy is drafted in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"), the Electronic Communications and Transactions Act 25 of 2002 ("ECTA"), and other applicable South African data protection legislation. By using the Platform, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with this Policy, please do not use the Platform.
Plai has appointed an Information Officer as required by POPIA. Our Information Officer is responsible for ensuring compliance with data protection laws and handling data subject requests. You may contact our Information Officer at: hello@plaitek.com. All requests relating to your personal information — including access, correction, or deletion requests — should be submitted to this address. We will acknowledge receipt of your request within 3 business days and respond fully within 30 days as required by POPIA.
We collect the following categories of personal information: (a) Identity and contact information: your email address, name (if provided), and profile information associated with your Google account if you use Google Sign-In; (b) Career and professional content: CV text, work history, skills, achievements, evidence, and reflections you enter into the Platform as part of completing programme activities; (c) Account information: account creation date, last login timestamp, onboarding completion status, programme access permissions, and terms acceptance records; (d) Usage and behavioural data: pages visited, features used, time spent on sections, buttons clicked, milestones completed, and other interactions with the Platform; (e) Technical data: IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session identifiers; (f) Communications: any correspondence you send to us, including feedback submissions and support requests.
We collect personal information through the following means: (a) Directly from you: when you create an account, complete your profile, use Platform features, submit forms, or contact us; (b) Automatically: through cookies, local storage, and similar technologies when you interact with the Platform, as described in our Cookie Policy below; (c) From third parties: when you use Google Sign-In, we receive your email address and basic profile information from Google in accordance with your Google account permissions and Google's own privacy policy; (d) From analytics tools: we use PostHog to collect aggregated usage data about how users interact with the Platform.
We process your personal information on the following lawful grounds under POPIA: (a) Consent: where you have explicitly consented to processing, such as by accepting this Privacy Policy when registering; (b) Performance of a contract: where processing is necessary to provide you with the Platform and its features; (c) Legitimate interests: where processing is necessary for our legitimate business interests, such as improving the Platform, preventing fraud, and ensuring security, provided these interests are not overridden by your fundamental rights; (d) Legal obligation: where processing is necessary for compliance with a legal obligation to which we are subject. We will not process your personal information for purposes incompatible with those stated in this Policy without first obtaining your consent.
We use the personal information we collect for the following purposes: (a) To provide and operate the Platform, including authenticating your identity and maintaining your account; (b) To deliver programme content and track your progress through milestones and activities; (c) To personalise your experience and remember your preferences; (d) To send you account-related communications, such as registration confirmations and security alerts; (e) To analyse usage patterns in aggregate to understand how users engage with the Platform and to improve our product and content; (f) To conduct research and development to build new features; (g) To detect, prevent, and respond to fraud, abuse, security incidents, or other harmful activity; (h) To comply with legal obligations, enforce our Terms and Conditions, and protect the rights of Plai and third parties; (i) To respond to your support requests and feedback submissions.
We use PostHog, a product analytics platform, to collect and analyse usage data. PostHog records events such as page views, feature interactions, and session durations. This data is used exclusively for product improvement and is analysed in aggregate. PostHog data is processed on servers located within the European Union. We have a data processing agreement with PostHog in place. PostHog does not use your data for advertising or profiling purposes. We do not use Google Analytics, Facebook Pixel, or any advertising tracking technologies on the Platform. Our analytics implementation is designed to give us insight into product usage patterns — not to track individuals for marketing purposes.
The Platform uses cookies and browser local storage to operate correctly and improve your experience. We use: (a) Essential cookies: required for the Platform to function, including authentication session cookies set by Firebase. These cannot be disabled without breaking core functionality; (b) Analytics cookies: set by PostHog to track usage events. These can be declined via our cookie consent banner; (c) Functional local storage: we store certain preferences and session state in your browser's local storage, such as A/B test variant assignments and onboarding progress. This data remains on your device and is not transmitted to our servers except as part of normal Platform operation. You can clear local storage at any time through your browser settings. We do not use advertising cookies or third-party tracking cookies.
We do not sell, rent, or trade your personal information. We may share your personal information with: (a) Service providers: third-party companies that help us operate the Platform, including Google (Firebase authentication and database), PostHog (analytics), and our hosting provider. These parties act as operators under POPIA and are contractually required to protect your information and process it only on our instructions; (b) The broader platform team: if you opt in to marketing communications during registration, we may share your email address and sign-up information with the team developing the full platform, solely for the purpose of contacting you about early access, beta participation, and launch updates. This sharing is conditional on your explicit opt-in consent and will not occur without it. You may withdraw your consent at any time by emailing hello@plaitek.com; (c) Legal and regulatory authorities: where required by law, court order, or regulatory requirement; (d) Professional advisors: such as lawyers, auditors, and insurers, where necessary in connection with the conduct of our business; (e) Successors in business: in the event of a merger, acquisition, or sale of all or part of our business, your personal information may be transferred to the acquiring entity, subject to equivalent privacy protections. We will notify you of any such transfer. In all other cases, we will seek your explicit consent before sharing your personal information with any third party.
Some of our service providers are located outside South Africa. When we transfer your personal information outside South Africa, we ensure that adequate protections are in place as required by POPIA. Specifically: (a) Google Firebase stores data in the United States and is subject to Google's global data protection framework, including compliance with applicable cross-border transfer mechanisms; (b) PostHog processes analytics data on EU servers and is subject to European data protection standards (GDPR), which Plai considers to provide an adequate level of protection. We will not transfer your personal information to countries that do not provide an adequate level of data protection without first obtaining your consent or implementing appropriate safeguards.
We retain your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, and in accordance with our legal obligations. Specifically: (a) Account data: retained for the duration of your account plus 12 months following account closure or last active session, whichever is later; (b) Programme content (CV text, evidence, reflections): retained for the duration of your account and for 12 months following closure, after which it is permanently deleted; (c) Usage and analytics data: retained for 24 months in aggregated, pseudonymised form; (d) Legal and compliance records, including terms acceptance logs: retained for 5 years as required for legal compliance purposes; (e) Communications and support records: retained for 2 years. Upon expiry of the applicable retention period, we will securely delete or anonymise your personal information. You may request earlier deletion at any time as described in Section 12 below.
As a data subject under POPIA, you have the following rights in respect of your personal information: (a) Right of access: you may request a copy of the personal information we hold about you; (b) Right to correction: you may request that we correct any inaccurate or incomplete personal information; (c) Right to deletion: you may request that we delete your personal information, subject to our legal retention obligations; (d) Right to object: you may object to the processing of your personal information where we rely on legitimate interests as our lawful basis; (e) Right to restrict processing: you may request that we restrict how we process your personal information in certain circumstances; (f) Right to data portability: you may request a copy of your personal information in a structured, commonly used, machine-readable format; (g) Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing; (h) Right to lodge a complaint: you have the right to lodge a complaint with the Information Regulator of South Africa at inforeg.org.za if you believe we have processed your personal information in violation of POPIA. To exercise any of these rights, please email hello@plaitek.com. We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.
You have the right to request the deletion of all personal data associated with your account. To request deletion of your data, email hello@plaitek.com with the subject line "Data Deletion Request" and include the email address associated with your account. We will verify your identity and process your request within 72 hours. Upon processing, we will permanently delete: (a) your account and profile information; (b) all programme content including CV text, evidence, and reflections; (c) usage data and analytics linked to your account; (d) any third-party login connections (e.g. Facebook, Google). You will receive a confirmation email once your data has been deleted. Please note that certain data may be retained where required by law (see Section 11).
We take the security of your personal information seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include: (a) Encryption of data in transit using industry-standard TLS/HTTPS protocols; (b) Encryption of data at rest within our Firebase database infrastructure; (c) Access controls ensuring that only authorised Plai personnel can access personal data, on a need-to-know basis; (d) Regular security reviews of our systems and practices; (e) Strong password requirements and multi-factor authentication for platform access. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a security breach that is likely to result in harm to you, we will notify you and the Information Regulator as required by law.
The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18 without parental consent, we will take steps to delete that information as soon as possible. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at hello@plaitek.com.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will notify you by email and/or by posting a prominent notice on the Platform prior to the change becoming effective. The date of the most recent revision will be indicated at the bottom of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Information Officer at: hello@plaitek.com. We are committed to working with you to resolve any concerns about your privacy. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa. Last updated: April 2026.
You can review or update your cookie preferences at any time. .