Your data, handled with care.

• Microsoft Azure (Microsoft Corporation and its South African affiliate) — cloud hosting and infrastructure for the website and platform, including application hosting, database storage, backups, form processing and log storage. Platform and database processing stays in Azure's South Africa North region; no cross-border transfer basis is needed for that processing.
• Azure Communication Services (Microsoft Corporation) — sends transactional email (notifications, password-reset and verification mail) on our behalf. Processed within the Microsoft Azure environment under the same Microsoft agreement as our other Azure services; where this processing occurs outside South Africa, we rely on our written contract with Microsoft as the POPIA section 72 transfer basis.
• Microsoft Entra ID — handles sign-in. Sign-in runs through our Microsoft Entra External ID tenant, operated by Microsoft outside South Africa, using your organisation's work identity; we never receive your password. Our written contract with Microsoft is the POPIA section 72 transfer basis for this cross-border processing.
• Anthropic (Anthropic, PBC, United States) — AI model provider for optional AI-assisted features (status reports, starter WBS, RAID task suggestions, copilot), processing in the United States. It is used only when a tenant administrator enables those features, and receives only project titles, WBS labels, task titles and RAID titles — the minimum needed for each request. Tenant administrators can switch on redaction, which removes names and free-text titles before data is sent. Every AI-assisted output is a draft that a person must review and confirm before it is relied on, and your data is never used to train Anthropic's models. Our written contract with Anthropic is the POPIA section 72 transfer basis for this cross-border processing.
• Paddle (the applicable Paddle contracting entity) — acts as our authorised reseller and Merchant of Record. Paddle independently controls the buyer identity, billing, tax, payment, subscription and refund data needed to sell the subscription, issue receipts or invoices, and meet its legal obligations. Its handling is governed by the Paddle Privacy Notice.
• Paystack (Paystack Payments South Africa (Pty) Ltd) — a South African payment processor for South African purchases, processing within South Africa. Paystack processes buyer identity, payment, transaction, subscription and refund data on our instructions under a written processor agreement, and may process limited information independently to meet its legal obligations. CloudPMO remains the supplier, and Paystack is not a Merchant of Record. Paystack describes its own data handling in the Paystack Merchant Privacy Policy.
• Google Analytics (Google LLC) — optional website analytics that loads on the public website only after you accept analytics. It receives page-view and technical device data, your IP address and a random cookie identifier for the website and does not receive CloudPMO tenant or application events.
• Professional advisers and authorities — accountants, auditors, lawyers, and regulators or courts where disclosure is required by law or to protect our legal rights.
• Business transfer — a successor to our business, on notice to you and subject to this policy.

We will update this list before adding a new operator that processes Customer Data, and Customers under our Data Processing Agreement will be notified in advance with the opportunity to object.

• Contact form data — 12 months from your last enquiry, then deleted unless you become a Customer.
• Marketing consent and newsletter data — until you withdraw consent, then removed within 30 days; a suppression record is kept so we do not contact you again.
• Website analytics — GA4 data is retained for 14 months. The consent choice and GA4 cookies expire after 12 months unless the policy changes first.
• Account, identity and Customer Data — for the life of the subscription. Available for export for 30 days after termination, deleted from live systems after that, and purged from backups within a further 90 days.
• Trial tenants — deleted 30 days after the trial ends unless upgraded.
• Billing records — 7 years, as required by the Companies Act 71 of 2008 and the Tax Administration Act 28 of 2011.
• Security and audit logs — 12 months, longer if needed for an active investigation or legal claim.

• Access — confirm whether we hold personal information about you and receive a copy (POPIA s23). We may charge the prescribed fee for copies.
• Correction or deletion — ask us to correct inaccurate information or to delete information we no longer need (s24).
• Objection — object to processing based on legitimate interest, and object to direct marketing at any time (s11(3), s69).
• Withdraw consent — where processing relies on consent, withdraw it at any time without affecting earlier processing.
• Portability — Customers may export Customer Data from the platform at any time.
• Complain — lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za, or with your local supervisory authority if you are in the EEA or UK.

To exercise a right, email privacy@antsprojects.co.za. We will verify your identity, respond within 30 days, and tell you if we need longer. Apart from any prescribed fee for copies, requests are free unless they are manifestly unfounded or excessive. Our PAIA Manual, prepared under section 51 of the Promotion of Access to Information Act 2 of 2000, sets out how to request records and is also available on request from the same address.