Privacy Notice

Last updated: 2 October 2026

1. Who is responsible

MALIPAY VAS T/A RETAIL & DISTRIBUTION GROUP, trading as iMind Business, is the data controller for personal data processed through the Service. Contact: support@imindbusiness.com.

2. Data we collect

  • Account data: name, email address, login credentials, company and role.
  • Content you provide: emails and WhatsApp messages you forward, tasks, comments, documents, contacts, reports and spreadsheets.
  • Payroll data entered by authorised admins: employee names, ID numbers, bank details and salaries.
  • Support messages you send us.
  • Usage and technical data: IP address, device and browser identifiers, logs.

3. Why we use it and legal basis

  • To create your account and provide the Service, including AI reading of messages you send — performance of contract.
  • To keep the Service secure and prevent fraud — legitimate interests.
  • To improve the Service and provide support — legitimate interests.
  • To send product updates where you agree — consent (you can withdraw at any time).
  • To meet legal and tax obligations — legal obligation.

4. Who we share it with

  • Service providers who host and run the Service (cloud hosting, AI processing, email and WhatsApp delivery).
  • Paddle.com, our Merchant of Record, for selling credits, payments, tax compliance and invoicing.
  • Professional advisers (legal, accounting).
  • Authorities where required by law.

Some providers may process data outside South Africa; we use contractual safeguards to protect it.

5. Retention

We keep data while your account is active and as needed for legal obligations, then delete or anonymise it.

6. Your rights

Under the Protection of Personal Information Act (POPIA) and other applicable laws, you may request access to, correction or deletion of your personal data, object to processing, and withdraw consent. You may also complain to the Information Regulator of South Africa. Contact support@imindbusiness.com.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and per-company data separation.

8. Cookies

We use only essential browser storage needed to keep you signed in and remember your preferences. We do not use advertising cookies.