Privacy Policy

• Shop owner & staff data: name, email, phone, role, and shop profile (name, category, address).
• Your customers' data: name, phone number, WhatsApp opt-in status, and purchase history at your shop.
• Transaction data: sales, line items and payment method.
• Billing data: your shop's subscription plan, status, and transaction references from PayFast.
• Usage data: pages visited, feature events, device/browser info, IP address.
• Content: product catalogues, notes, and AI assistant queries and responses.

To provide and secure KasiOS, authenticate you, record sales, send WhatsApp notifications you or your customers opted into, generate AI business insights from your own data, provide support, prevent fraud, and improve the product through aggregated analytics.

We process personal information under the Protection of Personal Information Act (POPIA) on the basis of contract performance, legitimate interest, or consent. WhatsApp marketing messages to your customers are sent only where they have opted in, and can be turned off at any time from Settings.

When you record a customer, add them to a sale, or enable WhatsApp notifications, you are the responsible party for that person's information and we act as an operator on your behalf. You must have a lawful basis to collect and store your customers' data and must honour any request from them to opt out or be forgotten, which you can action from your Customers page or by contacting us.

We do not sell personal information. We share it only with service providers necessary to run KasiOS:

• PayFast — shop subscription billing.
• Meta / WhatsApp Business Platform — sending notifications you or your customers opted into.
• Make.com — workflow automation triggered by your shop's events.
• Supabase — cloud hosting, database and authentication.
• AI model providers, used to generate the insights and assistant responses you request.

Each processes data only on our instructions and only to the extent needed to provide their service.

Data is stored on managed cloud infrastructure with encryption in transit and access controls, including row-level database policies that isolate each shop's data from every other shop. We retain shop, staff and customer data while your account is active and for a reasonable period afterwards to meet legal, tax and accounting obligations, then delete or anonymise it. Sales records are retained where required for financial reconciliation and dispute resolution.

Some providers process data outside South Africa. Where that happens, we rely on providers that offer protections comparable to POPIA.

You, or any customer whose data you've recorded, may request access to, correction of, or deletion of personal information, object to processing, or withdraw consent. Email hello@thetrendsetta.com and we will respond within a reasonable period. You may also lodge a complaint with the South African Information Regulator.

We use cookies and browser storage to keep you signed in, remember preferences, and measure performance. Blocking them may break sign-in and other core features.

KasiOS accounts are not intended for anyone under 18. We do not knowingly collect account data from children; customer records you create for your own business remain your responsibility to collect lawfully.

We may update this policy and will post the new date at the top. Questions or privacy requests: hello@thetrendsetta.com.