Privacy Policy

1. Who We Are

TeboaTech (Pty) Ltd ("TeboaTech", "we", "our", "us") is a South African technology company that builds and operates Teboa, an AI-powered eCommerce operating system designed to help Shopify store owners automate operations, manage customers, and grow revenue.

Our registered address is in South Africa. You can contact us at privacy@teboatech.com for any privacy-related queries.

2. What Information We Collect

2.1 Information You Give Us Directly

• Full name and email address when you sign up or contact us
• Business name and Shopify store URL when you connect your store
• Payment information processed through our secure billing provider (we do not store card details directly)
• Messages and enquiries you send through our contact form
• Plan preferences and service selections

2.2 Information From Your Shopify Store

When you connect your Shopify store to Teboa, we access the following data through the Shopify API to provide our services:

• Order data: order IDs, amounts, statuses, fulfilment details
• Customer data: names, email addresses, purchase history (your store's customers)
• Product data: product names, SKUs, inventory levels, pricing
• Store performance metrics: revenue, conversion rates, average order value
• Automation triggers: abandoned carts, order events, customer actions

2.3 Information We Collect Automatically

• IP address and general location (country/city level)
• Browser type, device type, and operating system
• Pages visited, time spent, and actions taken within the platform
• Session data and usage patterns to improve platform performance

2.4 AI Interaction Data

When you interact with our AI agents (Amy, Sino, Sessy, and JJ), the content of your conversations may be processed to generate responses. These interactions are used to provide the service and, in anonymised form, to improve AI accuracy. We never use your specific store data to train public AI models.

3. How We Use Your Information

We use your personal information only for the following purposes:

• Delivering the service: Running your dashboard, AI agents, automations, and store integrations
• Account management: Creating and managing your workspace, billing, and plan
• Customer support: Responding to queries, onboarding assistance, and technical help
• Platform improvement: Understanding how users interact with Teboa to fix bugs and add features
• Security: Detecting and preventing fraud, abuse, and unauthorised access
• Legal compliance: Meeting our obligations under South African and international law
• Communications: Sending service updates, feature announcements, and important account notices (you can opt out of marketing emails at any time)

We will never sell your personal information to third parties. We will never use your store's customer data for our own marketing purposes.

4. Third-Party Services We Use

To deliver Teboa, we work with the following trusted third-party providers. Each is bound by their own privacy policy and data processing agreements:

Firebase (Google LLC)

We use Firebase for database storage, user authentication, and file storage. Your workspace data is stored in Firebase. Google's infrastructure operates under GDPR and global privacy standards. Firebase Privacy Policy

Anthropic (Claude AI)

Our AI agents are powered by Claude AI from Anthropic. Queries sent to AI agents may be processed by Anthropic's API. We do not share personally identifiable information with Anthropic beyond what is necessary to process your request. Anthropic Privacy Policy

Vercel Inc.

Our platform and website are hosted on Vercel. Vercel may process request metadata (IP addresses, headers) as part of serving the application. Vercel Privacy Policy

Shopify Inc.

When you connect your store, Teboa integrates with Shopify's API under the permissions you grant during the OAuth authentication process. Shopify Privacy Policy

EmailJS

We use EmailJS to process contact form submissions. Data submitted through our contact form is transmitted through EmailJS to our inbox. EmailJS Privacy Policy

Google Analytics

We use Google Analytics to understand how visitors use teboatech.com. This includes page views, session duration, and general usage patterns. Analytics data is anonymised and aggregated. You can opt out using the Google Analytics Opt-out Browser Add-on.

5. Data Storage and Security

Your data is stored on Firebase infrastructure hosted primarily in cloud regions managed by Google. We implement the following security measures:

• All data is encrypted in transit using TLS 1.2 or higher
• Data at rest is encrypted by Firebase's default encryption
• Each business workspace is fully isolated. no data is shared between workspaces
• Access to production data is restricted to authorised TeboaTech personnel only
• Regular security reviews and access audits are performed

While we take every reasonable measure to protect your data, no system is completely immune to risk. If a data breach occurs that affects your personal information, we will notify you and relevant authorities within the timeframes required by applicable law.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Specifically:

• Active accounts: Data is retained for the duration of your subscription plus 30 days after cancellation to allow account recovery
• Deleted accounts: Personal data is deleted within 60 days of account deletion, except where we are required by law to retain it longer
• Shopify store data: Synced store data is deleted within 30 days of disconnecting your store
• Contact form submissions: Retained for up to 12 months for support purposes
• Analytics data: Anonymised and aggregated data may be retained indefinitely as it cannot be linked to individuals

7. Your Rights

Under POPIA and GDPR, you have the following rights regarding your personal information:

• Right of access: Request a copy of the personal information we hold about you
• Right to rectification: Ask us to correct inaccurate or incomplete information
• Right to erasure: Request deletion of your personal information ("right to be forgotten")
• Right to restriction: Ask us to limit how we process your data in certain circumstances
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise any of these rights, email us at privacy@teboatech.com. We will respond within 30 days. You will not face any penalty or service disruption for exercising your rights.

8. Cookies and Tracking

We use the following types of cookies and tracking technologies on teboatech.com:

• Essential cookies: Required for the platform to function. Cannot be disabled.
• Analytics cookies: Google Analytics cookies that help us understand site usage. You can opt out at any time.
• Session cookies: Temporary cookies that expire when you close your browser, used to maintain your login session.

We do not use advertising or retargeting cookies. We do not sell cookie data to any third party.

9. Cross-Border Data Transfers

Because we use services from Google (Firebase), Anthropic, and Vercel, your data may be processed in countries outside South Africa, including the United States. We ensure these transfers are protected through:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities
• Data Processing Agreements (DPAs) with each third-party provider
• The adequacy decisions and privacy frameworks applicable to each provider

10. Children's Privacy

Teboa is a business platform intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with their personal information, please contact us immediately at privacy@teboatech.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify active users via email at least 14 days before changes take effect
• Post a notice on our platform dashboard

Continued use of the Teboa platform after the effective date constitutes acceptance of the updated policy.