Privacy Policy

Last updated: 10 July 2026 · Version 1

MyPropInsight — Privacy Policy

Last updated: 2026/07/10
1. Introduction

MyPropInsight (Pty) Ltd (Registration No. 2011/007952/07) ("MyPropInsight", "we", "our", or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, mobile application, dashboards, and services (collectively, the "Service").

We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable data protection laws. By using MyPropInsight, you acknowledge that your information will be processed in accordance with this policy.

Information Officer: privacy@mypropinsight.com

2. Information We Collect
2.1 Information You Provide
> Account Information: Name, email address, phone number, and account security information
> Identity Verification (if you choose to verify): Your South African identity number, submitted for deed-linked ownership verification. See Section 2.4 for how this is protected.
> Property Information: Property address, details, photographs, documents, improvement and maintenance records, appliance information, and data you enter into Platform tools and calculators
Enquiry and Communication Data: Enquiries submitted via the Platform and communications with us or with service providers you engage through the Platform
> Payment Information: Billing details, subscription information, and transaction records. Card details are processed by our authorised payment provider and are not stored by MyPropInsight.

2.2 Information Automatically Collected
Device Information: Device type, operating system, and technical identifiers
Usage Data:
> Pages visited, features used, and interaction data necessary to operate and improve the Service
> Location Data: Approximate location and IP address, where required for the Service or with your consent
> Technical Data: Log files, error reports, and performance data
> Advertising and Analytics Data (public pages only): On our public website and landing pages, advertising platform pixels (such as Meta and Google) may collect device identifiers, IP address, and page interaction data for campaign measurement and remarketing, as described in Section 8. These technologies are not used inside the authenticated Platform.

Beyond the above, we do not build behavioral advertising profiles, and we do not collect usage data beyond the scope described in this policy without your consent.

Photographs: Location metadata (EXIF data) is automatically removed from photographs you upload before they are stored.

2.3 Information from Third Parties and Public Records
Property and ownership data from deeds records, municipal valuation rolls, and other public and licensed data sources, used to provide property intelligence features
Verification results returned by our identity verification provider (e.g., verification status and reference identifiers), where you choose to complete verification
Credit-related information, only where you expressly request a feature that requires it and provide the required consent

2.4 Identity Number Protection
Where you submit your South African identity number for ownership verification:
> Your identity number is used transiently to perform the verification and is not stored in plain form.
> We retain only a one-way cryptographic hash of the identity number, together with the verification outcome, timestamps, and reference identifiers required for audit and security purposes
> Your identity number is never displayed on the Platform, included in notifications or emails, or written to system logs

We do not collect or store biometric data

3. How We Use Your Information
We use the collected information for the following purposes:
> Service Provision: To provide, maintain, and improve the Platform, including Opinions of Value, property records, calculators, and reports
> Verification: To confirm your identity and link you to your property's ownership records where you request it
Communication: To send statements, updates, alerts, and important
information about your account and property, in accordance with your notification preferences
> Referrals: To facilitate introductions to licensed service providers, where you request them
> Analytics: To analyse aggregate usage patterns and improve features
> Security: To detect, prevent, and address fraud, security issues, and violations
> Legal Compliance: To comply with legal obligations, including POPIA, the Consumer Protection Act, and other regulations
> Marketing: To send promotional communications, only with your consent, which is specific per channel and may be withdrawn at any time

We do not sell your personal information.

4. How We Share Your Information
We may share your information in the following circumstances:
4.1 With Service Providers (Operators)
Cloud hosting and infrastructure providers
Payment processors
Email and communication service providers
Identity verification providers, to process a verification you request and return a result
Analytics and monitoring services
Advertising platforms, limited to campaign measurement and remarketing data collected on our public pages as described in Section 8.2
Operators process personal information on our behalf under written agreements consistent with POPIA.

4.2 With Licensed Providers You Engage
Where you request a referral (for example, bond origination or insurance), the information reasonably required for that referral is shared with the relevant licensed provider, and their privacy terms will also apply. Where your account originated through a distribution partner, referrals may be routed to designated partner providers.

4.3 With Distribution Partners
Where your account is attributed to a distribution partner, limited account and activity information may be shared with that partner for attribution, reporting, and remuneration purposes, in aggregated or minimised form wherever possible.

4.4 Legal Requirements
When required by law, court order, or government regulation
To protect our rights, property, or safety, or that of our users
In connection with legal proceedings or investigations

4.5 Business Transfers
In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to this policy and applicable law.

5. Data Security
We implement appropriate, industry-standard security measures to protect your information:
> Encryption: Encryption for data in transit (TLS) and at rest where appropriate
> Access Controls: Role-based access and least-privilege principles, enforced at the database level
> Identity Data: One-way hashing of identity numbers as described in Section 2.4
> Monitoring: Security monitoring and logging to detect suspicious activity
Backups: Regular backups and recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. We will notify you and the Information Regulator of a data breach as required by section 22 of POPIA.

6. Your Rights Under POPIA
As a data subject, you have the following rights:
> Right to Access: Request access to the personal information we hold about you
> Right to Correction: Request correction of inaccurate or incomplete information
> Right to Deletion: Request deletion of your personal information, subject to legal obligations.
> Right to Object: Object to processing of your personal information for certain purposes, including direct marketing.
> Right to Restrict Processing: Request restriction of processing in certain circumstances.
> Right to Data Portability: Request transfer of your data to another service provider.
Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis, at any time.
Right to Lodge a Complaint: Lodge a complaint with the Information Regulator.

To exercise these rights, contact us at privacy@mypropinsight.com.

7. Data Retention
We retain your personal information for as long as necessary to:
> Provide our services and maintain your account.
> Comply with legal obligations and regulatory requirements (including FICA and tax record-keeping periods where applicable).
> Resolve disputes and enforce our agreements.
> Maintain transaction records for audit and compliance purposes.

When you delete your account, we will delete or anonymise your personal information, except where we are required to retain it for legal or regulatory purposes. Property-level data derived from public records is not personal information about you and may be retained.

8. Cookies and Tracking Technologies
We use cookies and similar technologies in two distinct ways:
8.1 Essential and Functional Cookies (entire Service).
> Keeping you signed in and remembering your preferences.
> Analysing usage patterns to improve our services.
> Ensuring security and preventing fraud.

These are necessary for the Platform to function and are used throughout the Service.

8.2 Advertising and Remarketing Cookies (public pages only)
On our public website and landing pages, we use advertising cookies and pixels from third-party platforms (such as Meta and Google) to:
> Measure the effectiveness of our marketing campaigns.
> Show you relevant MyPropInsight advertising on other platforms you use (remarketing).
> Build aggregated, non-identifying audiences for advertising purposes

These technologies are governed by the privacy policies of the respective advertising platforms and may involve the transfer of data outside South Africa. We do not use advertising or remarketing cookies inside the authenticated Platform — your activity as a signed-in homeowner is not shared with advertising platforms.

You can manage advertising cookies via the notice displayed on our website, your browser settings, or the opt-out tools provided by the advertising platforms (including Meta Ad Preferences and Google Ads Settings). Declining advertising cookies does not affect Platform functionality.

Where information gathered through these technologies is used for direct marketing by electronic means, we will only do so in accordance with section 69 of POPIA, and every such communication will include a means to opt out.

9. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers
Your information may be stored or processed in countries other than South Africa by our hosting and service providers. Where this occurs, we ensure appropriate safeguards are in place in accordance with section 72 of POPIA, this Privacy Policy, and applicable data protection laws.

11. Third-Party Links
Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
> Posting the new Privacy Policy on this page and updating the "Last Updated" date
> Sending you an email or in-Platform notification for significant changes
> Your continued use of our services after the changes take effect constitutes acceptance of the updated policy.

13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
> MyPropInsight — Privacy
Email: legal@mypropinsight.com
> Information Officer:
privacy@mypropinsight.com

For complaints under POPIA, you may also contact the Information Regulator:
Website: www.inforegulator.org.za
Email: enquiries@inforegulator.org.za