Privacy Policy & POPIA Compliance
Last Updated: October 2026
Regulatory Notice
This document details the operational and legal policies of Techfusion Automata (Pty) Ltd. For full interactive subtabs including POPIA compliance and PAIA manual, visit the Legal Hub.
1. Introduction & Corporate Identity
Techfusion Automata (Pty) Ltd (Registration No: 2026/399837/07), operating its specialized artificial intelligence and workflow engineering division TechFusion Alchemy, and a subsidiary of Techfusion Ventures (https://techfusion-ventures.xyz) ("we", "us", "our"), is committed to safeguarding the privacy and security of your personal and business data. This policy outlines our standards under the Protection of Personal Information Act (POPIA, Act 4 of 2013 of South Africa) and international data privacy regulations including the General Data Protection Regulation (GDPR).
In Plain English
We are Techfusion Automata (Pty) Ltd, trading through our Alchemy division. We treat your personal and company information with the highest degree of confidentiality and strictly comply with South African POPIA and international data protection laws.
2. Zero AI Model Training Guarantee
Strict Prohibition on Model Training: Under no circumstances do we utilize, disclose, or permit third-party LLM providers to use your proprietary business workflows, client lists, communications, or personal records to train, retrain, fine-tune, or improve public machine learning models. All data transfers across integrated APIs are strictly ephemeral, non-persistent, and zero-data-retention where supported.
In Plain English
We will NEVER train AI models on your company data or customer records. Data sent to models is processed in memory and never used for public learning.
3. Information We Collect and Process
We process the following categories of data strictly for the performance of our engineering services:
- Contact & Consultation Data: Name, work email address, company name, and technical project specifications submitted via our booking and inquiry forms.
- Client Infrastructure & API Credentials: Webhook URLs, database connection strings, and API keys provided under a signed Mutual Non-Disclosure Agreement (NDA). All credentials are required to be housed in encrypted secret vaults (e.g. Supabase Vault / AWS Secrets Manager) using least-privilege scoping.
- Pipeline Telemetry: Anonymized execution timestamps, status codes, and error traces necessary for dead-letter queue resolution and automated incident alerting.
In Plain English
We only collect what we need to build and maintain your automations: your contact details, the API credentials you share under NDA, and technical error logs to fix issues quickly.
4. Data Security and Vault Storage
We employ enterprise-grade cryptographic controls. Client tokens and environment variables are never stored in unencrypted text files or public repositories. All data in transit is encrypted using TLS 1.3, and database records are safeguarded by Row-Level Security (RLS) and Key Management Service (KMS) encryption.
In Plain English
Your passwords and API keys are stored in secure digital vaults with bank-grade encryption. Nothing is left lying around in plain text.
5. POPIA Rights of Data Subjects
In accordance with POPIA, you have the right to request access to any personal information we hold, request corrections or updates, or demand the permanent deletion and certification of destruction of all data upon project conclusion.
In Plain English
You have full control over your data. You can ask us to show it to you, fix it, or wipe it completely at any time.
6. Information Officer Contact
For any queries or formal requests regarding this Privacy Policy or POPIA compliance, contact our Information Officer:
Techfusion Automata (Pty) Ltd
Attention: Muzikayise Khuzwayo (Information Officer)
Email: muzi@techfusion-alchemy.xyz
Parent Entity: Techfusion Ventures
Jurisdiction: Cape Town & Johannesburg, Republic of South Africa