Finding Yeti (Pty) Ltd, operating Revvice, is the "responsible party" for your personal information under the Protection of Personal Information Act, 2013 (POPIA). This policy explains what we collect, why, and the choices you have. The short version: we collect what's needed to run the service, we never sell your data, and creators never see your email address.
1. What we collect
- Account details — your name and email address (via Google sign-in or the email you provide).
- Your questions and answers — the text, voice notes, photos and video you choose to send, and the creator's reply.
- Transaction records — what you paid, when, and its status. Card details are captured and stored by our payment partners — Paystack for payments in rand, Dodo Payments for other currencies — and never by us.
- Technical basics — device and log information used for security and to keep the service working, and error diagnostics when something breaks.
- Analytics, only if you agree — we use Google Analytics to understand which pages are useful. It is switched off until you accept it, and declining changes nothing about how the service works. See Cookies and analytics below.
If you are a creator, we also collect what we need to pay you: your real name, links to your published work so we can verify who you are, and the payout account you nominate. Payout details are visible only to our administrators — the database refuses to serve them to anyone else, including the pages you see.
2. Why we use it
We process your information to deliver the service (routing your question, holding and releasing payment, sending your answer), to notify you (receipts, answer alerts, refund confirmations), to keep the platform safe (fraud and abuse prevention), and to meet legal obligations (tax and accounting records). We don't use your content to train AI models, and we don't sell or rent personal information to anyone.
3. Who sees what
Creators see your question and your display name — never your email address or payment details. That is enforced in the database itself, not just hidden in the interface.
Our service providers process data on our behalf under contract: the application, database and file storage (Supabase), hosting (Vercel), payments (Paystack for rand, Dodo Payments for other currencies), transactional email (Resend), error monitoring (Sentry), and sign-in and analytics (Google). The full list, what each one sees and where they are, is on our Subprocessors page, which we keep current.
Most of these providers store data outside South Africa; where they do, we rely on their data processing agreements and standard contractual clauses, consistent with POPIA's cross-border transfer requirements. We disclose information to authorities only where the law requires it, and to our payment partners where we must to investigate fraud.
4. Cookies and analytics
We use a small number of essential cookies and similar storage to keep you signed in and to remember your cookie choice. These can't be switched off without breaking the service, so we don't ask permission for them.
For anything else we ask first. Google Analytics is not loaded at all until you accept it — not loaded in a restricted mode, not loaded with cookies disabled: no request is made to Google and no analytics cookie is set. If you accept and later change your mind, choose Cookie choices in the footer and decline; we delete the analytics cookies immediately. Declining costs you nothing — every feature works identically either way.
We use no advertising trackers, run no ad pixels, and do not build profiles of you for marketing.
5. How long we keep it
Account and thread content is kept while your account is active and for a reasonable period afterwards. Transaction records are retained for the periods required by South African tax and company law (typically five years). You can ask us to delete your account and content sooner; we'll keep only what the law obliges us to.
6. Your rights
Under POPIA you may ask us to confirm what personal information we hold about you, request a copy, ask for corrections or deletion, and object to certain processing. Email privacy@revvice.com and we'll respond within a reasonable time. If you're not satisfied, you may complain to the Information Regulator (South Africa) at inforeg.org.za.
If you are in the United Kingdom or the European Economic Area, the UK GDPR and GDPR give you equivalent rights — access, correction, erasure, restriction, portability, and objection — which you may exercise at the same address, and you may complain to your national data protection authority. We rely on the performance of our contract with you for the processing needed to deliver the service, your consent for analytics, and our legitimate interests in keeping the platform secure and preventing fraud.
7. Security
Data is encrypted in transit, access is restricted by role (for example, buyer contact details are technically inaccessible to creators), and payment card data never touches our systems. Where we capture diagnostics after an error, text and media are masked before they leave your browser. No internet service can promise perfect security, but we design for least access and will notify you and the Regulator of any breach as POPIA requires.
8. Children
Revvice is for adults. We don't knowingly collect information from anyone under 18; if you believe a minor has created an account, contact us and we'll remove it.
9. Changes and contact
We'll post any updates to this policy here with a new effective date and flag material changes by email. Privacy questions: privacy@revvice.com.