Privacy Notice
Last updated: 20 June 2026
1. Who we are
WinStream SA is operated by Native Digital Media (Pty) Ltd, a company registered in South Africa under registration number 2025/980214/07 ("we", "us"). We act as the data controller (or "responsible party" under POPIA) for the personal information processed through the Service.
2. Information we collect
- Account details: name, email address, login credentials, and authentication identifiers from Google sign-in.
- Content you create: quotes, proposals, client records, chat prompts and AI outputs you generate in the Service.
- Contact and support data: messages you send to us and metadata of those communications.
- Usage and telemetry: pages viewed, features used, AI credit usage, timestamps, and error logs.
- Device data: IP address, browser type, device identifiers, and approximate location derived from IP.
3. Why we use it (purposes and legal basis)
- To create and manage your account and deliver the Service — performance of a contract.
- To process payments and manage subscriptions through Paddle — performance of a contract.
- To secure the Service, prevent fraud, and enforce our Terms — legitimate interests.
- To improve and develop new features (using aggregated or de-identified data where possible) — legitimate interests.
- To provide customer support — performance of a contract / legitimate interests.
- To send service-related and marketing communications — legitimate interests / consent, with an opt-out in every marketing email.
- To comply with legal, accounting and tax obligations — legal obligation.
4. Who we share it with
- Paddle — our Merchant of Record for payments, subscription management, invoicing and tax compliance.
- Hosting and infrastructure providers — to operate the application, database, storage, and email delivery.
- AI model providers — to process your prompts and return AI outputs. We do not knowingly send sensitive personal data to AI providers.
- Analytics providers (e.g. Google Analytics) — to understand aggregate Service usage.
- Professional advisers — legal, accounting, and similar advisers where reasonably required.
- Authorities — where required by law or to protect rights, property or safety.
We do not sell your personal information.
5. International transfers
Some of our service providers (including Paddle, our hosting platform and AI model providers) are located outside South Africa, including in the EU, UK and USA. Where personal information is transferred internationally we rely on appropriate safeguards such as the recipient being in a country with adequate data-protection laws, the provider's binding contractual commitments, or Standard Contractual Clauses.
6. Retention
We keep personal information for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and dispute-resolution requirements. When data is no longer needed it is deleted or anonymised. You may ask us to delete your account at any time (see your rights below).
7. Security
We apply appropriate technical and organisational measures to protect your data, including TLS encryption in transit, encryption at rest by our managed database provider, role-based access controls, and row-level security policies. No system is perfectly secure, and you also have a role to play by keeping your credentials safe.
8. Your rights
Subject to applicable law (including POPIA in South Africa and the GDPR/UK GDPR where relevant), you have the right to:
- Access the personal information we hold about you;
- Request correction of inaccurate data, or deletion of data we no longer need;
- Object to or restrict certain processing, and withdraw consent at any time;
- Request a portable copy of data you provided to us;
- Lodge a complaint with the South African Information Regulator (or, in the EU/UK, your local supervisory authority).
To exercise these rights, email info@winstreamsa.co.za. We aim to respond within one month.
9. Cookies
We use a small number of cookies and similar technologies: essential cookies to keep you signed in and the Service working, and analytics cookies (Google Analytics) to understand aggregate usage. You can manage cookies through your browser settings.
10. Changes to this notice
We may update this Privacy Notice from time to time. We will post the updated version on this page and update the "Last updated" date above.
11. Contact
Native Digital Media (Pty) Ltd · Registration 2025/980214/07 · South Africa · info@winstreamsa.co.za