Privacy Policy

Who we are

Duplios operates this independent decision-support prototype. It is not an official government platform.

Information we collect

Account details (email, name, password hash) for invitees.

Access requests and contact form submissions.

Feedback messages and related page context.

Browser/user-agent and security logs needed to operate the service.

Session cookies required for authentication.

What we do not collect in this preview

Payment card data.

Public screenshot uploads (not enabled).

Government identity numbers unless a user voluntarily pastes them into free-text fields (discouraged).

Purpose of processing

Provide authenticated preview access.

Respond to enquiries and access requests.

Maintain security and auditability.

Improve the prototype based on feedback.

Retention

Operational logs and audit events are retained for security and reproducibility.

Access requests and contact messages are retained until reviewed and then as needed for follow-up.

Users may request correction or deletion of account-related personal data via Contact → Privacy request.

Security

Passwords are stored as irreversible hashes.

TLS is used for public HTTPS.

Access to administrative functions is role-restricted.

POPIA context

We aim to respect South African POPIA principles of purpose limitation, minimisation and security.

This page is a good-faith prototype policy and does not claim formal POPIA certification or an appointed Information Officer.

Updates

We may update this policy as the product evolves. Material changes will be reflected on this page with a revised date.

Contact

Use /contact with enquiry type Privacy request.