Privacy Policy

Last updated: April 2026

This Privacy Policy describes how Zapi (zapi.co.za) collects, uses, and protects your personal information when you use our Service. It is written to comply with the Protection of Personal Information Act (POPIA) of South Africa.

Who We Are

Zapi is a South African platform providing digital business profiles and NFC business cards. References to "We", "Us", or "Our" in this policy refer to Zapi.

Information We Collect

Information you provide directly

• Account information: your name, email address, and password when you register.
• Business profile information: your business name, contact number, address, services, photos, and social media links.
• Order information: your billing address and order details when you purchase an NFC card. Payment details are handled by PayFast and are not stored by Zapi.

Information collected automatically

• Usage data: pages visited, time spent on pages, referring URLs, and device information.
• Log data: IP address, browser type, and browser version.

We use cookies to maintain your session and improve the Service. See our Cookie Policy for details.

How We Use Your Information

We use your information to:

• Create and maintain your account and business profile.
• Process NFC card orders and communicate order status.
• Display your business in the Zapi directory if you choose to be listed.
• Send transactional emails (order confirmations, account notifications).
• Analyse usage patterns to improve the Service.
• Comply with legal obligations under South African law.

We do not sell your personal information to third parties.

Your Rights Under POPIA

As a data subject under POPIA you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated personal data.
• Object to processing of your information for direct marketing purposes.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact us at privacy@zapi.co.za.

Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

Security

We implement industry-standard security measures to protect your data, including encryption in transit (HTTPS) and secure cloud storage via Google Firebase. No method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Third-Party Services

We use the following third-party services that may process your data:

• Firebase (Google): cloud database and storage.
• PayFast: payment processing for NFC card orders.
• Resend: transactional email delivery.

Each of these providers operates under their own privacy policies.

Changes to This Policy

We may update this policy from time to time. We will notify you by email or prominent notice on the Service when material changes are made.

Contact

For privacy questions or to exercise your rights, contact us at privacy@zapi.co.za.