Legal

Privacy Policy

Last updated: 21 June 2026 · Responsible party: Shadow Luminous t/a Swipes, South Africa.

1. Who we are

Shadow Luminous, trading as Swipes ("Swipes"), is the responsible party for the personal information processed through swipes.co.za. We comply with the Protection of Personal Information Act, 2013 (POPIA).

2. What we collect

  • Account data: email, password (hashed), username, display name.
  • Profile data you choose to publish: tagline, bio, phone, WhatsApp, public email, socials, links.
  • Uploaded files: avatar images and QR codes (max 5 MB each).
  • Billing data: a PayFast subscription token and payment status. We do not see or store your card details.
  • Technical data: IP address, browser, basic page-view counts.

3. Why we use it

To create and operate your account; to render your public profile page; to process subscription payments; to provide customer support; to keep the service secure; and to comply with our legal obligations.

4. Legal basis

Performance of our contract with you (the Terms), your consent for optional content you choose to make public, and our legitimate interest in operating a secure service.

5. Sharing

We share personal information only with operators that help us run Swipes:
  • Supabase, database, authentication, and storage hosting.
  • PayFast (Pty) Ltd, subscription billing.
  • Lovable Cloud, application hosting.
We do not sell your personal information.

6. Public profile

Anything you mark as "public" on your profile (display name, tagline, bio, links, public email, avatar, QR code) is visible to anyone with the URL and may be indexed by search engines. Phone and WhatsApp numbers are private unless you explicitly add them to a public link/button.

7. Retention

We keep your data while your account is active and for up to 12 months after closure for billing, tax, and dispute purposes, after which it is deleted or anonymised.

8. Your rights under POPIA

You may access, correct, or delete your personal information at any time from your dashboard, or by emailing us. You may also object to processing or lodge a complaint with the Information Regulator (South Africa).

9. Security

Data is encrypted in transit (TLS) and at rest. Passwords are hashed. Access to production systems is restricted to authorised personnel.

10. Cookies

We use strictly necessary cookies for authentication and session management only. We do not run third-party advertising or tracking cookies.

11. Contact

Shadow Luminous t/a Swipes · privacy@swipes.co.za