Legal

Privacy Policy

Last updated: 27 June 2026 · Responsible party: Shadow Luminous t/a Swipes, South Africa.

1. Who we are

Shadow Luminous, trading as Swipes ("Swipes"), is the responsible party for the personal information processed through swipes.co.za. We comply with the Protection of Personal Information Act, 2013 (POPIA).

2. What we collect

  • Account data: email, password (hashed), username, display name.
  • Profile data you choose to publish: tagline, bio, phone, WhatsApp, public email, socials, links, selected theme.
  • Uploaded files: avatar images and QR codes (max 5 MB each).
  • Billing data: a PayFast subscription token and payment status. We do not see or store your card details.
  • Support data: in-app support tickets, cancellation requests, and admin notifications sent to your dashboard.
  • Technical data: IP address, browser, basic page-view counts.

3. Why we use it

To create and operate your account; to render your public profile page; to process subscription payments; to provide customer support; to keep the service secure; and to comply with our legal obligations.

4. Legal basis

Performance of our contract with you (the Terms), your consent for optional content you choose to make public, and our legitimate interest in operating a secure service.

5. Sharing

We share personal information only with operators that help us run Swipes:
  • Supabase, database, authentication, and storage hosting.
  • PayFast (Pty) Ltd, subscription billing.
  • Lovable Cloud, application hosting.
We do not sell your personal information.

6. Public profile

Anything you mark as "public" on your profile (display name, tagline, bio, links, public email, avatar, QR code) is visible to anyone with the URL and may be indexed by search engines. Phone and WhatsApp numbers are private unless you explicitly add them to a public link/button.

7. Retention

We keep your data while your account is active and for up to 12 months after closure for billing, tax, and dispute purposes, after which it is deleted or anonymised.

8. Your rights under POPIA

You may access, correct, or delete your personal information at any time from your dashboard, or by emailing us. You may also object to processing or lodge a complaint with the Information Regulator (South Africa).

9. Security

Data is encrypted in transit (TLS) and at rest. Passwords are hashed. Access to production systems is restricted to authorised personnel.

10. Cookies & analytics

We use strictly necessary cookies for authentication and session management. We also use privacy-conscious analytics — Google Analytics and the Meta (Facebook) Pixel — to measure aggregate site traffic and campaign performance. These set cookies in your browser. You can opt out at any time using your browser controls or an opt-out extension.

11. Account changes by Swipes

To keep usernames fair, prevent impersonation, and respect trademark rights, Swipes administrators may change your username, reset your password, or remove accounts and associated content (including uploaded files and stored profile data) in line with our Terms. When an administrator changes your username or resets your password, you will be notified in your dashboard and, where relevant, a new temporary password will be shared with you offline. You can reset your own password at any time from your dashboard.

12. Deleting your account

You can delete your account at any time from your dashboard. Deletion permanently removes your profile, links, uploaded files, support tickets, and authentication record. Anonymised billing records may be retained where required for tax or dispute purposes (see section 7).

13. Contact

Shadow Luminous t/a Swipes · privacy@swipes.co.za