Last updated: March 14, 2026
1.1. Welcome to Dataseka. This Privacy Policy explains how Dataseka (Pty) Limited ("Dataseka", "we", "us", "our") collects, uses, shares, protects, and otherwise processes your Personal Information when you use our website, web application, data analytics platform, and related Business Intelligence services (collectively, the "Platform" or "Services").
1.2. We are committed to protecting your privacy and processing your Personal Information lawfully, transparently, and securely, in accordance with the South African Protection of Personal Information Act, 4 of 2013 ("POPIA"), the European General Data Protection Regulation ("GDPR") where applicable, and other relevant data protection legislation.
1.3. By registering for or using our Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of our Terms of Service.
1.4. Definitions:
2.1. Dataseka acts as the Data Controller for Personal Information related to your account, platform usage, and administrative functions. For Customer Data that you upload to the Platform, you remain the Data Controller, and Dataseka acts as a Data Processor on your behalf.
2.2. Our designated Information Officer is the Chief Technology Officer (CTO).
2.3. If you have any questions about this Privacy Policy or how we handle your Personal Information, please contact our Information Officer at:
We collect various types of Personal Information necessary to provide our Platform, comply with legal obligations, and manage our services. This includes:
4.1. Directly from You: When you create an account, complete your profile, upload data, configure dashboards, or communicate with our support team.
4.2. Automatically: When you use our Platform, we automatically collect Technical Information and Platform Usage Data through cookies, logs, and analytics tools.
4.3. From Third Parties: We may receive information from payment processors, authentication services (e.g., Google OAuth, Microsoft SSO), or public sources for security and fraud prevention purposes.
We process your Personal Information only for specific, explicit, and legitimate purposes, based on valid legal grounds:
Purpose includes: Creating and managing your account; Providing data analytics, visualization, and BI tools; Processing and storing your Customer Data; Enabling collaboration features; Providing customer support; Managing subscriptions and billing.
Legal basis: Necessary to perform our contract with you (Terms of Service).
Purpose includes: Storing, processing, analyzing, and visualizing data you upload; Enabling you to create dashboards, reports, and insights; Facilitating data sharing within your organization.
Legal basis: Processing according to your instructions as Data Controller (Data Processing Agreement).
Purpose includes: Monitoring for suspicious activity and unauthorized access; Protecting against cyber threats, data breaches, and fraud; Troubleshooting technical issues; Maintaining data backups and disaster recovery systems.
Legal basis: Our legitimate interest in maintaining platform security and protecting user data.
Purpose includes: Analyzing usage patterns to enhance functionality; Developing new features and capabilities; Optimizing platform performance; Conducting research and analytics (using aggregated, anonymized data).
Legal basis: Our legitimate interest in improving our Platform and user experience.
Purpose includes: Responding to legal requests, subpoenas, and court orders; Meeting tax and accounting requirements; Complying with data protection and privacy laws; Cooperating with regulatory investigations.
Legal basis: Necessary for compliance with legal obligations.
Purpose includes: Sending product updates, feature announcements, and educational content; Promoting webinars, events, and training programs.
Legal basis: Your consent (opt-in during registration; you can opt-out anytime).
We do not sell your Personal Information or Customer Data. We may share information only in the following circumstances:
6.1. With Service Providers (Data Processors): We use trusted third-party service providers to perform functions on our behalf:
We have contracts requiring these providers to protect your information, use it only for our specified purposes, and comply with applicable data protection laws.
6.2. With Other Platform Users (As You Direct): When you share dashboards, reports, or data with team members or external collaborators through our collaboration features.
6.3. Legal and Regulatory Authorities: When required by law, court order, or regulatory request, or when necessary to protect our rights, prevent fraud, or ensure platform security.
6.4. Professional Advisors: We may share information with lawyers, auditors, or consultants under duties of confidentiality for legal or business advice.
6.5. Business Transfers: If Dataseka undergoes a merger, acquisition, or asset sale, your Personal Information may be transferred, subject to the receiving party maintaining similar privacy commitments.
6.6. With Your Consent: We may share your information with other parties when you have explicitly consented.
7.1. Our Platform is hosted on Google Cloud Platform infrastructure, which may involve data being stored or processed in data centers located outside of South Africa, including in the United States, Europe, and other regions.
7.2. Some of our service providers may also be located outside South Africa, which may result in international data transfers.
7.3. When transferring Personal Information internationally, we implement appropriate safeguards to ensure adequate protection:
7.4. You may choose specific regions for Customer Data storage based on your subscription plan. Please contact us to discuss data residency requirements.
8.1. We implement comprehensive technical and organizational measures to protect the security, confidentiality, and integrity of your Personal Information and Customer Data:
8.2. You are responsible for maintaining the confidentiality of your account credentials and securing devices used to access the Platform. Please notify us immediately if you suspect unauthorized access.
8.3. Data Breach Notification: In the event of a data breach likely to result in risk to your rights and freedoms, we will notify affected users and relevant data protection authorities as required by law, typically within 72 hours of becoming aware of the breach.
9.1. We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.
9.2. Retention periods:
9.3. Upon account termination or deletion request, we will securely delete or de-identify your Personal Information, except where retention is necessary for legal compliance, dispute resolution, or enforcing our agreements.
9.4. You can delete Customer Data at any time through the Platform interface. Deleted data is permanently removed from active systems within 30 days and from backups within 90 days.
You have the following rights regarding your Personal Information. Contact us at hello@dataseka.com to exercise these rights:
10.1. Right of Access: Request confirmation of whether we hold your Personal Information and obtain a copy of that information.
10.2. Right to Correction: Request correction of inaccurate, incomplete, or outdated Personal Information. You can update some information directly in your account settings.
10.3. Right to Deletion (Erasure): Request deletion of your Personal Information when it's no longer necessary, consent is withdrawn, or you object to processing (subject to legal retention obligations).
10.4. Right to Object: Object to processing based on legitimate interests, or object to direct marketing at any time.
10.5. Right to Restrict Processing: Request restriction of processing in certain circumstances (e.g., while verifying accuracy or contesting lawfulness).
10.6. Right to Data Portability: Receive your Personal Information in a structured, commonly used, machine-readable format, or request direct transfer to another service provider where technically feasible.
10.7. Right to Withdraw Consent: Withdraw consent at any time for processing based on consent (e.g., marketing communications). Withdrawal doesn't affect prior processing.
10.8. Right to Lodge a Complaint: Lodge a complaint with the South African Information Regulator or your local data protection authority if you believe we're processing your information unlawfully.
10.9. We will respond to requests within 30 days. For complex requests, we may extend this by an additional 30 days with notification.
South African Information Regulator:
Users in the European Economic Area may contact their local supervisory authority. Users in other jurisdictions should contact their relevant data protection authority.
12.1. We use cookies and similar technologies to enhance platform functionality, analyze usage, and improve user experience.
12.2. Types of cookies we use:
12.3. You can control cookie preferences through your browser settings. Note that disabling essential cookies may affect platform functionality.
13.1. Our Platform is designed for business use and is not intended for individuals under 18 years of age.
13.2. We do not knowingly collect Personal Information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.
14.1. When you upload Customer Data containing Personal Information to our Platform, you act as the Data Controller, and you are responsible for:
14.2. Our Data Processing Agreement (DPA) details our respective obligations. Please review it carefully.
Our Platform may contain links to third-party websites, integrations, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any Personal Information.
16.1. We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or industry standards.
16.2. The "Last updated" date at the top indicates when the latest revisions were made.
16.3. We will notify you of material changes via email or prominent notice on our Platform at least 30 days before the changes take effect. Your continued use of our Platform after changes become effective constitutes acceptance of the updated Policy.
16.4. We maintain an archive of previous versions. Contact us if you wish to review a prior version.
If you have questions, concerns, or wish to exercise your rights regarding your Personal Information, please contact us:
© 2026 Dataseka (Pty) Limited. All rights reserved.