Privacy Policy
Last updated: 1 June 2026
1. Who we are
Komilfo ("we", "our", "us") operates the Komilfo platform — a multi-tenant business operating system available at komilfo.com and related subdomains. This policy explains how we collect, use, and protect information in connection with our services.
Contact: privacy@komilfo.com · Cape Town, South Africa
2. Information we collect
Company name, industry, contact details, billing information, and the data you and your team enter into your Komilfo workspace.
IP addresses, browser type, pages visited, feature usage, and error reports — used to improve the platform and for security.
Payment processing is handled by Paystack. We do not store raw card numbers. We receive transaction confirmations and subscription status.
3. How we use your information
- To provision and operate your Komilfo workspace
- To process payments and manage your subscription
- To send transactional emails (invoices, password resets, alerts)
- To provide customer support and respond to your queries
- To improve the platform — using aggregated, anonymised analytics
- To comply with legal obligations (POPIA, GDPR where applicable)
We do not sell your personal information to third parties. We do not use your workspace data to train AI models.
4. Data isolation & security
Every Komilfo workspace is provisioned in its own isolated PostgreSQL schema. Your data is never stored alongside another organisation's data. All data is encrypted in transit (TLS 1.2+) and at rest. Access is controlled by role-based permissions within your workspace.
5. Data retention
Your data is retained for as long as your subscription is active. On cancellation, your workspace is archived for 30 days during which you can export your data. After 30 days, data is permanently deleted. You can request deletion at any time by contacting privacy@komilfo.com.
6. Third-party services
We use a small number of third-party services: Paystack (payment processing), AWS (hosting infrastructure), SendGrid / SMTP providers (email delivery), and Google Analytics (anonymised website traffic). Each provider has its own privacy policy.
7. Your rights (POPIA & GDPR)
You have the right to access, correct, export, and delete your personal information. South African users are protected under the Protection of Personal Information Act (POPIA). EU/UK users are protected under GDPR. To exercise any right, email privacy@komilfo.com. We will respond within 30 days.
8. Cookies
We use essential cookies for authentication and session management. We use analytics cookies to understand platform usage. You can disable non-essential cookies in your browser settings or in your account preferences.
9. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email to account owners at least 30 days before taking effect.
10. Contact us
For any privacy-related questions or requests: privacy@komilfo.com
Komilfo · Cape Town, South Africa