Back to Home
Privacy DocumentPOPIA · South AfricaEffective: March 2026

E-Planner

Privacy Policy

Protection of Personal Information Act 4 of 2013 (POPIA) · South Africa

Your privacy matters to us. This policy explains what personal information we collect, why we collect it, how we protect it, and what your rights are. We have kept it as plain as possible.

1. Who We Are

E-Planner (“us”) is the Responsible Party for your personal information under POPIA. Reachable at eplanner.support@gmail.com.

2. What We Collect

We collect only what we need to provide our service:

  • Identity information: full name, South African ID number or passport number
  • Contact details: email address, phone number
  • Estate information: assets, liabilities, property details, investment accounts, insurance policies
  • Beneficiary details: names, ID numbers, and contact details of people you name in your plan
  • Account data: login credentials, subscription history, platform usage
  • Technical data: device type, browser, IP address, and cookies (see Section 7)

We may also collect sensitive information — including health data (for insurance planning), financial account details, and family structure information — but only with your explicit consent.

3. Why We Collect It

We use your information for the following purposes:

  • To provide and improve the E-Planner platform
  • To generate estate planning insights and documents for you
  • To manage your subscription and process payments
  • To send you service-related communications (e.g. security alerts)
  • To send marketing communications, but only if you have opted in
  • To comply with legal and regulatory obligations (including FICA and POPIA)

We do not use your information for any purpose not listed here without first obtaining your consent.

5. Who We Share It With

We do not sell your personal information. We share it only with:

  • Supabase — hosted authentication, database, and file storage for the platform (data processing under their terms and DPA).
  • Resend — transactional email delivery (e.g. account notifications) where configured.
  • Vercel Analytics — privacy-friendly, anonymous usage metrics where enabled on the deployment.
  • Hosting provider (e.g. Fly.io or similar for your deployment) — to run the application and serve content.

Payment processor: when paid plans are offered, we will use a South Africa–appropriate provider (e.g. PayFast, Peach Payments, or similar) and update this section with the exact name before charging card or EFT payments.

Each processor is engaged for service delivery only. Where data is transferred outside South Africa, we ensure appropriate safeguards as required by POPIA Section 72, including standard contractual clauses or adequacy decisions where applicable.

6. How Long We Keep It

We keep your personal information for as long as your account is active and for a period of 5 years thereafter, or as required by law. Estate-related documents may need to be retained longer for legal reasons.

When retention is no longer required, we securely delete or anonymise your data.

7. Cookies

We use cookies to make the platform work and to understand how it is used. Strictly necessary cookies (required for login and security) are always active. We will ask for your consent before placing any analytics or marketing cookies.

You can manage your cookie preferences at any time in your account settings or through your browser.

8. Automated Decision-Making

E-Planner uses automated systems and artificial intelligence to generate estate planning insights from the information you provide. These outputs are not decisions that legally affect you — they are tools to help you plan. You are never bound by them, and you can always seek a human professional's view.

9. How We Protect Your Information

We take security seriously, particularly because estate data is sensitive. Our measures include:

  • Encryption of data in transit (TLS 1.2 or higher) and at rest where supported by our providers
  • Strict access controls — only authorised roles can access personal data, and only when necessary
  • Regular dependency and configuration reviews; incident response procedures with our providers

If a data breach occurs that poses a risk to your rights, we will notify the Information Regulator and, where required, you personally, within the timeframes required by POPIA.

10. Your Rights Under POPIA

You have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or outdated information
  • Request deletion of your information (subject to legal retention requirements)
  • Object to processing for direct marketing purposes
  • Withdraw consent at any time (this will not affect the lawfulness of prior processing)
  • Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at eplanner.support@gmail.com. We will respond within 30 days as required by POPIA.

Information Regulator: inforegulator.org.za | complaints@inforegulator.org.za | 010 023 5207

11. Changes to This Policy

We will notify you by email if we make material changes to this policy, at least 14 days before those changes take effect. The current version is always available at /privacy.

12. Contact