Plain-language legal.

Khanyisa Computer Systems ("Khanyisa", "we") collects and processes personal information in line with South Africa's Protection of Personal Information Act (POPIA) and, where relevant, the EU General Data Protection Regulation (GDPR).

What we collect

• Operator data: business name, sales transactions, stock movements, and configuration we process on your instruction as part of running the platform.
• Contact data: name, email, phone number, role and company — collected when you book a demo, submit a contact form, or open a support ticket.
• Usage data: standard server logs (IP, user agent, timestamp) for security and reliability.

How we use it

• To deliver the products you have subscribed to.
• To respond to enquiries and provide support.
• To improve product reliability and security.
• To meet our legal and regulatory obligations.

What we never do

• Sell or rent your personal information to third parties.
• Train external AI models on your operator data.
• Hold your data hostage — your data is yours, always exportable.

Today: rule-based analytics. Data is queried on infrastructure you (or we, on your behalf) control. Raw transaction data is not sent to external services.

For AI image generation: OpenAI's API is called only when a user clicks "Generate image". Inputs are an item name and description — never sales or customer data.

For upcoming model-driven features: we are evaluating private-hosted options (Azure OpenAI, AWS Bedrock) so customer data stays within your regulatory boundary. Where a deployment requires on-premise inference, we support that.

The full master service agreement is provided when you subscribe. The headline terms are these:

• SLA: POS uptime ≥ 99.5%, measured monthly. Response under 2 hours for critical faults during SA business hours.
• Data ownership: all operator data is and remains your property. We are a processor, not an owner.
• Exit: on termination we provide a full export of your data in a structured, machine-readable format. There is no vendor lock-in.
• Sub-processors: a current list is available on request. Any material change is notified at least 30 days in advance.
• Confidentiality: mutual, perpetual.

The marketing site uses essential cookies for navigation only. We may add privacy-respecting analytics (cookieless or first-party, anonymised) — when we do, this section will list them by name.

Privacy enquiries, access requests, and complaints under POPIA can be sent to info@khanyisa.net. We respond within 30 days. You may also lodge a complaint with the Information Regulator (South Africa).