privacy policy.

1. Introduction

This Privacy Policy explains how Moli Pty Ltd, trading as Lappie(“we”, “us”, “our”), collects, uses, stores, and protects your personal information when you access our website at lappie.ai and any associated services, tools, or platforms (collectively, the “Services”).

We are committed to safeguarding your privacy in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”), the Electronic Communications and Transactions Act 25 of 2002 (“ECTA”), and all other applicable South African legislation.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision herein, please discontinue use of the Services immediately.

2. Responsible Party

The responsible party for the processing of your personal information is:

• Company: Moli Pty Ltd
• Trading as: Lappie
• Registered address: 24a Belair Drive, Constantia, Cape Town, 7806, South Africa
• Contact email: oli@lappie.ai

For any queries relating to this Privacy Policy or to exercise your rights under POPIA, please contact us at oli@lappie.ai.

3. Personal Information We Collect

We may collect and process the following categories of personal information:

3.1 Information you provide directly

• Full name, email address, and any message content submitted through contact or enquiry forms.
• Email address submitted via our newsletter subscription form.
• Booking and scheduling information provided through our embedded Cal.com integration.
• Any other information you voluntarily provide through correspondence with us.

3.2 Information collected automatically

• Device information (browser type, operating system, screen resolution).
• IP address and approximate geographic location.
• Pages visited, time spent on pages, click interactions, and navigation patterns.
• Referring URLs and search terms used to reach our website.
• Cookie identifiers and session data (see Section 7).

3.3 Information from third-party services

We use third-party analytics, advertising, and scheduling platforms that may independently collect data. These include, but are not limited to, Google Analytics, Google Ads, Meta (Facebook/Instagram) Pixel, LinkedIn Insight Tag, and Cal.com. Each of these services operates under its own privacy policy, which we encourage you to review.

4. Purpose of Processing

We process your personal information for the following lawful purposes:

• To respond to enquiries, booking requests, and communications you initiate.
• To deliver newsletters, updates, and marketing communications you have opted into.
• To analyse website usage and improve our Services, user experience, and content.
• To serve relevant advertisements and measure campaign effectiveness across third-party platforms.
• To conduct A/B testing and variant analysis to optimise our website experience.
• To comply with legal obligations, enforce our terms, and protect our legitimate interests.
• To perform AI orchestration services as agreed under separate client engagement contracts, which may involve the processing of client-provided business data.

5. Legal Basis for Processing

We rely on the following legal grounds under POPIA:

• Consent: Where you have voluntarily provided personal information (e.g., newsletter signup, contact form submission).
• Contractual necessity: Where processing is required to fulfil a service agreement or respond to a pre-contractual request.
• Legitimate interest: Where processing is necessary for the operation, improvement, and security of our Services, provided such interest does not override your rights.
• Legal obligation: Where processing is required to comply with applicable laws or regulations.

6. Data Storage and Security

Your personal information is stored securely using industry-standard measures. Specifically:

• Newsletter and contact form data is stored in secured databases hosted on Supabase and SheetDB, both of which employ encryption at rest and in transit.
• Booking data is processed and stored by Cal.com in accordance with their privacy and security policies.
• Analytics data is processed by the respective third-party platforms (Google, Meta, LinkedIn) on their own infrastructure.

While we implement commercially reasonable technical and organisational measures to protect your personal information, including access controls, encryption, and secure transmission protocols, no method of electronic storage or internet transmission is entirely secure. We cannot guarantee absolute security, and you acknowledge that you provide information at your own risk.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies for the following purposes:

• Essential cookies: Required for core functionality, including session management.
• Analytics cookies: Placed by Google Analytics and similar tools to measure website traffic, user behaviour, and engagement metrics.
• Advertising cookies: Placed by advertising platforms (including Google Ads, Meta Pixel, and LinkedIn Insight Tag) to serve targeted advertisements, build audience profiles, and measure campaign performance.
• Third-party cookies: Set by embedded services such as Cal.com and YouTube for their operational purposes.

You may control or disable cookies through your browser settings. However, disabling certain cookies may impair the functionality of our website. By continuing to use our website without adjusting your cookie settings, you consent to the use of cookies as described herein.

8. Sharing of Personal Information

We do not sell, rent, or trade your personal information. We may share your information with:

• Service providers: Third-party platforms that assist in operating our Services (analytics, advertising, email, scheduling, and database hosting providers), each bound by their own privacy policies and, where applicable, data processing agreements.
• Legal authorities: Where required by law, regulation, legal process, or governmental request.
• Business transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, in which case your personal information may be transferred as part of that transaction.

Beyond the analytics and advertising platforms described in this policy, we do not share your personal information with any other third parties.

9. Cross-Border Transfers

Some of the third-party services we use may process and store data outside of South Africa, including in jurisdictions that may not offer the same level of data protection as POPIA. By using our Services, you consent to such cross-border transfers. We take reasonable steps to ensure that any third-party recipients of your data are bound by adequate data protection obligations.

10. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Newsletter subscription data is retained until you unsubscribe or request deletion.
• Contact form submissions are retained for up to 24 months from the date of submission.
• Analytics data is retained in accordance with the retention policies of the relevant third-party platforms.
• Client engagement data is retained for the duration of the engagement and for a reasonable period thereafter, as required by applicable law or contractual obligations.

11. Your Rights Under POPIA

As a data subject, you have the following rights under POPIA:

• The right to be informed of what personal information we hold about you.
• The right to request access to your personal information.
• The right to request correction or deletion of your personal information.
• The right to object to the processing of your personal information.
• The right to withdraw consent at any time, where processing is based on consent.
• The right to lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, please contact us at oli@lappie.ai. We will respond to your request within a reasonable period, and in any event within the timeframes prescribed by POPIA.

12. Children's Privacy

Our Services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a child under 18 without verifiable parental or guardian consent, we will take steps to delete that information promptly. If you believe a minor has provided us with personal information, please contact us at oli@lappie.ai.

13. Third-Party Links

Our website may contain links to third-party websites and platforms, including social media profiles on LinkedIn, Instagram, and YouTube. We are not responsible for the privacy practices, content, or security of any third-party sites. We encourage you to review the privacy policies of any external sites you visit.

14. Changes to This Policy

We reserve the right to update or amend this Privacy Policy at any time. Any changes will be posted on this page with an updated effective date. Your continued use of the Services following the posting of changes constitutes acceptance of those changes. We encourage you to review this page periodically.

15. Contact

For any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal information, please contact:

• Moli Pty Ltd, trading as Lappie
• Email: oli@lappie.ai
• Address: 24a Belair Drive, Constantia, Cape Town, 7806, South Africa

You also have the right to lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.