Privacy Policy

1. Who we are

COYSEC is operated by Clearpath AI("Clearpath AI", "we", "us", "our"). We are the data controller for the personal data described in this notice.

2. Personal data we collect

• Account data — name, email, password hash, login credentials.
• Company data — registered entity details you upload (name, registration number, directors, members, addresses).
• Support data — messages, attachments, and metadata from your support requests.
• Usage and telemetry — pages visited, features used, error reports, approximate location.
• Device data — IP address, browser type, operating system, device identifiers.

3. Why we use it

• To create and operate your account.
• To provide and improve the Service and its features.
• To prevent fraud, abuse, and security incidents.
• To provide customer support.
• To send service-related communications and, with your consent, marketing.
• To comply with our legal and regulatory obligations.

4. Legal basis

We rely on the following legal bases: performance of our contract with you (providing the Service), our legitimate interests (security, product improvement, fraud prevention), compliance with legal obligations, and your consent (e.g. for marketing communications).

5. Who we share data with

• Merchant of Record: Paddle.com Market Limited for the sale of our products, subscription management, payments, tax compliance, and invoicing.
• Service providers / subprocessors: hosting, database, email, analytics, and customer-support tooling.
• Professional advisers: legal, accounting, and audit, where necessary.
• Authorities: where required by law, court order, or regulatory request.

6. Data retention

We keep personal data only for as long as needed for the purposes described above, to comply with our legal obligations, and to resolve disputes. When data is no longer required it is deleted or anonymised.

7. Your rights

Subject to applicable law, you have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent at any time. To exercise these rights contact privacy@coysec.co.za. You may also lodge a complaint with the South African Information Regulator (or your local supervisory authority).

8. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, role-based access controls, and regular review of our systems and providers.

9. Cookies

We use strictly necessary cookies to operate the Service (such as keeping you signed in). We may also use analytics cookies to understand usage. You can manage cookie preferences in your browser settings.

10. International transfers

Some of our service providers are located outside your country. Where required we put in place appropriate safeguards such as standard contractual clauses or rely on adequacy decisions.

11. Changes

We may update this notice from time to time. The "last updated" date above indicates when changes were made.

12. Contact

For any privacy questions please contact privacy@coysec.co.za.