Top of page

Website privacy notice

Privacy on this website.

The public examples use fictional information. You can explore them without uploading a recording, a document or a client file. This notice covers use of this website and its enquiry form. Information handled inside a client deployment is governed separately.

Who is responsible for this site

X-AI South Africa operates this website for visitors evaluating local AI workflows for business. Before public production launch, the Information Officer’s registered corporate entity particulars and designated regulatory contact address are published in this section.

Information we receive

Browsing the interactive workflow studies, switching evidence states and downloading the sample dossiers or CSVs happens without submitting personal information. File uploads and audio recordings are disabled across the public site.

If you send us a workflow enquiry, we receive your work email address, your optional name, and your general description of the business task. Please do not submit client names, recordings, financial records or other confidential documents here.

Why we use it

Enquiry details are used solely to review your scoping request and reply to you about mapping a workflow. Submitting an enquiry does not add you to a marketing mailing list.

Who processes it and where

Accepted enquiries are stored in a private PostgreSQL database isolated from the public internet and forwarded only to X-AI’s authorised internal intake endpoint when live delivery is enabled. No third-party advertising networks, external font CDNs, session-replay scripts or external analytics pixels load on public pages.

Cookies, optional measurement and logs

The enquiry page sets a short-lived, strictly necessary HttpOnly security cookie solely to protect form submissions against cross-site request forgery and accidental duplicate retries. No tracking or advertising cookies are set.

Application logs record operational status codes without storing enquiry bodies or work email addresses. Rate-limiting uses a keyed cryptographic hash rather than retaining raw visitor IP addresses in application tables.

How long it is kept

Completed or quarantined website enquiry records are purged from the website database on a scheduled 90-day retention cycle via a controlled database retention procedure, with redacted audit counts retained for operational accountability.

Your choices, access and correction

You can explore every public workflow study and download the one-workflow pilot brief without submitting the contact form. Under the Protection of Personal Information Act 4 of 2013 (POPIA), you may request confirmation of personal information held about your enquiry, ask for correction, or request deletion.

How to raise a privacy concern

You may raise a question about an enquiry using the contact route on this website without including sensitive third-party records, or consult South Africa’s Information Regulator regarding statutory rights under POPIA (https://www.gov.za/documents/protection-personal-information-act).

Top