Legal Desk · Privacy Policy

Privacy Policy

This policy explains how AiForm Procure expects to collect, use, store, and protect information submitted by suppliers, buyers, and platform users.

Effective date: 26 June 2026POPIA Compliant

We respect your privacy

We handle your information with care, transparency, and in compliance with applicable laws.

Secure by design

We use industry-standard security measures to protect your data.

You're in control

You can access, update, or request deletion of your information at any time.

Legally compliant

Aligned with POPIA and other applicable data protection legislation.

Who we are

AiForm Procure is a procurement platform and a product of AiForm Studio, based in Pretoria, South Africa. We provide technology solutions for public and private sector procurement teams, suppliers, and pilot partners.

What information we collect

We collect only the information necessary to provide and improve our services.

Personal details (name, email address, phone number)
Company details and registration information
CSD number, BBBEE certificate, tax clearance
Banking details and payment information
Documents and data you upload to the platform
Usage data and platform activity

How we use your information

We use your information to operate and improve the platform.

To provide and maintain our platform and services
To verify your identity and company information
To process payments and communicate with you
To improve platform performance and user experience
To comply with legal and regulatory obligations

How we store it

Platform data is stored using Supabase, hosted in the EU, with encryption at rest and access controls intended to protect operational and compliance information.

Who we share it with

We do not sell personal information to third parties. Supplier information is shared with buyers only when a supplier responds to an RFQ or where sharing is necessary to operate the platform.

Your rights under POPIA

Under the Protection of Personal Information Act, you may request access to your personal information, correction of inaccurate information, deletion where legally permitted, or object to certain processing.

Data retention

We retain data while an account is active and for up to 2 years after account closure, unless a longer retention period is required for audit, legal, security, or legitimate operational reasons.

For privacy questions, data access requests, or POPIA-related queries

Contact our privacy team