Your information, handled carefully.

Last updated: 16 October 2026

In short: we only collect what we need to quote and deliver your project, we don't sell your information, and you can ask to see, correct or delete it at any time. The full notice below explains this in plain language and sets out your rights under South Africa's Protection of Personal Information Act (POPIA).

1. Who is responsible for your information

Re-Charge (“we”, “us”) is the responsible party for the personal information described here. We are an independent digital solutions studio based in South Africa.

You can reach our Information Officer about anything in this notice (including access, correction or deletion requests) via WhatsApp or the Project Builder contact form. (A dedicated privacy email address will be added once our domain email is live.)

2. What personal information we collect

We collect only what you give us and a little basic usage data:

• When you use the Project Builder or a form (project enquiry, free-mockup request, call request, process review or free online check): your name, email address, phone/WhatsApp number, business or project name, what you're trying to accomplish, your answers to the project questions, your budget and timeline if you share them, a preferred day and time for a call, and the names of any files you choose to attach.
• When you visit the site: anonymous usage data such as pages viewed, device type and approximate region. We do not use this to identify you.
• When you pay a deposit: your payment is processed by our payment provider; we never see or store your card details (see section 5).

We do not knowingly collect information from children, and we don't collect special-category information (such as health, race or religion), so please don't include it in project descriptions.

3. Why we collect it, and our legal grounds

We use your information only to:

• review your project, prepare an estimate and a fixed quote, and reply to you;
• deliver, support and maintain work you ask us to do;
• take a deposit and balance payment for a project you approve;
• understand how the site is used so we can improve it; and
• meet our legal, tax and accounting obligations.

Under POPIA we rely on your consent (which you give by submitting a form, and separately for analytics and advertising cookies), on the need to take steps at your request and perform our contract with you, and on our legitimate interests in running and improving the studio. We never sell your information or use it for third-party marketing.

4. Is giving us your information voluntary?

Yes. You choose what to share. But some details are necessary for a purpose: for example, without an email or phone number we can't send you a quote or call you back, and without project details we can't estimate the work. If you leave those out, we simply won't be able to complete that step.

5. Who we share it with

We share personal information only with the service providers (“operators”) that help us run the studio, and only so they can perform that function for us. Each is bound by its own terms and data-protection obligations:

• Supabase: stores your enquiry in our project database (hosted on Supabase's cloud) and, via Resend, emails us a copy so we can reply.
• Google Analytics 4: measures site usage, and only if you accept analytics cookies (see section 7).
• Our own AI computer: the website assistant and the “try it on your own email” example. Your text goes through our Supabase backend, over an encrypted link, to an AI model running on our own computer, and we don’t keep it. If that computer can’t answer and we’ve switched the backup on, Anthropic (USA) writes the answer instead and doesn’t train on it. If neither is on, you see prepared answers.
• Anthropic: writes the drafts for client systems, such as the Inbox Assistant (see below).
• Meta Pixel (Meta Platforms): tells us which Facebook and Instagram ads lead to enquiries, and only if you accept (see section 7). We don't send Meta your form answers.
• GoatCounter: a lightweight, cookieless page counter that stores nothing on your device and doesn't identify you.
• Yoco and Paystack: process deposit and balance card payments. We never see or store your card details.
• GitHub Pages: hosts this website.

Where a project genuinely uses AI or another third-party service, we tell you before we use it, and we don't send your information to third-party AI systems unnecessarily. We may also disclose information if the law requires it.

Your Inbox Assistant page

If your business uses its private Inbox Assistant page, each email you paste in is sent to Anthropic, which runs the AI, to write the reply, and isn’t used to train AI models. We don’t store the emails or the replies: only a one-line note of what each email was about and whether the reply was used, so we can report the time saved. The page is private to your business; please don’t share its link.

If you connect your Microsoft 365 inbox to the Inbox Assistant

This is optional: it lets the drafts wait in your inbox instead of on the page. We ask for one permission: to read, draft and label email in that account (Microsoft calls it Mail.ReadWrite, with offline_access so it keeps working). We use it only to draft replies to customer emails for a person at the business to check and send. We never send email from your account, and we never delete it.

• The text of each new customer email is sent to Anthropic, which runs the AI, to write the draft. It isn’t used to train AI models.
• We don’t store your emails. We keep a one-line summary of each, whether a draft was made, and how much of it was sent, so we can report the time saved. The draft text is kept encrypted only until we’ve measured it, then deleted.
• Your access is stored encrypted. You can remove it at any time at myapplications.microsoft.com, or ask us to. If you stop, we delete what we stored.

6. Information sent outside South Africa

Some of the providers above (for example Supabase, Resend, Google, GitHub, Meta, Microsoft and Anthropic, all mainly in the USA) process information on servers outside South Africa. When your information is transferred across borders, POPIA requires that it stays protected. We use reputable providers that are subject to data-protection laws or contractual safeguards offering protection comparable to POPIA. By submitting a form you understand your information may be processed in another country for the purposes above.

7. Cookies and analytics

On your first visit we show a banner. Google Analytics and the Meta Pixel load only if you accept. Decline and neither is loaded, and no analytics or advertising cookies are set. The Meta Pixel lets Meta (Facebook and Instagram) see that you visited and whether you got in touch, so we can tell which ads work and show them to similar people; Meta handles that under its own privacy policy. You can change your mind at any time by clearing this site's data in your browser, which brings the banner back. Our cookieless page counter needs no consent because it stores nothing on your device and can't identify you. The site itself may keep a small amount of data in your browser's local storage: for example the campaign link you arrived from, or a copy of a form you submitted while offline: so that your enquiry reaches us; it is not shared with anyone else.

8. How we protect your information

• Everything you submit is sent over an encrypted (HTTPS) connection.
• Uploaded file types are restricted and sizes are limited.
• Project information is kept out of search engines.
• Access to project records is restricted to Re-Charge, and we treat business documents as confidential.

No system is perfectly secure, but we take reasonable steps to guard against loss, damage and unauthorised access, and we will notify you and the Information Regulator if a breach affecting your information occurs, as POPIA requires.

Security and data, in one screen

For an IT manager or anyone checking before they sign:

• Where it runs: the website on GitHub Pages; enquiries, client pages and our panel on Supabase (database and server functions); email through Resend. Website chat and demos on our own AI computer, reached over an encrypted Tailscale link. Client drafts by Anthropic’s business service.
• In transit: everything goes over HTTPS. Microsoft 365 access and stored drafts are encrypted at rest.
• What we keep: not the emails you paste or the replies; only a one-line note of what each was about and how the reply was used, to report the time saved.
• Training: your data is never used to train AI models.
• Who can see it: only Re-Charge. Client pages are private links for your business.
• Instructions hidden in an email: an email can’t make the assistant do anything. It can only write a draft; it can’t send, delete or change your prices, and a person checks every reply. Anything legal, tax or medical is marked for a person to check.
• Paperwork: our data processing agreement comes with every quote, and we’re happy to sign a mutual NDA before you share real emails.

9. How long we keep it

• Enquiries that don't go ahead: kept for up to 12 months, then deleted.
• Projects we deliver: kept for the duration of our work together and for up to 5 years afterwards, to meet tax and legal obligations and to support what we built.
• Analytics: retained in aggregate; Google Analytics data expires on Google's standard retention schedule.

You can ask us to delete information we no longer need to keep.

10. Your rights under POPIA

You have the right to:

• ask what personal information we hold about you, and get a copy;
• ask us to correct or update information that is wrong or out of date;
• ask us to delete information we no longer have a lawful reason to keep;
• object to processing based on legitimate interests, and withdraw consent (including for analytics) at any time; and
• lodge a complaint with the Information Regulator (section 11).

To exercise any of these, contact us via WhatsApp or the Project Builder. We'll respond within a reasonable time and won't charge you, except where the law allows a small fee for a copy of your information.

11. Complaints to the Information Regulator

We'd always rather hear from you first so we can put things right. But you also have the right to complain to South Africa's Information Regulator:

• Website: inforegulator.org.za
• Email: [email protected]
• Post: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

12. Changes to this notice

We may update this notice as the studio or the law changes. The date at the top shows when it last changed; please check back from time to time.