PRIVACY NOTICE

ShyftOS - POPIA Compliance · Effective date: 9 February 2026

On this page1. Responsible Party2. Information Officer3. Scope12. Data subject rightsContact

1. Responsible Party

SHIFTED UNIVERSE (PTY) LTD

Registration number: 2024/582839/07

Address: 590 Beagle Road, Garsfontein, Pretoria, 0042

2. Information Officer

Jake Geyser
Director
Email: support@shifteduniverse.com
Phone: +27 66 206 9228

Deputy Information Officer:
Tinerombo Mudzimbasekwa
Vice President
Email: support@shifteduniverse.com

3. Scope

This Notice explains how Personal Information is collected, used, stored, shared, and protected when using ShyftOS.

4. Personal Information processed

We may process: identity and contact details, authentication and security data, Workspace and operational data, Customer Data entered by users, support communications, technical and analytics data.

5. Sources

Information is collected directly from users, Workspace administrators, system logs, and integrated services.

6. Purposes of processing

We process Personal Information to: provide and operate the Services, manage accounts and Workspaces, ensure security and prevent abuse, provide support, improve functionality, comply with legal obligations.

7. Lawful basis

Processing occurs based on contractual necessity, legal obligation, legitimate interests, or consent where required under POPIA.

8. Operators and recipients

We use trusted operators including: Firebase and Google Cloud Platform (hosting), Google Analytics (analytics), Google Gemini / Vertex AI (AI processing). Access is restricted to what is necessary.

9. Cross-border transfers

Personal Information may be processed outside South Africa where adequate protection exists or other lawful POPIA grounds apply.

10. Security safeguards

We apply reasonable safeguards including access controls, encryption in transit, and monitoring.

11. Retention

Personal Information is retained only as long as necessary. Customer Data is deleted 30 days after termination, unless legally required otherwise.

12. Data subject rights

You may request: access to your Personal Information, correction or deletion, objection to processing, withdrawal of consent, to lodge a complaint with the Information Regulator. Requests may be sent to support@shifteduniverse.com.

13. Direct marketing

We do not send direct marketing without lawful basis or consent. Opt-out options are provided where applicable.

14. Children

The Services are not intended for persons under 18.

15. Automated processing

AI-assisted features may be used to support workflows. Outputs are not authoritative and require human verification.

16. Complaints

Complaints may be lodged with the South African Information Regulator.

17. Changes to this Notice

We may update this Notice from time to time. Continued use constitutes acceptance.

2026 © Shifted Universe (Pty) Ltd. All rights reserved.

If you have questions, contact us at support@shifteduniverse.com.