01Who we are

Tando Business Solutions (Pty) Ltd, trading as Yebofy, is the responsible party for the personal information described in this policy. Our company registration number is 2018/092837/07. We operate through our Digital Connectivity division, TandoHost, and work with Sea Fire Technologies as our network partner.

Our address is 123 Long Street, Cape Town, 8001, South Africa. Contact our Information Officer at privacy@yebofy.co.za for a privacy question or rights request.

02Privacy at a glance

• We use account, contact, order, payment, service and support information to run Yebofy.
• Card details are entered with the hosted payment provider. Do not put payment credentials in support messages or AI chat.
• Guest receipt and support links grant access to a specific record. Keep them private.
• Optional AI help sends the messages you enter to DeepSeek. Sharing a limited account-status summary requires the separate choice shown in the assistant.
• You can request access, correction or deletion, object to processing, withdraw consent where it applies, or complain to the Information Regulator.

Service, refund and cancellation rules are in our Terms of Service and the offer accepted for your order.

03Information we collect

• Accounts and contact: the name, email, phone, address and profile details you submit, verification status and account-access records.
• Orders and services: selected offers, service addresses, accepted terms, invoice and payment references, status, installation details and support history.
• Hotspot access: voucher and access records, network-session information and device identifiers needed to manage the chosen hotspot package.
• Reseller shops: shop details, owner and cashier membership, selling-credit balances, funding requests, sale and tender records, ledger entries and staff actions.
• Support: the information and messages you send, conversation status and references. Guest support does not create an account.
• Technical requests: information such as IP addresses, request times and browser or device details used to operate, secure and troubleshoot the service.

Only provide information needed for the form or request. Do not include passwords, full card details, private receipt links or voucher codes in ordinary support or AI messages.

04Why we use your information

We use information to create and verify accounts; check availability; process orders and payments; provide network access; arrange installation; manage reseller sales; issue receipts; and respond to support and account-recovery requests.

We also use relevant records to prevent abuse, protect access, reconcile transactions, resolve disputes and meet applicable legal and accounting obligations. Where a feature asks for consent, its stated purpose determines what that consent covers.

A coverage-enquiry update consent is for that enquiry. It does not by itself sign you up for marketing.

If you join early access, we use your email, chosen service and area, and any name you provide, to record your interest and send the updates you request. Joining does not create an account or place an order. Your private link lets you confirm your email, change your interests or leave the list. Early-access consent does not sign you up for a general newsletter.

05Reseller wallet information

Approved reseller wallets record available and held credit, funding requests, payments, voucher costs, sales and the ledger history needed to account for the shop’s balance. Sale records identify the owner or cashier who made the sale.

Shop owners and cashiers see information permitted for their roles. A cashier’s access is limited to the assigned shop and authorised sales. Platform staff have separate permissions for accounts, stock, finance and support.

Funding and sale records are not a general customer-wallet or automatic bank-withdrawal service. See the reseller wallet terms for how selling credit works.

06Payments & card information

Payment options are shown for the specific checkout or funding request. Card details are entered on the hosted payment provider’s page. Yebofy records references, amounts and payment status needed to verify funds, issue receipts and reconcile the transaction.

We do not ask you to send card numbers, CVVs or banking passwords to Yebofy support or the assistant. The payment provider has its own privacy notice and handles the information entered on its payment page.

If you pay using a shop’s own card terminal, the shop records the payment result and reference in Yebofy. That is separate from a hosted payment collected online.

07Cookies & browser storage

Yebofy uses cookies and browser storage for functions such as authentication, session recovery, checkout drafts and access to saved guest receipts or support conversations.

You can clear these through your browser. Doing so may sign you out or remove locally saved drafts and private links. Clearing browser data or forgetting a local link does not delete the corresponding server record or revoke copies held elsewhere.

Use the app’s recovery flow if you lose a guest receipt or support link. On a shared device, sign out and remove saved private access when you finish.

08Who receives information

Information is shared where needed to provide the service: with our network partner for connectivity and installation; the payment provider for the transaction; and hosting or email providers for operating the platform and sending service messages. Authorised staff access the records needed for their responsibilities.

Optional AI help

Yebofy Help uses DeepSeek. The messages you enter are sent to that provider to generate a response. The conversation is kept in the current chat session; it is not a staff support ticket. Choose Use my account status only if you want a limited summary of your current account records shared as explained in the assistant.

The account summary excludes names, email addresses, phone numbers, service addresses, support message bodies, voucher codes, private receipt links and session tokens. Information you type yourself can still identify you. Keep sensitive information out of chat.

You can use staff support instead. DeepSeek’s handling of information is described in its Privacy Policy.

Legal disclosure

Relevant records may also be disclosed when lawfully required by a court, regulator or other competent authority. We do not sell your personal information or share it for third-party marketing.

09Service updates & marketing

Service messages include verification, recovery, receipt, order, invoice, installation and support updates. They relate to the service or request you use and are separate from marketing.

Where we ask for marketing consent, you can withdraw it using the method stated in the message or by emailing privacy@yebofy.co.za. Withdrawing marketing consent does not stop the messages needed to operate your account or service.

10How long information is kept

We keep relevant records for as long as needed to provide the service, account for transactions, meet applicable legal obligations and resolve disputes. The period depends on the type of record and the reason it is retained.

Private guest links have their own expiry and recovery rules. Link expiry ends that link’s access; it does not mean the underlying order or support record has been deleted.

You can request deletion. We will explain any information that must remain for an applicable legal or operational reason. Browser-storage controls affect local access and drafts, not the server’s retention obligations.

11How information is protected

The app uses authenticated account access, role-based staff and reseller permissions, restricted guest links, protected credentials and recorded actions for sensitive workflows. Access is checked for the relevant account, shop or guest record.

Keep your password and private links secure. Anyone holding a valid guest link may be able to access the specific order or conversation it authorises. Do not forward it or post it publicly.

No online service can guarantee absolute security. Contact support promptly if you believe an account or private link has been compromised. Use the Information Officer contact for a privacy concern.

12Processing outside South Africa

Some service providers may process information outside South Africa. This policy does not promise that every record, backup or provider request remains within South Africa.

In particular, using DeepSeek-powered AI help sends your chat input, and any separately enabled account summary, to DeepSeek. Its Privacy Policy describes processing and storage in the People’s Republic of China. You can choose staff support without using AI help.

We remain responsible for applying the relevant POPIA requirements to transfers we arrange. Contact our Information Officer if you need information about a transfer affecting your records.

13Your rights under POPIA

Subject to applicable conditions, you can:

• Ask whether we hold personal information about you and request access.
• Request correction or deletion of information that is incorrect, excessive, outdated or unlawfully held.
• Object to processing where the law gives you that right, including direct marketing.
• Withdraw consent for processing that relies on it. This does not undo earlier lawful processing.
• Lodge a complaint with the Information Regulator.

Email privacy@yebofy.co.za with the request and enough information to identify the relevant account or record. Do not send passwords or payment credentials. We may need to verify your identity before disclosing or changing information.

We will handle the request under the applicable POPIA or access-to-information procedure and explain any lawful limits, further requirements or prescribed charges.

14Security-compromise notifications

If a security compromise requires notification under POPIA, we will notify the Information Regulator and affected people as soon as reasonably possible after discovery, taking account of the requirements of the Act.

The notice will explain the nature of the compromise, relevant protective steps and the contact for further information.

15Changes to this policy

The update date identifies the current policy. We may revise it when the service, providers or applicable requirements change. Material changes will be communicated as required, and any new consent needed for a feature will be requested in that flow.

16Contact our Information Officer

For a privacy question, rights request or complaint, contact the Information Officer. For an order or connection problem, use Yebofy Support.

Email

privacy@yebofy.co.za

WhatsApp

+27 63 788 6883

Address

Information Officer
Tando Business Solutions (Pty) Ltd, trading as Yebofy
123 Long Street, Cape Town, 8001, South Africa

Regulator

Information Regulator of South Africa