Privacy & Data

Your data, protected.
POPIA compliant.

Last updated: April 2026  ·  Governing law: Protection of Personal Information Act (POPIA), South Africa

Information We Collect

What data we ask for

We collect only what we need to generate your ERP recommendation report. This includes:

  • Your email address and name, used to create and secure your account
  • Company name and industry, used to contextualise your recommendations
  • Questionnaire answers covering your business processes, size, budget, and technical requirements
  • Payment metadata processed by Stripe — we never store card numbers or banking details directly

We do not collect South African ID numbers, banking details, or any sensitive personal information as defined under POPIA.

How We Use It

Purpose of processing

Your data is used exclusively to operate the SelectERP platform. Specifically:

  • To generate your personalised ERP recommendation report
  • To save your questionnaire progress so you can return and continue
  • To send you your report by email if you request it
  • To process payment for premium report tiers via Stripe
  • To improve the accuracy of our scoring engine over time (aggregated, anonymised)

We do not sell your data. We do not share it with ERP vendors. We have no commercial interest in which system you choose.

Data Storage

Where and how long we keep your data

Your data is stored securely on Supabase, a managed Postgres database platform hosted on infrastructure within the European Union (AWS EU West). All data is encrypted at rest and in transit using industry-standard TLS.

We retain your account and report data for as long as your account is active. If you request deletion of your account, we will remove your personal information within 30 days, retaining only anonymised, aggregated data for platform improvement purposes.

Your Rights (POPIA)

Your rights under South African law

As a data subject under the Protection of Personal Information Act (POPIA), you have the right to:

  • Access — request a copy of the personal information we hold about you
  • Correction — request that we correct inaccurate or outdated information
  • Deletion — request that we delete your personal information
  • Objection — object to the processing of your personal information
  • Complaint — lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at privacy@erpselect.co.za. We will respond within 30 days.

Third Parties

Who we share data with

We use a small number of trusted third-party services to operate the platform. Each receives only the minimum data necessary:

Stripe

Payment processing for premium reports. Stripe handles all card data directly and is PCI DSS compliant.

Resend

Transactional email — used to send you your report link and any account notifications.

Anthropic (Claude API)

AI narrative generation for your report. Your questionnaire answers are sent to generate personalised analysis text. No data is retained by Anthropic beyond the API request.

We do not share your data with any ERP vendors, resellers, or marketing platforms.

Cookies

How we use cookies

SelectERP uses cookies solely for session management — to keep you logged in securely across page loads. We do not use advertising cookies or third-party tracking cookies.

You can clear cookies at any time through your browser settings. Doing so will sign you out of your account.

Contact

Questions and data requests

If you have any questions about this privacy policy or wish to exercise your POPIA rights, please contact us:

SelectERP — Privacy Enquiries

privacy@erpselect.co.za

We aim to respond to all privacy requests within 30 days.