Privacy Policy

Vumelo is operated by Eazylet Solutions (Pty) Ltd (private company registered in the Republic of South Africa, registration 2025/780828/07 (registered with the CIPC, South Africa)), of 3 Raglan Street, Oakdale, Bellville, Western Cape, South Africa. We are the “responsible party” for the personal information described here. Our Information Officer is Retha van Rooyen (getinfo@mystudenthouse.co.za).

We collect: account details (name, email, password, the “I’m a…” category you pick); your property and accreditation data (addresses, room/bed details, compliance documents, grading and deal inputs, cash-tracker figures); documents you upload (title deeds, certificates, and similar); billing details processed by our payment provider; and technical/usage data (IP address, device/browser, and log records) needed to run and secure the service.

Where you upload information about another person (for example a tenant or student), you are the responsible party for that data — see section 10.

We process your information to provide the service you signed up for — creating your account, running the grading, deal-analysis and cash-tracking tools, storing your documents, and billing you. Our lawful basis is POPIA s11(1)(b): processing that is necessary to conclude and perform our contract with you. We also process to meet legal obligations (e.g. tax records) and to protect the security of the service (our legitimate interest).

Marketing email is separate and optional: we only send it if you give specific opt-in consent (POPIA s69), and you can withdraw it at any time using the unsubscribe link in every message.

The account and service data above is required to use Vumelo — without it we cannot provide the tools you are paying for. Marketing consent is entirely voluntary and refusing it does not affect your account.

We do not sell your personal information. We share it only with the service providers (POPIA “operators”) that help us run Vumelo, each under a written data-processing agreement requiring them to protect it and notify us of any breach:

• Supabase — database, authentication and private document storage (European Union).
• Paystack — payment processing (card + subscriptions) (South Africa / Nigeria).
• Resend — transactional and (opted-in) notification email (United States / EU).
• Vercel — application hosting (United States / global edge network).

We may also disclose information where the law requires it, or to establish, exercise or defend a legal claim.

Some providers above process data outside South Africa. Where they do, the transfer is covered by our contract with them binding them to protection substantially similar to POPIA (POPIA s72), and/or is necessary to perform our contract with you. The location of each provider is listed in section 5.

We keep your account and personal information for the life of your account and for up to 5 years after it is closed; billing and tax records are kept for at least 5 years as the Tax Administration Act requires. After that we delete or de-identify the data. We delete or de-identify personal information when it is no longer needed for the purpose it was collected for or to meet a legal obligation.

Under POPIA you may: ask what personal information we hold about you and get a copy; ask us to correct or delete inaccurate, irrelevant or excess information; object to processing on reasonable grounds; and withdraw any consent you gave (e.g. marketing). To exercise any of these, contact getinfo@mystudenthouse.co.za. You also have the right to complain to the Information Regulator (details in section 13).

Our grading and deal-analysis tools produce scores and indications from the inputs you provide. These are decision-support outputs, not automated decisions that are made about you with legal or similarly significant effect. If you believe an output has materially affected you and want it reviewed by a person, contact getinfo@mystudenthouse.co.za and we will review it.

If you upload a tenant’s, student’s or other person’s personal information, you are the responsible party for that information and you confirm you have a lawful basis and, where required, their consent, and that you have given them the notice POPIA requires. We process it only as your operator, to provide the service to you.

We use appropriate technical and organisational security measures (POPIA s19): encrypted connections, private-by-default document storage with short-lived signed access, per-account data isolation, hashed passwords, access controls and logging. No system is perfectly secure, but we work to protect your information and to detect and respond to incidents.

If there are reasonable grounds to believe your personal information has been accessed by an unauthorised person, we will notify the Information Regulator and you as soon as reasonably possible, as POPIA s22 requires.

We use a small number of cookies to keep you signed in and to keep the service secure. See our Cookie Notice for details and choices.

Vumelo is intended for accommodation providers and is not aimed at children. We do not knowingly collect the personal information of a person under 18 who is not legally competent without the consent of a competent person (POPIA s34–35). If you believe a child’s information has reached us, contact getinfo@mystudenthouse.co.za and we will address it.

Our Information Officer is Retha van Rooyen, getinfo@mystudenthouse.co.za. If we cannot resolve a concern, you may complain to the Information Regulator (South Africa): complaints.IR@inforegulator.org.za · https://inforegulator.org.za.

We may update this policy. When we make a material change we will update the “last updated” date and, where the change affects how we use your information, ask you to review and accept it again.

Privacy questions: getinfo@mystudenthouse.co.za. General support: getinfo@mystudenthouse.co.za. Post: 3 Raglan Street, Oakdale, Bellville, Western Cape, South Africa.