Privacy Policy
Effective
Yenza is a marketing tool for small businesses. To do its job it needs to know things about your business, and some of those things are personal information. This page says exactly what we collect, why, who else sees it, and what you can make us do about it.
Who we are
Yenza is operated by YenzaNow (Pty) Ltd (registration number 2026/756315/07), a company registered in Johannesburg, South Africa. Our registered address is on the public companies register at CIPC, and we will give it to you in writing on request at privacy@yenzanow.com. In the language of the Protection of Personal Information Act 4 of 2013 (“POPIA”), we are the responsible party for the personal information described here.
For privacy questions or requests about access, correction or deletion, contact us at privacy@yenzanow.com.
What we collect
We collect three kinds of information, and we collect them for different reasons.
1. Information you give us
- Your email address, when you create an account — either directly or through Google sign-in. If you use Google, we receive your email address, name and profile picture from Google. We do not receive your Google password, and we never ask for it.
- Information about your business — its name, what it sells, where it operates, who it serves, and anything else you tell us during onboarding or while creating a campaign.
- Photographs and images you upload to be used in your campaigns.
- Your feedback on generated creative — which directions you liked, which you rejected, and any reason or note you added.
2. Information we collect from services you connect
If you choose to connect an account — Facebook, Instagram, or a Google Business Profile — we read information about your business from it, such as your page details, posts and images, so that campaigns reflect what your business actually looks like. We ask for read access. You can disconnect at any time, and you are never required to connect anything to use Yenza.
3. Information collected automatically
- Technical data needed to serve the site and keep it secure, such as browser type and service logs. Optional product analytics are separate: only after you choose “Allow analytics” do we receive a random browser and session ID, a coarse page category, device class, classified acquisition source and allowlisted event counts. If you are signed in, analytics requests include your sign-in; eligible business events may include the business ID for server-side validation. We do not send page URLs, prompts, answers, uploads or generated content for analytics. You can change your choice using “Privacy choices” at any time.
- Optional return reminders are separate from analytics. If you opt in to “Optional tips and product news”, we record a timestamp when you interact with Yenza while signed in and the page is visible. We do not record the page URL or message text for this purpose. Reminder eligibility expires within 90 days and is deleted when you opt out or email delivery is suppressed. A separate timestamp used to cancel an already-started reminder is kept with your account and business until either is deleted.
- Security data from Cloudflare Turnstile, which distinguishes real people from automated abuse on our sign-in screens.
We do not use advertising cookies or third-party tracking pixels on this site, and we do not sell personal information to anyone. Ever. Declining analytics does not affect your use of Yenza.
Why we use it, and on what legal basis
| What we do | Why we may do it under POPIA |
|---|---|
| Create and run your account | Necessary to perform our contract with you |
| Generate campaign creative and copy for your business | Necessary to perform our contract with you |
| Read data from accounts you connect | Your consent, given when you connect them and withdrawable at any time |
| Keep the service secure and prevent abuse | Our legitimate interest in a service that is not defrauded |
| Answer you when you contact us | Our legitimate interest in supporting our customers |
Artificial intelligence, and what we send to it
Yenza uses AI models to understand your business and generate campaign creative. To do that, information about your business and photographs you upload may be processed by the relevant providers. Our configured language model providers include OpenAI, Anthropic, and Alibaba Cloud (Qwen) through OpenRouter. Product decisions, including Nara’s question routing, use Jev by TypeSafe through OpenRouter. Public website retrieval uses Firecrawl; image generation uses Higgsfield and fal.ai. Depending on the feature you request, relevant business details, your question to Nara, or uploaded photographs may be sent to the providers needed to return the requested result. Nara is a read-only AI guide: it uses versioned Yenza help and facts authorised for your business, and cannot change your account, spend credits or publish a campaign.
Do not upload anything you would not want processed this way. In particular, do not upload identity documents, banking details, medical information, or photographs of people who have not agreed to appear in your advertising.
Who else we share it with
We share personal information only with the service providers who help us run Yenza, and only as much as each one needs:
- Supabase — accounts, authentication and our database
- Railway — the servers that run our application
- Cloudflare — content delivery and bot protection
- Lovable — hosting for this website
- AI model providers — as described above
- Mailgun — only if email delivery is activated, for account messages you have chosen to receive; you can manage email preferences or unsubscribe
- Meta and Google — where you have connected those accounts, or where you instruct us to run advertising on them
We may also disclose information if the law requires it, or to establish or defend a legal claim. We will tell you if that happens unless we are legally prohibited from doing so.
Where your information goes
Some of these providers are outside South Africa, which means your personal information is transferred across borders. POPIA permits this where the recipient is subject to comparable protection, or where the transfer is necessary to perform our contract with you. Where we rely on contractual safeguards, we use them.
How long we keep it
We keep your account information and campaign history for as long as your account is open. Nara conversation messages and their source references are kept for up to 90 days; you can delete a conversation from the guide at any time. If you close your account, we delete or anonymise your personal information within 12 months, except where we are legally required to keep records for longer — tax and company law being the usual reasons.
Your rights
Under POPIA you have the right to:
- ask what personal information we hold about you, and get a copy
- have information that is wrong corrected, or information we should not have deleted
- object to us processing your information in a particular way
- withdraw a consent you gave us, at any time
- complain to the Information Regulator
Email privacy@yenzanow.com to exercise any of these. We will respond as POPIA requires.
The Information Regulator of South Africa can be reached at inforegulator.org.za or complaints.IR@justice.gov.za. You are entitled to complain to them directly, and you do not have to come to us first.
Security
We protect your information with encryption in transit, access controls, and credentials that are never stored in our source code. No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal information, we will notify you and the Information Regulator as POPIA requires.
Children
Yenza is a tool for businesses and is not intended for anyone under 18. We do not knowingly collect information from children.
Changes
If we change this policy we will update the effective date above, and we will tell you directly if the change materially affects your rights.
Contact
Privacy questions: privacy@yenzanow.com. Anything else: hello@yenzanow.com.