Privacy Policy & POPIA Notice

1. Who We Are (Responsible Party)

The responsible party for your personal information is:

• Quantum Horizon IT Services (Pty) Ltd
• Registration Number: 2025/595463/07
• Registered Address: 12 Beach Estate Boulevard, Unit 209, Azure, Bloubergstrand, 7441, South Africa
• Email: info@transcendai.io
• Phone: +27 82 530 4578

2. Information We Collect

Account & billing information: Name, company name, email address, phone number, billing address, and payment details (processed securely by Stripe — we do not store card details).

Operational data (processed on your behalf): When you deploy AI agents, they process data from your environment including server metrics, log files, ticket content, infrastructure configuration data, and user activity data. This is processed as a data processor acting on your instructions.

Usage data: How you interact with the TranscendAI platform, features used, session duration, and error logs — used to improve the service.

StealthAI observation data: During the 30-day observation period, StealthAI processes ticket data, engineer action logs, and resolution patterns from your ticketing system. This data remains within your approved security boundary and is used exclusively to build your organisation's behavioural model.

3. How We Use Your Information

• To provision, operate, and improve your AI agents and the TranscendAI platform
• To process payments and manage your subscription
• To communicate with you about your account, service updates, and support
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations under South African and applicable international law
• To send you product updates and relevant information (you may opt out at any time)

We never sell your personal information to third parties. We never use your operational data to train AI models for use by other customers.

4. How We Store & Protect Your Information

• All data is encrypted in transit using TLS 1.3
• All data is encrypted at rest using AES-256
• Each customer's data is logically isolated — no cross-customer data access
• Access to customer data is restricted to authorised personnel only, on a need-to-know basis
• We maintain audit logs of all access to customer data
• Our infrastructure is hosted on AWS with servers in the af-south-1 (Cape Town) region by default for SA customers

5. Data Retention

We retain your account and billing information for 7 years after account closure as required by South African financial regulations. Operational data processed by AI agents is retained for 90 days by default and then deleted, unless you request a longer retention period. StealthAI behavioural models are retained for the duration of your contract and deleted within 30 days of contract termination.

6. Third-Party Processors

We share limited data with the following trusted sub-processors, each bound by data processing agreements:

• Stripe — payment processing (PCI-DSS Level 1 certified)
• Anthropic — AI model inference (Claude API)
• Vapi.ai — voice agent infrastructure (for Voice Agent product)
• SendGrid / Twilio — email processing (for Email Agent product)
• Amazon Web Services — cloud infrastructure hosting

We do not share your data with any other third parties without your explicit consent.

7. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights:

To exercise any of these rights, contact us at info@transcendai.io. We will respond within 30 days.

8. Information Regulator Contact

If you believe your rights under POPIA have been violated, you may contact the Information Regulator of South Africa:

• Website: www.justice.gov.za/inforeg
• Email: inforeg@justice.gov.za
• Phone: 010 023 5207

9. Cookies & Tracking

The TranscendAI website uses essential cookies only — for session management and security. We do not use advertising cookies or third-party tracking pixels. You may disable cookies in your browser settings; this may affect platform functionality.

10. International Transfers

Where data is processed outside South Africa (for example, via Anthropic's API), we ensure appropriate safeguards are in place including contractual protections. Enterprise customers requiring data residency within South Africa should contact us to discuss dedicated infrastructure options.