Privacy

We keep as little as we can, and never the content of your pages. Updated 23 October 2026.

Who is responsible

Khanyo is a service of Werner Hoppe, South Africa, is the responsible party for your personal information under the Protection of Personal Information Act (POPIA). Contact details are on our contact page (hello@khanyo.app).

When you run a free check

• Each check gets a private, unguessable link (/r/…) you can choose to share; it shows that check’s result and nothing about you. Links are deleted after 180 days.
• We store the shop’s domain, the result (visible, partly or not), which AI crawlers were blocked, the problems found, and where the visit came from (for example a search ad).
• Your IP address is never stored. We keep a salted one-way hash of it for one purpose: limiting checks to 10 an hour.
• We read only public pages, the way search crawlers do. We never log in, submit forms or store page content.
• We also check popular public shops for research, identified as Khanyo-Research and obeying robots.txt (details). Those results appear only in anonymised totals, and we don’t contact those shops.
• Anonymised totals across many shops may be published in our report. No shop is ever named.

When you sign up for monitoring or a fix

• We store your e-mail address, your consent, the shops you ask us to watch and their weekly results.
• We e-mail you only about your shops. Every e-mail links to a page where you can manage your shops, cancel, or delete your record entirely.
• Payments are handled by Paddle, our merchant of record. Paddle receives the details needed to take payment; we receive only the payment result. We never see or store your card details.
• For the paid product-data fixes, the text of a product page is sent to an AI model to copy its product facts, which our code then checks against the page: the one page you name, or, for a whole catalogue, only the pages our code couldn’t read itself. It isn’t used for anything else.

When you contact us

The contact form e-mails your name, address and message to us so we can reply. It isn’t stored on our site.

Who processes it for us

• Vercel (hosting) and Supabase (database): run the site and store the records above.
• Resend: sends our e-mails.
• Paddle (merchant of record): takes payments.
• Anthropic: reads product pages you pay us to write product data for, and nothing else.

Some of these providers store or process information outside South Africa (for example in the United States or the European Union). We use them only under agreements that protect personal information to a standard comparable to POPIA, as section 72 requires. We never sell your information or share it for advertising.

How long we keep it

• Shared report links: 180 days.
• Monitoring records: while you subscribe, then deleted on request, or after 12 months without a subscription.
• Payment records: as long as tax law requires (normally five years), and nothing more than needed for that.

Your rights

You can see, correct or delete what we hold about you at any time from the manage link in any e-mail we send, or by contacting us. You may object to processing and withdraw consent to our e-mails at any time. If you’re unhappy with how we handle your information, you may complain to the Information Regulator (South Africa) at inforegulator.org.za.