Privacy Policy

1. Who we are

HatGo Services (“HatGo”, “we”, “us”) operates hatgoservices.co.za, a campus on-demand marketplace serving Hatfield, Pretoria. For the purposes of POPIA, HatGo is the responsible party for the personal information described here. You can reach our privacy contact at team@hatgoservices.co.za.

2. What we collect

• Account and contact details — name, email address, phone number and, for the waitlist, your self-described role.
• Identity verification data (KYC) — for providers and runners: identity-document data, a liveness selfie, and payout bank account details. This is collected and processed through our identity verification partner (see processors below).
• Booking, order and transaction data — the services or products you book, venue or delivery details, line-item records, and payment status.
• Custody and dispute proofs — for deliveries, photos and confirmation codes captured at pickup and handover.
• Technical data — information needed to operate the app securely, such as session and device information.

3. Why we collect it

• To create and manage your account and the waitlist.
• To match customers with providers, shops and runners, and to fulfil bookings and orders.
• To verify the identity of providers and runners, as required for trust and safety and to meet legal obligations.
• To collect payment, hold funds in escrow, and pay out providers, shops and runners.
• To resolve disputes fairly against the recorded line items and proofs.
• To secure the platform and prevent fraud and abuse.

We process this information to perform our contract with you, to comply with legal obligations (including KYC/AML requirements), for our legitimate operational interests, and — where required — with your consent, which you may withdraw.

4. Who processes it (operators)

We share personal information only with the operators needed to run the service, under agreements that require them to protect it:

• Ozow — payment processing, escrow of funds and payouts. Payment and settlement data is processed by Ozow; HatGo does not store full banking-rail credentials itself.
• Smile ID — identity verification (ID checks, liveness and screening) for providers and runners.
• Supabase — our database, authentication and file storage infrastructure.
• Vercel — application hosting.

5. Storage and security

Personal information is stored in our managed database and storage with access controlled at the row level, so that customers see only their own data, providers and runners see only jobs assigned to them, and full access is restricted to administrators. Access to sensitive keys is limited to server-side systems. We retain personal information only for as long as needed for the purposes above or as required by law, after which it is deleted or de-identified.

6. Your rights

Under POPIA you have the right to:

• ask what personal information we hold about you and request access to it;
• ask us to correct or delete information that is inaccurate or no longer needed;
• object to certain processing and withdraw consent where processing relies on it;
• lodge a complaint with the Information Regulator of South Africa.

To exercise any of these, contact team@hatgoservices.co.za.

7. We do not sell your data

HatGo does not sell, rent or trade your personal information. We share it only with the operators listed above, and only to run the service.

8. Changes

We may update this policy; material changes will be communicated before they take effect. See also our Terms of Service.