Privacy Policy

This Privacy Policy explains how DraggonnB Business Automation (Pty) Ltd (“DraggonnB”, “we”, “us”) collects, uses, stores, and protects personal information when you use the DraggonnB OS platform and related services (the “Service”). We are the responsible party under South Africa’s Protection of Personal Information Act (POPIA).

Contact: info@draggonnb.online.

1. Information we collect

• Account & business information — name, email, business name, contact details, and the content you create in the Service (e.g. CRM contacts, marketing content, bookings).
• Social account data — when you (or a business you authorise) connect a Facebook Page or Instagram Business account, we receive the Page/account identifiers, access tokens, and the names/identity of the connected accounts so we can publish content you approve.
• Usage & technical data — log data, device/browser information, and actions taken in the Service, used to operate and secure the platform.
• Payment data — billing is processed by our payment provider (PayFast). We do not store full card details.

2. Meta (Facebook & Instagram) Platform data

Where you connect Meta assets, our access is governed by the Meta Platform Terms and Developer Policies. Specifically:

• We request only the permissions needed to publish content you have reviewed and approved to your own Facebook Pages and Instagram Business accounts, and to display the connected account’s name and basic identity back to you.
• We use Page access tokens solely to publish on your behalf. We do not sell this data, use it for advertising, or share it with unrelated third parties.
• Access tokens are stored securely (encrypted at rest) and are only used by our publishing services. You can revoke our access at any time (see Data Deletion).

3. How we use your information

• To provide, operate, and improve the Service.
• To publish content you create and approve to your connected channels.
• To send service, billing, and support communications.
• To secure the platform and comply with legal obligations.

4. Service providers

We share data with infrastructure and service providers strictly to operate the Service, including: Supabase (database & authentication), Resend (email delivery), PayFast (payments), Anthropic (AI processing of content you submit), and Meta (publishing to your connected accounts). These providers process data on our behalf under their own terms.

5. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service and meet legal obligations. You may request deletion at any time — see Data Deletion.

6. Your rights (POPIA)

You have the right to access, correct, or delete your personal information, to object to processing, and to lodge a complaint with the Information Regulator (South Africa). To exercise these rights, email info@draggonnb.online.

7. Security

We apply appropriate technical and organisational measures, including tenant isolation, access controls, and encryption of sensitive credentials. No method of transmission or storage is perfectly secure, but we work to protect your information.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

9. Contact

DraggonnB Business Automation (Pty) Ltd, South Africa — info@draggonnb.online.