Legal

Privacy policy

Last updated: 1 November 2026

This policy explains what personal information we collect through yae.digital, why, and what you can do about it. We’ve written it in plain language. It is written for South Africa’s Protection of Personal Information Act (POPIA) and, for visitors it applies to, the EU and UK GDPR.

1. Who we are

yae is made by AB & Friends Group (Pty) Ltd, a private company registered in South Africa (registration number 2025/956901/07), based in Plumstead, Cape Town (“we”, “us”). We decide how your personal information is used through this website, so under POPIA we are the responsible party, and under the GDPR the controller.

This policy covers the website and the emails you send us, including pilot enquiries. It doesn’t cover information handled inside the yae product during a pilot or subscription; that is set out in the agreement we sign with your organisation before the pilot starts.

2. What we collect

When you email us to request a pilot, we receive your email address and whatever you include. The email template on our pilot page suggests your name, company, company size, which AI you use and one thing your AI should never do without asking. All of it is optional, but we can’t set up a pilot without knowing who you are. Please don’t send sensitive information, such as ID numbers or health details.

When you visit the site, our hosting provider processes the technical information needed to deliver the pages, such as your IP address, browser type and the pages you request, and may keep standard logs of it for security and to keep the service working. We don’t currently receive or store these logs ourselves. Your IP address is also used to work out which country you’re in, so we can show prices in the right currency. We don’t store it for that purpose.

When you email us, we receive your email address and whatever you choose to send.

We don’t use analytics, advertising trackers or social media pixels on this website.

3. How we use it

To reply to your enquiry and to set up and run a pilot with you.
To talk to you about your request, the pilot and, if you become a customer, your account.
To keep the website secure and working, including filtering out spam and abuse.
To meet our legal obligations.

We don’t sell personal information, and we don’t make automated decisions about you with it. We won’t send you marketing unless you ask for it, and every marketing message will let you unsubscribe.

4. Why we’re allowed to use it

Your consent, when you email us. You can withdraw it at any time.
Steps towards an agreement you’ve asked about, such as a pilot.
Our legitimate interests in answering business enquiries and running a secure website.
Legal obligations that apply to us.

We only share personal information with service providers who help us run the website and our business, and only as much as they need:

Google (Firebase Hosting), which hosts the website.
Google Workspace, our email and office software, where your emails to us arrive and are kept, and from which we reply.
Professional advisers, and authorities where the law requires it.

These providers act on our instructions, under contracts that require them to keep the information secure and confidential.

6. Where it’s stored

Pilot enquiries and our other emails with you are stored in our Google Workspace mailbox. Google Workspace may store and process email in data centres outside South Africa. The website itself is delivered through Google’s global network, so the technical information described in section 2 may be processed outside South Africa too.

Where your information is processed outside South Africa, Google is bound by its data processing terms with us to protect it. Our providers may also process information in other countries, for example for support; when they do, the same contractual protections apply.

7. How long we keep it

Pilot requests and related emails: up to 24 months after our last contact with you, unless you become a customer (then your agreement with us applies) or you ask us to delete them sooner.
Technical logs: kept by our hosting provider under its own retention rules, for security and troubleshooting.

We may keep information longer only where the law requires it.

8. How we protect it

We use reasonable technical and organisational measures to protect personal information. The website is only served over an encrypted connection (HTTPS), it doesn’t collect any information through forms, and access to the mailbox that holds pilot enquiries is limited to people who need it. No system is perfectly secure. If a security breach affects your personal information, we’ll tell you and the Information Regulator as POPIA requires.

9. Your rights

You can ask us to:

confirm whether we hold personal information about you, and give you a copy;
correct it if it’s wrong, or delete it;
stop using it, including for direct marketing;
withdraw your consent.

Email hello@yae.digital. We’ll reply within 1–3 working days, and act on your request within the time the law allows. We may need to confirm who you are first.

If you’re unhappy with how we’ve handled your information, please tell us so we can try to fix it. You can also complain to the Information Regulator of South Africa (inforegulator.org.za, enquiries@inforegulator.org.za). If you’re in the EU or UK, you can complain to your local data protection authority.

10. Cookies

yae.digital doesn’t set cookies or use similar tracking technology, and it doesn’t load content from other websites: our fonts and images are hosted with the site. If we ever add analytics, we’ll update this notice first and ask for your consent where the law requires it.

11. Children

This website is for businesses. It isn’t aimed at anyone under 18, and we don’t knowingly collect their personal information.

12. Changes to this policy

We’ll update this page when our practices change and change the date at the top. If a change is significant, we’ll make it clear on the website.