Privacy notice
How ZELF handles your information, in plain language, under South Africa's Protection of Personal Information Act (POPIA).
Last updated October 2026.
What we collect
When you create an account we store your name, email address and business details. When you run a job we store the inputs and outputs, the client page it belongs to, and the credits it cost. When you scan a QR code we store the time, the device type, the country and a hashed fingerprint, never a full IP address on the report.
Analytics
We use PostHog to understand how ZELF is used. Analytics and screen recording only run if you allow them, and every input and piece of text is masked when we record. We never sell your data.
The newsletter
If you subscribe to the client-work letter we store your email address and, if you give it, your first name. We only email you after you confirm your address, and every email has a one-click unsubscribe link. You can ask us to delete your address at any time.
The ZELF QR Chrome extension
Free QR codes are made inside your browser, and the link you encode is never sent to us. The extension reads the address of the tab you are on when you open its sidebar or right-click a link, and of each tab you switch to only if you allow it to follow your tabs. Those addresses stay in your browser. If you connect your ZELF account it stores an access token in your browser. When you create a dynamic QR code, the extension first checks that link against your existing codes so you do not pay twice, and the code is stored with your account like any other job. Signing out of the extension deletes the token from your browser and from ZELF.
Your rights
You can ask to see, correct or delete the personal information we hold about you, and you can object to how we use it. Email us and we will action it. If you are unhappy with our response you can complain to the Information Regulator of South Africa.