Privacy notice

Updated 6 October 2026

This explains what V8 does with personal information, in the terms the Protection of Personal Information Act (POPIA) asks us to use. It is written to be read rather than to be survived, so if something here is unclear, that is a fault worth telling us about.

Who is responsible

Kayden Wright, sole proprietor, trading as Wright Digital, at Ballito, KwaZulu-Natal, South Africa, is the responsible party for the information described here. Our Information Officer is Kayden Wright, reachable at privacy@v8social.app.

What we collect, and why

• Your email address. To sign you in — V8 has no passwords, so a link emailed to you is the whole of the login — and to contact you about the service.
• Your workspace name and timezone. To label the workspace, and to schedule posts against your local clock rather than ours.
• The social accounts you connect. The platform, the account's identifier on that platform, its display name, its handle and its profile picture. These come from the platform during the connect flow, not from you.
• What you post. The text you write, each per-platform version of it, any images you upload, and afterwards the time it went out and the link to the published post.
• Counts and a record of actions. How many AI adaptations your workspace has run each day, and a log of significant actions, so that usage can be charged honestly and a problem can be traced to what caused it.

What we do not hold

We do not hold the access tokens for your social accounts. When you authorise a platform, the token goes to our publishing provider and stays there; what we store is a reference to the account, not the key to it. We hold no password, because there is none to hold, and no card details, because invoicing happens outside the product.

Whether you have to give it

All of it is voluntary. The consequence of withholding it is simply that the thing does not work: without an email address we cannot sign you in, and without a connected account there is nothing to publish to.

Who else processes it

V8 is assembled from services that each do one job. Each of these is an operator acting on our instructions, under terms that require them to keep the information secure and to use it only for that job.

• Supabase — Database and sign-in. Holds your workspace, posts and account list. (Germany (eu-central-1))
• Vercel — Runs the application itself. (United States)
• TONVI TECH SL (Upload-Post) — Publishes to the social platforms, and holds the access tokens for the accounts you connect. We never receive those tokens. (Spain)
• Anthropic — Rewrites your post for each platform. The text you write is sent there for that purpose, and is not used to train models. (United States)
• Resend — Sends your sign-in links. (United States)

Information leaving South Africa

It does, and POPIA s72 requires us to say so plainly. Our database sits in Germany and our publishing provider is in Spain, both under the European data-protection regime, which gives protection comparable to POPIA's. Our hosting, AI and email providers are in the United States and are bound by contractual terms that carry the same obligations forward. We do not sell personal information, and nothing here is transferred for anyone else's purposes.

Cookies

One cookie, which keeps you signed in. It is strictly necessary for the product to function, so it needs no consent banner and you will not find one. There is no analytics, no advertising and no third-party tracking on this site.

How long we keep it

For as long as your workspace exists. Posts and their publication record are kept as the record of what was sent and when, which is the point of having it. Ask us to delete your workspace and we will do so within 30 days. What we cannot delete is a post already live on a platform — that belongs to your account there, and you remove it the same way you would remove anything else you published.

How it is protected

Every row in our database is fenced to the workspace that owns it by the database itself, not by the application — so a bug in our code cannot show you another workspace's posts or accounts. Data is encrypted in transit and at rest. The tokens that could actually publish on your behalf are held by our provider rather than by us, which keeps the most sensitive thing in the system out of our reach.

What you can ask us to do

POPIA gives you the right to:

• be told whether we hold information about you, and to be given a copy of it;
• have it corrected, or deleted where it is inaccurate, irrelevant or excessive;
• object to our processing it; and
• complain to the Information Regulator.

Email privacy@v8social.app and we will answer. We may ask you to confirm who you are first, because handing someone else's information to whoever asks for it would defeat the purpose.

Complaining

If we have not dealt with you properly, the Information Regulator (South Africa) can be reached at enquiries@inforegulator.org.za or inforegulator.org.za. You do not have to come to us first, though it is usually faster.

Changes

If this notice changes in a way that affects you, we will tell you by email rather than quietly reissuing the page. The date at the top is the version you are reading.