1. Who we are
MG5 Studio ("we", "our", "us") is a web and app development studio based in South Africa. We operate mg5webapp.com and related services. This policy explains how we handle personal information collected through this website.
2. What we collect
We collect information you give us directly — your name, email address, phone number, and project details when you contact us, book a consultation, or subscribe to a management plan. We also collect standard server logs (IP address, browser type, page views) to operate and improve the site.
3. How we use it
We use your information to respond to enquiries, deliver services you've requested, send booking confirmations and invoices, process payments via PayFast, and improve our website. We do not sell or share your personal information with third parties for marketing purposes.
4. Payment processing
Payments are processed by PayFast (Pty) Ltd. We do not store your card details. PayFast's privacy policy governs information you submit on their payment pages.
5. Third-party services
We use Clerk for authentication, Supabase for data storage, Resend for transactional emails, and Vercel for hosting. Each service operates under its own privacy policy and processes only the data needed to provide their service to us.
6. Cookies
We use essential cookies for authentication sessions and basic site functionality. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, though some features may not work correctly.
7. Your rights (POPI Act)
Under South Africa's Protection of Personal Information Act (POPI Act) you have the right to access, correct, or request deletion of your personal information. To exercise any of these rights, contact us at hello@mg5webapp.com. We will respond within 30 days.
8. Data retention
We retain booking and subscription records for seven years for accounting and legal compliance. Communication records are kept for three years. You may request earlier deletion where law permits.
9. Security
We use industry-standard measures including HTTPS, encrypted databases, and role-based access controls. No system is 100% secure; we cannot guarantee absolute security but take reasonable steps to protect your data.
10. Changes to this policy
We may update this policy from time to time. We will post the revised version on this page with an updated effective date. Continued use of the site after changes constitutes acceptance of the revised policy.
11. Contact
Questions or requests regarding this policy: hello@mg5webapp.com