AssurifEye Data Quality Score: Privacy Policy
Version 2026-10-06. Effective 6 October 2026.
This policy explains how LeadAyEye (Pty) Ltd, trading as AssurifEye ("we", "us"), handles information when you use the Data Quality Score service at score.assurifeye.com. We follow South Africa's Protection of Personal Information Act (POPIA) and, where they apply to you, the EU and UK General Data Protection Regulations (GDPR).
1. Who we are
LeadAyEye (Pty) Ltd (registered name LEADAYEYE), a private company registered in South Africa under registration number 2025/492337/07, trading as AssurifEye.
Registered address: 501 Palmer Street, Constantia Park, Pretoria, 0010, South Africa.
Information Officer and privacy contact: hello@assurifeye.com.
2. What we collect
| Information | Examples | Why we collect it |
|---|---|---|
| Your contact details | Name, work email, company, register size, country, any message you send us | To run your assessment, send you your private link and codes, reply to consult requests, and follow up about your results |
| Your asset register | The file you upload and the asset records in it | To calculate your score and prepare your report and clean-up preview |
| Your inputs | Column mapping, checks you switch on or off, notes you add | To show your results the way you set them up |
| Technical information | An irreversibly scrambled ("hashed") version of your network address, and timestamps | To prevent abuse and apply daily limits |
| Payment information (paid clean-ups only) | Handled by our payment provider; we receive only confirmation of payment, never your card details | To deliver what you paid for and keep financial records |
To apply our fair-use limit of free assessments per organisation, we use the domain of your email address (or the full address for public email providers), and the dates and progress of your earlier assessments. We keep this short usage record (email address, domain and assessment dates) for up to 7 months for this purpose only, even after the assessment data itself is deleted.
Asset registers are business records, but they can contain personal information, such as the names of staff responsible for assets. Please leave out personal information we do not need.
3. Our roles
- Your contact details: we are the responsible party (POPIA) or controller (GDPR).
- Personal information inside your asset register: we process it on your organisation's behalf, as an operator (POPIA) or processor (GDPR), and only to provide the Service.
4. Legal grounds (GDPR)
We process your information:
- to provide the Service you asked for (performance of a contract);
- for our legitimate interests in keeping the Service secure and following up with business users about their results;
- to meet legal obligations, such as tax records.
You can object to follow-up messages at any time.
5. How long we keep it
- Uploaded file, asset records, scores, results and notes: deleted automatically 30 days after upload, or sooner if you ask.
- Contact details and a summary of your assessment (company, register size, score and dates): kept for up to 24 months, so we can respond to you and follow up, unless you ask us to delete them sooner.
- Fair-use usage record (email address, domain and assessment dates): kept for up to 7 months.
- Consult requests: kept for up to 24 months.
- Payment and invoice records: kept for as long as tax law requires, currently 5 years in South Africa.
6. Who we share it with
We do not sell your information. We use these service providers to run the Service, and each may process information only on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and file storage | European Union (Ireland) |
| Zoho Corporation (ZeptoMail) | Sending emails such as your link and codes | United States |
| Lovable | Hosting the website (it stores none of your information) | Global edge network (Cloudflare) |
| Cloudflare (Turnstile) | Bot protection on the upload form | Global network |
| Paddle (paid clean-ups only) | Payments, as seller of record | United Kingdom and other regions |
| Anthropic (paid clean-ups only) | Researching missing manufacturer, model and asset type details | United States |
For paid clean-ups, we send our research provider only the asset details needed for the research, such as descriptions, manufacturers and models, and never your contact details. We do not use your data to train AI models, and we use providers that do not train their models on the data we send them.
We may also disclose information if the law requires it.
7. International transfers
Some of our providers process information outside South Africa, the UK or the EU. Where that happens, we rely on appropriate safeguards, such as the provider's data processing terms and standard contractual clauses, as required by POPIA and the GDPR.
8. Security
- Your data is encrypted in transit and stored in a private, access-controlled environment.
- Your assessment can only be reached through the private link sent to your email address, or a view-only link you choose to share.
- Clean-up previews require an emailed verification code.
No system is completely secure, so keep your links private.
9. Cookies and tracking
- We do not use advertising or analytics cookies, and we do not track you across other websites.
- Our bot protection may use a strictly necessary cookie or similar technology.
- Your private link lives only in the web address. We do not store it in your browser.
10. Your rights
Depending on where you are, you can ask us to:
- give you a copy of your information;
- correct it;
- delete it;
- restrict or object to its use;
- transfer it to you or another organisation.
You can also withdraw consent where we rely on it.
Email hello@assurifeye.com, and we will respond within 30 days.
You can complain to South Africa's Information Regulator (inforegulator.org.za), to the UK Information Commissioner's Office, or to the data protection authority in your EU country. We would appreciate the chance to resolve your concern first.
11. Changes
We may update this policy. The current version is always available at score.assurifeye.com/privacy.
12. Contact
LeadAyEye (Pty) Ltd, trading as AssurifEye 501 Palmer Street, Constantia Park, Pretoria, 0010, South Africa hello@assurifeye.com