Privacy Notice · Version 2026-09-06
How Toolbox AI handles personal information
This notice explains how personal information is handled when companies and their authorised users use Toolbox AI Business OS.
1. Roles and responsibility
Each customer company determines why and how its business records are used. Toolbox AI processes those records to provide and protect the service and manages its own account, billing, security and support information.
2. Information handled
The service may handle company and contact details, user names and email addresses, role assignments, customers, quotations, invoices, payment status, staff records, stock, uploaded documents, support messages and technical security logs.
3. Purposes
Information is used to authenticate users, provide requested features, enforce permissions and licences, send access codes and operational messages, support customers, secure the platform, maintain records and meet legal obligations.
4. Service providers
Information is shared only as needed with infrastructure and communication providers that support the service. Resend delivers secure access emails. A payment provider such as PayFast will receive transaction information when online payments are enabled. Toolbox AI does not sell customer personal information.
5. Access controls and security
Workspaces are separated by company. Role and branch permissions restrict what authorised users can access. Login sessions use secure cookies, and access codes expire after a short period. No online service can guarantee absolute security.
6. Retention and deletion
Information is retained while needed to provide the workspace and for legitimate security, support, dispute and legal-record purposes. Company owners may request export or deletion, subject to identity verification and any lawful retention duty.
7. Your choices and rights
Requests to access, correct, delete, restrict or object to the use of personal information may be submitted through the company owner or directly to Toolbox AI. Requests are assessed against applicable South African law.
8. Contact
Send privacy or support requests to conradgroen19@gmail.com. Guidance is available from the Information Regulator, and the official Act is available on the South African Government website.