Account information: When you register, we collect your name, email address, and organisation name. If you purchase a membership, payment is processed securely by PayFast — we do not store your credit card or banking details.

Tool usage data: When you use our interactive tools (AI Ethics Module, People & Change Strategy, 5-Step AI Strategy), we collect and store your inputs and generated outputs so you can save, resume, and export your work.

Chatbot interactions: When you use either of our AI-powered chatbots (the HIL AI Readiness Assistant on the homepage, or the HITL Policy Advisor on the Policy Advisor page), your messages are sent to a third-party AI service (Anthropic’s Claude API) via secure Supabase Edge Functions to generate responses. We do not store chat conversations beyond the duration of your session unless otherwise stated. Please do not enter sensitive personal information into the chatbots.

Website analytics: We collect anonymised, aggregate usage data (pages visited, time on site, device type) to understand how our platform is used and to improve the experience. This data does not personally identify you.

Communications: If you contact us via email or our contact form, we retain that correspondence to respond to your enquiry.

We use the information we collect to:

• Authenticate your account and manage your membership
• Save your progress within our tools and deliver your generated outputs
• Process payments and manage subscriptions
• Communicate service updates, new resources, and relevant information (you may opt out at any time)
• Analyse aggregate usage to improve the platform
• Respond to your enquiries and provide support

humanITLoop uses AI to enhance several features on our platform. It is important you understand how this works:

• AI chatbots: Both the HIL AI Readiness Assistant and the HITL Policy Advisor are powered by artificial intelligence (Anthropic’s Claude API). When you send a message, your query is transmitted to Anthropic’s servers (located outside South Africa) for processing and a response is returned. We have selected Anthropic as our provider because they do not use API inputs to train their models.
• AI-assisted writing: Certain tool features offer AI-assisted drafting. These features also use the Anthropic Claude API under the same conditions described above.
• No automated decision-making: We do not use automated decision-making that produces legal or similarly significant effects on you without human review.

• We do not sell your personal data to third parties
• We do not use your individual tool inputs to train AI models without your explicit consent
• We do not use advertising or tracking cookies for retargeting or third-party advertising
• We do not share your data with third parties except as necessary to operate the platform (payment processing, email delivery, AI processing as described above)

We use the following third-party services to operate humanITLoop:

• PayFast — payment processing (South Africa)
• Anthropic (Claude API) — AI processing for chatbots and AI-assisted writing features
• Supabase — database and serverless functions (EU region)
• WordPress / Jetpack — website hosting and analytics

Each provider is bound by their own privacy and data protection obligations. Where data is transferred outside South Africa or the EEA, we ensure appropriate safeguards are in place.

Essential: Required for login sessions, membership verification, and saving tool progress. These cannot be disabled without breaking core functionality.

Functional: Remember your preferences and tool state across sessions.

Analytics: Help us understand page visits and tool usage in aggregate. No personally identifiable information is collected through analytics cookies.

We do not use advertising or tracking cookies. You can manage your cookie preferences through the cookie consent banner on our site, or through your browser settings. For more detail, see our Compliance Notice.

Account data is retained for as long as your account is active, plus a reasonable period thereafter for legal and operational purposes. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

Chatbot conversation data is not retained beyond your active session.

Website analytics data is retained in anonymised, aggregate form only.

Depending on your jurisdiction, you have the following rights regarding your personal information:

• Access — Request a copy of the personal data we hold about you
• Correction — Ask us to correct inaccurate or incomplete data
• Deletion — Request that we delete your personal data (subject to legal retention requirements)
• Objection — Object to processing of your data for certain purposes, including marketing
• Portability — Receive your data in a structured, machine-readable format (where applicable)
• Complaint — If you are in South Africa, you may lodge a complaint with the Information Regulator. EU users may contact their local Data Protection Authority.

To exercise any of these rights, contact us at hello@humanitloop.com with the subject line “Data Rights Request”.

We take reasonable technical and organisational measures to protect your personal information, including encrypted connections (HTTPS), secure authentication, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

humanITLoop is designed for business professionals and is not directed at children under the age of 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the platform after changes constitutes acceptance of the updated policy.