COACT™ Privacy Notice

COACT STUDIO (PTY) LTD
Registration No.: 2026/231641/07
("COACT™", "we", "us", or "our")

is committed to protecting your privacy and processing personal information responsibly in accordance with the Constitution of the Republic of South Africa, the Protection of Personal Information Act, 4 of 2013 ("POPIA"), the Electronic Communications and Transactions Act, 25 of 2002 ("ECTA"), and other applicable laws.

This Privacy Notice explains how we collect, use, store, disclose, and protect personal information when you use:

• the COACT™ website,
• VentureOS,
• related services,
• applications,
• communications,
• and associated platform interactions.

By using our services, you acknowledge that you have read and understood this Privacy Notice.

The responsible party for purposes of POPIA is:

COACT STUDIO (PTY) LTD
Registration No.: 2026/231641/07
Republic of South Africa

Email: hello@coact.co.za
Website: https://www.coact.co.za

We may collect and process the following categories of information:

3.1 Personal Information

• Name and surname
• Email address
• Contact information
• Company or venture details
• User account information
• Billing and payment information
• Communications and submissions

3.2 Venture & Platform Information

• Venture frameworks and artefacts
• Notes and structured inputs
• System interactions
• Usage analytics
• Operational metadata
• Decision logs and workflow activity

3.3 Technical Information

• Device information
• Browser type
• IP address
• Cookies and tracking technologies
• Log files and diagnostics

We process personal information for legitimate operational and platform purposes, including:

• Providing access to VentureOS and platform services
• Managing user accounts
• Supporting venture stewardship workflows
• Maintaining platform security and integrity
• Communicating with users
• Improving platform functionality and user experience
• Conducting analytics and operational monitoring
• Meeting legal and regulatory obligations
• Enforcing platform terms and governance requirements

We do not sell personal information to third parties.

COACT™ may use automated systems, machine-assisted reasoning, and AI-supported tooling within VentureOS to:

• structure venture information,
• generate operational artefacts,
• assist with workflow sequencing,
• support contextual guidance,
• and maintain platform continuity.

Automated systems are designed to support venture stewardship and operational efficiency and are not intended to replace human legal, financial, ethical, or governance decision-making.

Users remain responsible for reviewing outputs and obtaining appropriate professional advice where required.

We process personal information where:

• consent has been provided,
• processing is necessary for performance of a contract,
• processing is required by law,
• or processing is necessary for legitimate business interests consistent with POPIA.

We may share information with:

• authorised employees and contractors,
• infrastructure and hosting providers,
• payment processors,
• analytics and security providers,
• legal and regulatory authorities where required by law,
• professional advisers,
• and approved service providers operating under confidentiality obligations.

We require third parties to implement appropriate security and confidentiality safeguards.

Your information may be processed or stored outside South Africa where required for platform infrastructure or service delivery.

Where cross-border transfers occur, COACT™ will take reasonable steps to ensure adequate protection consistent with POPIA requirements.

We implement reasonable technical and organisational safeguards designed to protect personal information against:

• unauthorised access,
• loss,
• misuse,
• alteration,
• disclosure,
• or destruction.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

We retain information only for:

• as long as reasonably necessary for operational purposes,
• contractual obligations,
• venture continuity,
• legal compliance,
• dispute resolution,
• and platform governance requirements.

Retention periods may vary depending on the nature of the information and applicable legal obligations.

Subject to applicable law, you may have the right to:

• access your personal information,
• request correction,
• request deletion,
• object to certain processing,
• withdraw consent where applicable,
• lodge a complaint with the Information Regulator of South Africa.

Requests may be directed to: hello@coact.co.za

COACT™ may use cookies and similar technologies to:

• improve platform performance,
• understand usage patterns,
• maintain session functionality,
• and support analytics.

Users may adjust browser settings to manage cookies, although some platform functionality may be affected.

The platform may contain integrations or links to third-party services. COACT™ is not responsible for the privacy practices or content of external services or websites.

Users are encouraged to review third-party privacy policies independently.

COACT™ services are not directed toward children under the age of 18 without appropriate parental or guardian involvement where required by law.

We may update this Privacy Notice from time to time.

Updated versions will be published on our website with revised effective dates.

Continued use of the platform after changes become effective constitutes acceptance of the updated notice.

For privacy or data-related enquiries:

COACT STUDIO (PTY) LTD
Registration No.: 2026/231641/07
Republic of South Africa

Email: hello@coact.co.za
Website: https://www.coact.co.za