Privacy Policy

This policy explains how xlabs (Pty) Ltd ("xlabs", "we", "us") handles personal information when you visit www.getclara.co.za, join the Clara waitlist, book a demo or otherwise contact us. We process personal information in line with the Protection of Personal Information Act, 2013 (POPIA) and, where it applies, the EU and UK General Data Protection Regulation (GDPR).

1. Who we are

xlabs (Pty) Ltd is the responsible party (data controller) for the personal information described here. We are based in Cape Town, South Africa. You can reach us, including our Information Officer, at info@xlabs.co.za.

This policy covers our website and pre-sales activity. Data that customers load into the Clara platform is governed by the agreement with that customer, under which we act as an operator (processor).

2. What we collect

• Details you give us: your name, work email and company when you join the waitlist, plus any optional survey answers (for example, how you'd use Clara and your demo preferences, including timezone).
• Demo bookings: the details you enter when booking through Cal.com, such as your name, email and chosen time.
• Correspondence: anything you send us by email or other channels.
• Usage data: pages visited, device and browser type, approximate location and referral source, collected through Google Analytics cookies.

3. How we use it

• To manage the waitlist and let you know when Clara is available to you.
• To arrange and run demos, and reply to your enquiries.
• To understand what prospective customers need, so we can shape the product.
• To measure and improve how the website performs.
• To meet legal obligations and protect our rights.

We rely on your consent (which you can withdraw at any time), our legitimate interest in running and growing our business, and compliance with law. We do not sell your personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.

4. Who we share it with

We share personal information only with service providers that help us run the website and our business, under contracts that require them to protect it:

• Supabase, for storing waitlist data.
• Resend, for sending emails.
• Cal.com, for demo scheduling.
• Google Analytics, for website analytics.
• Vercel, for website hosting.

We may also disclose information where the law requires it, or as part of a merger, acquisition or sale of assets.

5. International transfers

Some of these providers store or process data outside South Africa, including in the EU, UK and United States. Where we transfer personal information across borders, we make sure it's protected by adequate law, binding agreements or other safeguards required by POPIA section 72 and the GDPR.

6. Cookies

We use Google Analytics cookies to understand how visitors use the site. You can block or delete cookies in your browser settings, or install the Google Analytics opt-out add-on. The site still works without them.

7. How long we keep it

We keep waitlist and enquiry data for as long as it's useful for the purpose you gave it to us for, and delete it within 24 months of our last contact with you unless you become a customer or ask us to delete it sooner. Analytics data is retained according to our Google Analytics settings.

8. Security

We use reasonable technical and organisational measures to protect personal information, including encryption in transit, access controls and least-privilege access for our team. No system is completely secure; if a breach affects you, we'll notify you and the Information Regulator as the law requires.

9. Your rights

You may ask us to access, correct or delete your personal information, object to or restrict how we process it, withdraw consent, or receive a copy in a portable format. Email info@xlabs.co.za and we'll respond within a reasonable time, and within any period set by law.

If you're not happy with how we've handled your information, you can complain to the Information Regulator of South Africa (inforegulator.org.za) or, if you're in the EU or UK, to your local data protection authority.

10. Changes

We may update this policy from time to time. The date at the top shows when it last changed; significant changes will be highlighted on the site or sent to you by email.