Privacy Policy

Last Updated: March 2026

1. Introduction
Let's Change ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, process, and secure information when you use the Let's Change campaign management platform. This policy is designed in strict compliance with the Protection of Personal Information Act (POPIA) of South Africa.

2. Information We Collect
We collect data across two distinct user categories:

Campaign Creators (Tenants): Name, email address, encrypted passwords, billing information, and system activity logs (IP addresses and timestamps).

Signatories (Public Users): First name, last name, email address, province/region, optional comments, and signature timestamps.

3. How We Use Your Information
We process your personal information for the following specific purposes:

Signature Verification: To send automated email tokens to ensure the authenticity of a signature before it is counted on a public timeline.

Platform Operations: To generate formal PDF Executive Packs and CSV data exports containing verified signature demographics for government and media handovers.

Communications: To facilitate "Supporter Broadcasts," allowing campaign creators to send updates directly to the individuals who verified their signatures on that specific campaign.

System Integrity: To maintain automated background logs and perform routine cleanups of abandoned, unverified, or bot-generated data.

4. Data Sharing and Third-Party Access
We do not sell, trade, or rent personal identification information.

Campaign Creators: When you verify a signature on a petition, your name, province, and email address become accessible to the specific creator of that campaign for the sole purpose of exporting raw data and managing their political or social cause.

Third-Party Pixels: Campaign creators on Premium or Ultimate tiers may embed third-party tracking pixels (e.g., Facebook, Google) on their public petition pages to measure advertising performance. When visiting these specific pages, your browsing data may be processed by these third-party networks in accordance with their respective privacy policies.

5. Data Security and Retention
We adopt robust data collection, storage, and encryption practices to protect your personal information against unauthorized access or disclosure.

All passwords are encrypted using secure hashing algorithms.

Signatures that remain unverified via email within 48 hours are automatically purged from our databases.

System audit logs are strictly restricted to system administrators.

6. Your POPIA Rights
Under South African law, you have the right to request access to the personal information we hold about you, request corrections, or request the deletion of your data from active campaigns. You may execute basic profile updates directly through your secure User Dashboard.

7. Contacting the Information Officer
If you have any questions regarding this Privacy Policy or your data rights, please contact our Information Officer at:
Let's Change
Centurion, Gauteng, South Africa
Email: info@letschange.co.za
Phone: +27 61 523 9126