Privacy withoutthe fog.

Who this policy covers

This Privacy Policy explains how Brandnamix (Pty) Ltd, operating Jinxx and Marketing.sucks ("Jinxx", "we", "us" or "our"), collects, uses, shares, stores, and deletes personal information. It covers visitors, account holders, team members, contacts, and people whose information is processed through a Jinxx account.

For account administration, service operation, support, billing, and our own website activity, Brandnamix is generally the responsible party or controller. When a customer uses Jinxx to process personal information for its own marketing purposes, the customer is generally the controller and Brandnamix acts on its instructions as a processor or operator.

Information we collect

• Account and contact information: name, business name, email address, role, country, login and authentication information, team membership, and communications.
• Brand and website information: websites you ask Jinxx to scan, brand names, logos, colours, fonts, images, descriptions, audiences, voice, language, and other brand intelligence.
• Customer Content: prompts, instructions, campaigns, drafts, approvals, comments, tasks, media, design assets, files, and publication settings.
• Connected Service data: authorised identifiers, selected account or page data, content, designs, sites, destinations, tokens, scopes, and connection state.
• Usage and device data: IP address, browser, device, operating system, timestamps, pages and features used, diagnostic events, cookies, and security logs.
• Transaction information: plan, usage credits, invoices, tax information, and payment status. Payment-card details are normally handled by the payment processor rather than stored by Jinxx.
• Support and due-diligence information: requests, attachments, feedback, identity or authority checks, and records needed to investigate an issue.

Where information comes from

We receive information from you, people in your organisation, websites and assets you direct us to use, Connected Services you authorise, service providers that support Jinxx, and normal website or application interactions. We do not use Jinxx to obtain platform data through unauthorised scraping.

How we use information

• create and secure accounts, brands, workspaces, roles, and permissions;
• scan authorised websites and build brand intelligence;
• generate, edit, organise, review, schedule, and publish marketing work at your direction;
• connect and maintain authorised third-party integrations;
• provide Chat, Design, Pulse, support, billing, service notices, and account communication;
• monitor reliability, prevent abuse, investigate security incidents, and enforce our Terms;
• measure and improve Jinxx using service data, feedback, and appropriately protected analytics;
• comply with law, lawful requests, platform obligations, and recordkeeping duties.

We do not sell Connected Service data. We do not use LinkedIn, Meta, Canva, or WordPress connection data for unrelated advertising. We do not expand an integration to a materially different data use without updating the disclosure and obtaining consent where required.

Legal bases

Depending on the information and jurisdiction, we process personal information to perform a contract, take steps you request before a contract, comply with law, pursue legitimate interests that do not override individual rights, or act on consent. You may withdraw consent, but that does not affect earlier lawful processing and may prevent the relevant optional feature from working.

Connected platform data

A connection starts only after an authorised user selects the service and approves the requested permissions. Jinxx accesses the data needed for the selected workflow and acts on the user's instructions. The Connected Service also handles information under its own terms and privacy policy.

You can revoke a connection. Revocation stops new access once processed and may disable related features. See Data Deletion for the deletion process.

AI and service providers

Jinxx uses service providers for hosting, AI processing, storage, security, communications, analytics, customer support, and payments. We may send the minimum content and instructions needed to a provider to perform the requested task. Providers are required by contract or applicable terms to protect information and use it only for the services they provide to us, subject to legal obligations.

Do not submit sensitive personal information, confidential data, or regulated information to an AI feature unless it is necessary, authorised, and permitted by your organisation's policies. Customers remain responsible for deciding what information is appropriate to process.

When we share information

We may share information with:

• service providers and Connected Services needed to deliver the feature you request;
• authorised members of your organisation or workspace, according to roles and permissions;
• professional advisers, auditors, insurers, and financing or transaction parties under confidentiality obligations;
• regulators, courts, law enforcement, or others where disclosure is legally required or reasonably necessary to protect rights, safety, or security;
• a successor in a merger, reorganisation, financing, or sale, subject to appropriate protection and notice where required.

We may use aggregated or de-identified information that cannot reasonably identify a person. We do not attempt to re-identify it.

Website analytics and cookies

Marketing.sucks and Jinxx may use necessary cookies for security, sessions, and core functions. Optional analytics, advertising, or functional technologies are controlled through the consent choices presented on the site where required. We do not send raw form content or direct identifiers to advertising or analytics platforms as event data.

Retention and deletion

We keep information only for as long as needed for the service, the purpose described, security, disputes, and legal or financial records. Retention depends on the data type, account state, customer instructions, platform requirements, and law.

• When a Connected Service is revoked, Jinxx stops new collection from that connection after the revocation is processed.
• On a verified deletion request, associated personal information is deleted or de-identified from active systems without undue delay and ordinarily within 30 days, unless a shorter platform rule applies.
• Residual copies may remain in protected backups for up to 90 days and are not restored for ordinary use.
• We may retain limited records where law, fraud prevention, security, dispute resolution, or enforcement requires it.

Instructions and exceptions are explained on the Data Deletion page.

International processing

Jinxx and its providers may process information outside your country. Where required, we use appropriate safeguards for international transfers, such as contractual protections, adequacy decisions, or another lawful transfer mechanism. South African personal information is handled in line with POPIA's cross-border requirements.

Security

We use reasonable technical and organisational safeguards designed for the nature of the information, including access controls, encrypted transport, logging, environment separation, credential and token protection, vendor review, and incident handling. No system is completely secure. Please report suspected compromise immediately through Contact us or the privacy address below.

Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, withdraw consent, receive a portable copy, or complain to a regulator. You may also have rights relating to targeted advertising, sale or sharing, and automated decisions. Jinxx does not sell personal information.

To exercise a right, email [email protected] or use Contact us. We may need to verify identity and authority. An authorised agent may submit a request where law allows it. You may complain to the Information Regulator (South Africa) or your local supervisory authority.

Requests about customer-controlled data

If your information was placed in Jinxx by one of our customers, that customer may control the purpose and decisions. Contact the customer first. We will support the customer in responding to lawful requests where required and will not independently change customer-controlled data without authority.

Children

Jinxx is a business service and is not directed to children. Do not create an account for, or knowingly submit personal information about, a child unless the processing is lawful, necessary, and properly authorised. If you believe a child has provided information improperly, contact us so we can investigate and delete it where required.

Changes to this policy

We may update this policy when the service, integrations, law, or our practices change. We will post the updated version and effective date, and give additional notice of a material change where required.

Contact and complaints

Brandnamix (Pty) Ltd
12 Waterford Office Park, Waterford Drive, Randburg, Gauteng, 2191, South Africa
Privacy Officer: Eugene Smit
[email protected]

You may also use Contact us. If we cannot resolve a South African privacy complaint, you may contact the Information Regulator (South Africa).