Privacy Policy
Last Updated: April 24, 2026
At XVIIA, your personal data is treated with the same structural integrity we apply to everything we build.
1. Data Collection
We collect the information you voluntarily provide through: the Structural X-Ray (personal narratives, somatic symptoms, historical reflections), account creation (email address), purchase (email and payment confirmation — card details handled exclusively by PayFast), and the contact form (name, email, message). We collect only what is necessary to deliver your product or service.
2. Data Use
Your data is used exclusively to: generate your XVIIA Structural X-Ray report; grant and manage access to purchased digital products; communicate with you regarding your purchase, account, or sessions; improve the diagnostic logic of the XVIIA methodology (anonymised only). We do not use your data for advertising or third-party profiling.
3. Data Security
All data is stored using industry-standard encryption at rest and in transit. Access to stored intake data is restricted to Vasti Krügel only. We do not sell, rent, or trade your personal data to third parties for any commercial purpose.
4. Third-Party Services
We use: PayFast (payment processing), Supabase (database and authentication), Resend (email delivery), Vercel (hosting), PostHog (anonymised analytics), and Anthropic (AI processing for the X-Ray). None of these providers receive your personal narrative or somatic data. Only Supabase stores your intake responses, under XVIIA's account.
5. Your Rights
X-Ray intake answers and reports are retained for 24 months and then deleted. To request early deletion of your data, email contact@xviia.com. You have the right to access, correct, delete, or receive a portable copy of your personal data. Contact: contact@xviia.com. We respond within 14 business days.
6. Cookies and Analytics
XVIIA uses PostHog for anonymised analytics (page views, session behaviour). This data does not include personally identifiable information.
7. Governing Law
This policy is governed by the laws of the Republic of South Africa, including POPIA (Protection of Personal Information Act).
8. Contact
Vasti Krügel | contact@xviia.com | George, Western Cape, South Africa