Privacy Policy

This policy explains how we obtain, process and disclose your personal information in accordance with the requirements of the Protection of Personal Information Act 4 of 2013 (“POPIA”), read together with the Consumer Protection Act 68 of 2008 (including the Consumer Protection Act Amendment Regulations, 2026 on the National Consumer Commission opt-out registry) (“the CPA”). Throughout this policy, “processing” has the meaning given to it in POPIA and includes any lawful use of your personal information.

At Eddie AI (“Eddie”, “we”, “our” or “us”), a product of Capture Video Productions (Pty) Ltd (“CVP”), we are committed to protecting your privacy and to ensuring that your personal information is collected and used properly, lawfully and transparently.

About Eddie AI

Eddie AI is a standalone AI-powered photo enhancement software-as-a-service (“SaaS”) platform operated by Capture Video Productions (Pty) Ltd. Eddie is designed for real estate professionals and provides automated image refinement, generative editing (including sky replacement, object removal, virtual staging, day-to-dusk conversion, white balancing, colour enhancement, exposure correction and pool correction), team workspaces, batch processing, export tools and a web-based editor.

• Parent Company: Capture Video Productions (Pty) Ltd
• Company Registration: 2017/125659/07
• VAT Number: 4230277701
• Address: 41 5th Street, Voelklip, Hermanus, 7200, South Africa

Roles under POPIA

POPIA distinguishes between a responsible party (the party that decides why and how personal information is processed) and an operator(a party that processes personal information on the responsible party's documented instructions).

Eddie AI acts as the responsible party for personal information it collects and uses about its own account holders — for example, the contact details, billing information and account credentials you provide when you sign up.

When you upload photographs or other media to Eddie AI for processing, you remain the responsible party in respect of any personal information contained in that content (for example, the faces of people captured in property photos). Eddie AI processes such content as an operator on your instructions and does not assume your legal obligations as responsible party under POPIA. You are responsible for ensuring that you have obtained all consents and complied with all applicable data-protection laws in respect of the content you upload.

About You

You may be a client, a trial user, a team member, an employee or a service provider to Eddie AI. Depending on your relationship with us, for the purposes of this policy you may be a data subject, an operator or another responsible party. Eddie AI applies this policy consistently, regardless of your role.

Key Definitions

• “Responsible party”— a public or private body or any other person which determines the purpose of and means for processing personal information.
• “Operator”— a person who processes information for a responsible party in terms of a contract or mandate, without coming under the direct authority of the responsible party.
• “Data subject”— a person to whom personal information relates.
• “Processing”— any operation or activity concerning personal information.
• “Personal information”— information relating to an identifiable, living, natural person, and where applicable, an identifiable, existing juristic person.
• “Record”— any recorded information, regardless of when it came into existence.

Information We Collect

As the responsible party collecting and processing information about you, we undertake to comply with all conditions for the lawful and reasonable processing of your personal information as set out in Chapter 3 of POPIA.

POPIA and other applicable laws allow us to process personal information on the basis of your consent, and in certain circumstances without your express consent — for example, where processing is necessary to perform a contract to which you are a party, to comply with a legal obligation, to protect your legitimate interests, or where the information is publicly available. We will not use these legal bases to undermine your privacy rights and will always aim to process personal information in a lawful, reasonable and transparent manner.

Upon receiving your consent, we typically collect:

• Full name and surname
• Email address
• Physical or business address
• Telephone or mobile number
• Company or agency name
• Billing and payment information (processed securely via PayFast)
• Account credentials (authentication managed via Supabase Auth)
• Images and photographs you upload to the platform for processing
• Team membership information (for workspaces, including owner / admin / member roles and project assignments)
• Usage data, preferences and platform interaction history

We may also collect information automatically when you use our platform. Website and application usage information may be collected using cookies and similar technologies, which allow us to gather standard usage data. Where applicable, our cookie notice offers you the choice to consent to or decline such collection.

Where your information becomes available to us through other channels, we will collect it only in accordance with your consent and in compliance with POPIA. Where we are unable to obtain your consent for information we do receive, we will assess whether the absence of consent materially impacts our ability to deliver our services and will inform you timeously if it does.

How We Process Your Information

We are legally obliged to quality-assure your information and to use it only for the purposes specified. We will process your personal information only for the purposes for which it was collected and as agreed with you. This is in keeping with the principle of minimality — processing must be adequate, relevant and not excessive.

Examples of how we may use your information:

• To provide, maintain and improve our AI photo enhancement services
• To create and manage your Eddie AI account
• To administer your subscription, credit balances and team workspace
• To process subscription payments and credit top-up purchases
• To confirm and verify your identity for security purposes
• To communicate with you regarding your account and our services
• For the detection and prevention of fraud, misuse or other unlawful activity
• To conduct usage analytics or customer satisfaction research for the purpose of improving our platform
• For audit and record-keeping purposes
• To protect your legitimate interests
• In connection with legal proceedings, where required

Where necessary, your information may be retained for legal or research purposes. We may also anonymise your data for statistical analysis, service improvement, trend identification or the development of new features — such anonymised data will not identify you personally. Where your use of Eddie AI involves direct marketing in your own name, you are responsible for complying with section 69 of POPIA and the CPA Amendment Regulations, 2026 (including the NCC opt-out registry).

Your Rights

Access to Information

You have the right to request a copy of the personal information we hold about you, as well as details of any third parties who have or have had access to your information. To make such a request, contact us using the details provided below. We will require proof of identity in a legally accepted format. Access requests may be subject to a legally allowable fee. We may refuse a request where the law allows or requires us to do so — for example, where the information is subject to legal privilege, where disclosure would reveal personal information about another person, or where disclosure is prohibited by law. If we refuse an access request, we will give you reasons for the refusal unless we are prevented from doing so by law, and you may use our reasons to decide whether to lodge a complaint with the Information Regulator.

Objection to Processing

You have the right, at any time and within the determinations of POPIA, to object to the manner in which we process your personal information.

Withdrawal of Consent

You have the right, at any time and within the determinations of POPIA, to withdraw your consent to the collection and processing of your personal information. Withdrawal of consent will not affect processing that has already taken place, but will apply going forward. Withdrawal of consent remains subject to the terms and conditions of any contract in place between you and Eddie AI. If your withdrawal materially interferes with our ability to perform a contract (for example, to deliver services or comply with statutory requirements), we may not be able to give effect to the withdrawal in full, or we may need to terminate the relevant services. We will explain any such consequences to you if they arise.

Correction and Deletion

You have the right to ask us to update, correct or delete your personal information. We will require proof of identity before making changes. We encourage you to keep your personal information accurate and up to date. Should any modification to your information have a material impact upon you, we will inform you accordingly.

Information Security

We are legally obliged to provide adequate protection for the personal information we hold, to guarantee its integrity and confidentiality, and to prevent unauthorised access and use. We continuously review our security controls and processes to ensure your personal information remains secure.

Our security policies and procedures cover:

• Physical and infrastructure security
• Application, network and database security
• Access control for personal information
• Secure communications (TLS/SSL encryption in transit)
• Encryption of data at rest
• Security in contracting with third-party service providers
• Retention and secure disposal of information
• Acceptable usage policies for personal information
• Governance and regulatory compliance
• Monitoring of access and usage
• Incident detection, investigation and response

When we contract with third parties (for example, PayFast for payment processing, Supabase for authentication and data storage, or RunPod for AI GPU inference), we impose appropriate security, privacy and confidentiality obligations to ensure the personal information we remain responsible for is kept secure.

While we have taken all reasonable steps to protect your information, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security. In the event of a security breach impacting your personal information, we will notify you as required by POPIA and take immediate steps to mitigate the effects.

Disclosure of Information

We may disclose your personal information to our service providers who are involved in the delivery of products or services to you or to us. As specified by POPIA, we maintain written agreements with such parties to ensure they comply with applicable privacy requirements.

We may also disclose your information:

• Where we have a duty or right to disclose in terms of law or industry codes
• Where we believe it is necessary to protect our rights, your safety, or the safety of others

Third-Party Services

Eddie AI integrates with third-party services to deliver its platform. These include, but are not limited to:

• PayFast— for payment processing and subscription management
• Supabase— for authentication, database and file storage
• RunPod— for AI GPU inference processing

Each of these services is subject to its own terms and privacy policies. We encourage you to review them. While we take all reasonable steps to ensure the integrity and security of third-party services we use, we cannot endorse or accept liability for services and products outside our direct control.

Direct Marketing

The CPA gives consumers the right to block unwanted direct marketing and is supported by the Consumer Protection Act Amendment Regulations, 2026, which establish a National Consumer Commission (“NCC”) opt-out registry for direct marketing.

Eddie AI does not currently send unsolicited direct marketing communications (such as cold calls, bulk SMS, WhatsApp broadcasts or mass marketing emails) to consumers in its own name, and does not operate bulk messaging tools. Our estate-agency and other business clients remain responsible for complying with the CPA and the Amendment Regulations, 2026 when they use their own databases to market directly to consumers, including any requirements to register as direct marketers, cleanse their databases against the NCC opt-out registry and honour pre-emptive blocks.

POPIA regulates direct marketing by means of unsolicited electronic communications in section 69. Should our direct marketing practices change in future, we will rely only on consent you have given (or on the section 69(3) “existing customer” soft opt-in route, where all of its conditions are met), and every marketing communication will identify Eddie AI as the sender and include a simple, free way to opt out. Once you opt out, we will stop sending you direct marketing and will keep your details on a suppression list to honour your choice.

Cookies

Our platform may use cookies and similar technologies to enhance your experience, analyse usage patterns and remember your preferences. You can manage cookie preferences through your browser settings. Disabling cookies may affect certain platform features.

Contact Us

If you have any queries about this policy; should you need further information about our privacy practices; should you wish to withdraw consent; should you want to exercise preferences, or access or correct your personal information, please contact us:

• Support: support@eddie-edit.com — for help with your account, billing, data-subject rights, or this policy.
• General inquiries: hello@eddie-edit.com
• Address: 41 5th Street, Voelklip, Hermanus, 7200, South Africa

Annexure — Eddie AI Platform Processing

Eddie AI is an AI-powered photo enhancement platform operated by Capture Video Productions (Pty) Ltd that transforms property photographs and related media into marketing-ready content for estate agencies and other clients.

When you use Eddie AI, we process:

• Account and contact details (e.g. name, email, login credentials)
• Property and media content you upload (e.g. photographs, floor plans, captions)
• Billing and subscription information (via PayFast)
• Team workspace information (e.g. owner, admin and member roles, project assignments, credit-pool allocations)
• Usage and technical data (e.g. IP address, device information, logs)

Eddie AI uses artificial intelligence models to analyse and edit images (for example, sky replacement, lighting enhancement, object removal, virtual staging and day-to-dusk conversion). Depending on the specific feature, processing may take place using models developed or hosted by CVP or by selected third-party providers (including RunPod for GPU inference). Where we use third-party AI services or cloud infrastructure, those providers process media and related data only to deliver the requested edits, under contract, and must comply with POPIA-aligned security and confidentiality obligations.

Edited images and associated data are retained for as long as reasonably necessary to provide the service, comply with legal obligations and maintain records, and may be deleted or anonymised thereafter. If any processing or storage occurs outside South Africa, we will ensure that appropriate safeguards are in place, such as contractual measures, to protect your personal information in line with POPIA.

Your rights under POPIA (access, correction, objection, withdrawal of consent and direct-marketing opt-out) apply to Eddie AI in the same way as to other Eddie AI services, as described in this policy.