Privacy Policy
Last updated: 19 September 2026
In short: We collect only what we need to run GaeHub safely. Landlord identity documents are stored privately, seen only by our admin team, and never shared with renters.
1. Who we are
GaeHub ("we", "us") is a platform that connects landlords with renters looking for rooms across South Africa. We are the responsible party for the personal information described in this policy.
Contact us at [email protected] for any questions about your data.
2. What information we collect
From landlords:
- Name, email address, phone number, and city
- South African ID number and a photo of your ID document
- A selfie of you holding your ID
- Details about the rooms you list (photos, description, price, utilities, parking, etc.)
From renters:
- Name and email (if you sign in to leave a review)
- Reviews and ratings you post
Automatically:
- Basic technical data (browser type, device) used to keep the site working
3. Why we collect it
- To verify landlords — identity verification is required before someone can list a room
- To connect renters with landlords — showing room details and contact information
- To keep GaeHub safe — preventing fraud, scams, and abuse
- To communicate — sending account confirmations and updates you requested
4. How we protect your information
Identity documents are stored in a private, encrypted storage system. They are:
- Accessible only to the GaeHub admin team
- Never shared with renters or other landlords
- Never displayed publicly anywhere on the site
- Accessed only through temporary, expiring links when we review a verification
All data is transmitted over HTTPS and stored on Supabase's secure infrastructure.
5. How long we keep it
We keep your information only as long as needed:
- Account details: while your account is active
- ID documents: while your account is active, and for up to 12 months after deactivation (for legal protection)
- Listings: until you delete them or your account is closed
- Reviews: retained indefinitely (anonymised if you delete your account)
6. Who we share it with
We do not sell your personal information. We share data only with:
- Supabase — our database and storage provider
- Brevo — our email provider (for sending account emails)
- Cloudflare — our DNS and email routing provider
All providers are bound by their own data protection commitments. Your ID documents are never shared with any of these providers beyond what's technically required for storage.
7. Your rights (POPIA)
Under the Protection of Personal Information Act (POPIA), you have the right to:
- Access the personal information we hold about you
- Request corrections to inaccurate information
- Request deletion of your information
- Object to processing of your information
- Lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, email [email protected]. We will respond within 30 days.
8. Cookies and tracking
GaeHub uses only essential cookies needed for sign-in and security. We do not use advertising cookies or third-party trackers.
9. Changes to this policy
We may update this policy from time to time. If we make significant changes, we will notify you by email. Continued use of GaeHub after changes means you accept the updated policy.
10. Information Regulator
If you have concerns about how we handle your data, you can contact the Information Regulator of South Africa:
- Website: www.justice.gov.za/inforeg